Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/5AVBhDjeJ3_0QeB5kDiqfq1drh8.roa
File: 5AVBhDjeJ3_0QeB5kDiqfq1drh8.roa (raw, json)
Hash identifier: bBlEhIJ1NuWxXOoUzMvTsvjJYCMDlnUdL6v15Mso5L0=
Subject key identifier: E4:05:41:84:38:DE:27:7F:F4:41:E0:79:90:38:AA:7E:AD:5D:AE:1F
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 018CC349535FEA06FB7B6D16B07BC033E0B8
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/5AVBhDjeJ3_0QeB5kDiqfq1drh8.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61141
IP address blocks: 217.29.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:5f:ea:06:fb:7b:6d:16:b0:7b:c0:33:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e405418438de277ff441e0799038aa7ead5dae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:49:d9:06:0b:62:71:85:9e:cc:63:01:b9:
9c:03:63:e9:b7:5d:6b:38:bd:a8:98:6a:f3:78:b8:
4f:02:55:57:9e:55:36:56:06:a0:29:ca:2c:ad:85:
dc:30:31:73:ee:1a:a8:21:f7:65:34:49:25:f5:c1:
c0:70:64:35:f4:9a:b5:11:ec:04:b5:17:8e:48:ba:
27:36:24:4c:5a:9d:64:eb:cb:f6:6c:07:0c:49:1b:
67:ca:09:2d:cd:0c:29:f2:d7:c4:2e:dd:06:d6:56:
67:a2:3d:63:91:a7:ea:b1:36:c5:09:e9:3d:65:28:
78:66:23:65:50:b6:dd:53:fd:e2:a5:1f:2d:21:3f:
33:a0:f1:02:03:79:bf:d2:c3:94:34:15:94:6f:41:
8e:94:54:d4:02:44:d6:6d:63:78:aa:ca:d0:4d:d1:
07:53:ef:86:9e:95:91:ca:03:94:fb:af:80:76:7b:
c4:cc:21:42:c9:19:67:a9:c7:c3:8b:d2:c0:4a:a4:
7e:fd:55:13:a3:e8:17:3f:a2:b6:0e:d0:b6:fc:4c:
65:bd:af:0f:95:dc:98:36:1c:43:87:42:ba:3b:b9:
7d:cd:9f:1f:7d:94:ae:25:f4:aa:ad:2e:8a:c4:e5:
26:c2:e9:dc:c1:56:46:9f:a3:a4:e6:22:89:cc:9a:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:41:84:38:DE:27:7F:F4:41:E0:79:90:38:AA:7E:AD:5D:AE:1F
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/5AVBhDjeJ3_0QeB5kDiqfq1drh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:75:b7:0b:2d:5f:e0:54:b8:90:e5:16:12:2f:18:4b:94:50:
61:91:a7:10:68:20:f7:f5:29:5d:92:34:7e:dc:b2:5c:df:e4:
d2:1d:69:40:61:48:58:db:b9:a0:d7:e1:b7:0e:76:8f:92:17:
7f:e8:cd:c0:f8:f6:60:88:c9:18:13:7f:20:d3:df:d8:b5:e2:
aa:1e:66:6e:dc:70:f8:eb:1a:e3:82:5b:40:46:62:02:fd:a5:
3d:ef:c0:5d:56:22:60:df:46:c1:12:3a:14:8e:db:52:56:eb:
91:7a:2c:1f:ae:4e:0b:98:ab:48:a6:75:ce:1a:41:e7:13:63:
e5:10:9e:83:35:aa:5f:f5:81:04:2d:8f:8e:0b:4e:d6:58:9d:
c8:26:26:e2:e6:d9:4c:63:53:6a:51:5a:b6:71:aa:a1:91:fd:
ee:db:e0:f2:e0:f6:b4:c4:e1:e1:a4:9e:79:eb:d5:15:7c:ca:
3d:7a:64:d0:28:a7:2b:41:ad:bf:1b:a2:c8:c7:0a:61:f0:65:
8e:e2:a5:2b:b1:e6:3e:8e:6e:9f:46:3d:bc:79:49:8c:8d:3a:
86:b1:b9:da:12:0d:e5:21:59:f3:f1:3f:07:5f:d0:75:90:1f:
6f:66:81:27:bf:30:3d:45:ec:41:a1:dd:e8:0e:ea:a6:87:9b:
d8:ee:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:05 2024 by rpki-client on console-ams.rpki-client.org