Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p5WCryu62vCWVvtCwakz2Ds8_2w.roa
File: p5WCryu62vCWVvtCwakz2Ds8_2w.roa (raw, json)
Hash identifier: An6BugxgEbWhppqcbmCJuBweim0efY87rTNnh7PRr3c=
Subject key identifier: A7:95:82:AF:2B:BA:DA:F0:96:56:FB:42:C1:A9:33:D8:3B:3C:FF:6C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018E22EB9E6A811688384614C9DBC59A031C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p5WCryu62vCWVvtCwakz2Ds8_2w.roa
Signing time: Sat 09 Mar 2024 11:14:10 +0000
ROA not before: Sat 09 Mar 2024 11:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 91.190.63.0/24 maxlen: 24
159.148.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:eb:9e:6a:81:16:88:38:46:14:c9:db:c5:9a:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 9 11:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a79582af2bbadaf09656fb42c1a933d83b3cff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:56:20:2d:c8:d0:e7:43:c7:73:ba:d5:e3:
9f:65:35:d5:c7:3a:f4:9a:75:7b:17:f9:8a:4a:96:
cb:c9:d1:6d:27:7b:c2:be:1a:f9:16:dc:5f:a0:08:
c7:d2:38:b9:62:48:05:f0:23:9d:bb:37:92:01:04:
cc:f9:5c:ca:9c:72:02:a8:1c:05:ec:ca:06:bf:02:
4b:55:df:a6:a8:f2:13:a9:46:e1:d2:9a:df:84:94:
6a:19:11:a7:9f:0b:77:b8:78:ce:11:a5:27:8c:04:
85:9c:35:f6:2c:7a:f1:3e:b9:32:7e:6d:71:3d:85:
b4:5a:b0:34:6b:ba:48:20:5f:bb:d0:9a:6f:17:ee:
cf:5d:e3:55:3c:6e:4c:28:bd:db:1f:24:e4:8c:05:
25:a9:90:71:ae:a2:47:56:82:18:2e:3c:7f:e3:22:
86:c1:55:80:7a:56:94:53:54:8f:8b:49:cf:d4:68:
61:a5:44:50:c8:7b:f8:3f:8e:01:3e:96:d1:bb:e4:
34:48:1b:69:74:5e:b1:5e:96:3a:57:9a:dc:92:bf:
6c:66:de:cf:6c:0d:30:41:d6:88:50:cc:67:90:5c:
3f:a6:4d:d7:31:e0:f3:93:92:b9:78:63:1c:cb:15:
b3:f9:7e:85:92:80:51:a6:c3:70:b2:9e:a0:4b:0f:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:82:AF:2B:BA:DA:F0:96:56:FB:42:C1:A9:33:D8:3B:3C:FF:6C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p5WCryu62vCWVvtCwakz2Ds8_2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.63.0/24
159.148.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:95:78:56:19:81:4e:39:04:7f:09:34:ec:c0:38:13:ff:ff:
81:3a:75:90:01:01:5f:3b:f9:50:9e:d9:d5:dc:29:b0:e4:e9:
3f:da:80:c5:d5:02:30:fd:88:c9:9d:5a:77:aa:b9:0b:a6:b8:
13:cc:b1:aa:99:47:ee:59:8f:e1:8a:0c:6e:5a:fe:1f:ef:11:
c1:a7:e3:a0:fa:5d:c6:8d:0b:48:5e:2f:5d:ec:c2:7f:f9:d0:
5f:ba:af:bc:56:11:65:a8:f0:40:99:ce:97:b4:d9:55:a7:76:
e7:8e:b1:ee:db:ac:fe:ed:e2:07:1f:ae:91:ee:73:c2:82:38:
cb:cf:09:7b:69:b7:11:99:72:86:94:49:9a:0f:a1:32:89:35:
04:d2:1c:11:4b:dc:c4:ba:58:8f:31:c7:2f:a0:5b:11:a6:b8:
32:c6:8f:57:26:de:6d:1f:83:ec:ed:05:81:84:3e:3c:1d:6b:
df:3b:6e:33:ee:c9:09:4b:c2:14:18:a5:e6:45:e8:d0:ee:21:
35:ca:2c:e4:45:8c:6c:a8:0f:dc:47:07:74:b3:41:5a:64:4d:
52:ab:bf:9b:6f:36:b2:8a:5d:f0:a0:b6:3d:3c:09:ad:07:4d:
51:43:2a:67:95:63:17:62:c2:c9:f9:a0:b6:5f:3c:80:04:73:
81:88:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:35:54 2024 by rpki-client on console-fra.rpki-client.org