Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/f5YyuXhiJ8WH7_Fs0KO8GWsksFQ.roa
File: f5YyuXhiJ8WH7_Fs0KO8GWsksFQ.roa (raw, json)
Hash identifier: MakEdnytP7ymxBpTg662jtISG6baHEMeIavYF2/sPkI=
Subject key identifier: 7F:96:32:B9:78:62:27:C5:87:EF:F1:6C:D0:A3:BC:19:6B:24:B0:54
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 018CC2DB065115B619F7E5E1E2460854E3D3
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/f5YyuXhiJ8WH7_Fs0KO8GWsksFQ.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 194.230.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:06:51:15:b6:19:f7:e5:e1:e2:46:08:54:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f9632b9786227c587eff16cd0a3bc196b24b054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:b6:15:45:53:95:a7:2b:3d:f1:a2:6c:6f:
c4:8c:6a:97:49:44:b2:81:76:06:f5:80:0d:7d:82:
cb:c3:f0:f9:c1:f1:18:85:e9:09:7b:78:0e:96:1b:
81:e0:a5:0f:01:eb:35:36:79:9f:d0:22:83:83:8a:
ac:b7:b1:13:5d:51:23:74:0c:91:e9:a1:0f:2b:dd:
bb:07:5a:91:1e:1a:00:0e:4a:28:11:50:e1:43:4b:
91:e0:08:20:c2:f2:64:91:6d:22:b7:68:de:66:e2:
4d:07:5d:55:62:cb:7a:cd:ae:07:dc:10:5a:ab:68:
da:9c:8c:bb:05:e1:47:86:77:d7:bf:24:0b:e2:d2:
b0:11:2b:62:11:d8:59:a4:4a:11:bb:20:9c:93:44:
cd:be:ef:f3:e1:b6:21:5e:c8:19:d7:75:21:ab:02:
85:5b:1f:8e:dc:20:09:0c:c5:ca:7a:e4:84:69:8b:
9d:c0:24:58:af:d3:81:af:09:d1:c6:03:d4:b9:94:
9c:7a:50:f3:ba:32:9c:4d:d0:c6:dd:5f:54:04:e0:
03:1b:e6:15:15:1b:16:54:8e:fc:15:fa:ef:90:29:
38:b8:93:57:13:04:32:2a:4f:80:d6:9a:83:b4:64:
3c:c7:f8:a4:be:27:07:13:a4:85:3d:91:e2:89:3d:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:32:B9:78:62:27:C5:87:EF:F1:6C:D0:A3:BC:19:6B:24:B0:54
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/f5YyuXhiJ8WH7_Fs0KO8GWsksFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.230.56.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e7:9a:bd:96:e1:7c:1b:f7:8d:b4:02:ca:8a:e4:83:90:a0:
95:52:15:48:f6:d2:a1:60:22:d3:07:d2:e4:7e:a1:68:ff:84:
f0:33:9f:da:80:24:07:02:18:a5:e6:3f:41:4b:19:57:34:0d:
bf:a1:24:df:e0:56:72:3c:33:b8:32:43:8a:d7:0a:b1:9a:51:
5b:7a:1b:11:ac:e2:11:a5:d1:f5:78:de:fb:76:ca:47:5f:3a:
3e:c9:93:3b:1b:83:e1:25:6b:e0:12:b4:64:b1:ce:1a:71:d3:
f5:3f:8c:93:5b:31:da:8c:d1:90:df:53:e3:12:d9:34:28:10:
ed:aa:08:9c:eb:a5:2d:dc:f2:07:55:cb:fa:b2:2a:7c:20:7e:
42:57:37:f5:39:9a:5e:4f:70:27:8e:f2:c0:d7:c9:c7:6e:7e:
3f:47:a6:cb:7c:14:41:2e:4f:db:5e:c2:36:43:19:fc:bf:ff:
fd:40:c5:d4:84:23:37:ac:d0:29:42:d1:d3:2c:9b:ed:87:fe:
1b:6a:59:a4:cf:a5:60:25:59:25:e0:35:15:c2:0c:4b:05:50:
fd:f6:74:53:9b:0a:87:96:0b:27:7a:5d:d3:5e:78:7d:ec:94:
08:64:50:9b:a4:a2:51:b6:d2:c4:ee:5a:fb:49:a7:00:3a:02:
b3:5b:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 00:08:06 2024 by rpki-client on console-ams.rpki-client.org