Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_PDuFHWDNKO7vXcUlsbjD8-SBA.roa
File: e_PDuFHWDNKO7vXcUlsbjD8-SBA.roa (raw, json)
Hash identifier: YKqQWquoGpR/Vtk35XVYMEGQzjBnzhkeKXtFBJjfpMg=
Subject key identifier: 7B:F3:C3:B8:51:D6:0C:D2:8E:EE:F5:DC:52:5B:1B:8C:3F:3E:48:10
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019383E60516ED322735F7A8072B21BF62BA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_PDuFHWDNKO7vXcUlsbjD8-SBA.roa
Signing time: Sun 01 Dec 2024 20:25:10 +0000
ROA not before: Sun 01 Dec 2024 20:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213915
IP address blocks: 5.83.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:83:e6:05:16:ed:32:27:35:f7:a8:07:2b:21:bf:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 1 20:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf3c3b851d60cd28eeef5dc525b1b8c3f3e4810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:2b:e2:1f:d2:81:8c:5b:6c:3f:45:bf:96:
c7:fd:77:bc:9f:e0:43:d3:07:84:9e:d1:83:ee:e4:
cf:73:a9:0d:21:8d:4d:f4:ae:89:c2:9f:cb:79:29:
18:fd:85:69:45:28:f5:19:94:38:1a:ab:01:e4:e6:
dc:d1:bf:c2:d9:a7:8d:32:75:e6:fc:9d:28:87:95:
94:0c:3d:a8:2f:68:7f:90:8d:40:84:12:46:b0:c9:
4e:d2:28:7e:aa:79:5b:33:fd:df:80:3e:71:4c:d7:
a9:53:73:4d:db:50:c0:39:f8:07:0a:b5:fd:9d:43:
fd:85:02:57:73:05:3d:0a:a4:48:e5:c7:eb:7f:b1:
1f:4c:98:fd:ef:84:b3:4e:d4:dd:7c:4e:e0:9a:dc:
74:e0:be:56:99:55:16:11:3b:02:03:2f:7a:fd:ec:
84:7b:ef:4a:68:92:80:1b:e8:0c:58:99:43:ee:80:
51:05:f6:c8:b1:e2:80:5d:9c:e7:c5:de:6d:57:0e:
1c:dc:c9:4f:f3:05:50:3d:f2:9e:f9:e5:16:73:6b:
f1:b2:66:b9:7f:ff:7c:76:d2:e4:eb:55:cc:c5:95:
f9:c0:9a:9d:3a:75:cf:20:3a:a1:d4:de:97:fd:6d:
63:17:de:d5:fd:da:56:fd:e7:a6:8d:f9:5a:ab:6e:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:C3:B8:51:D6:0C:D2:8E:EE:F5:DC:52:5B:1B:8C:3F:3E:48:10
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e_PDuFHWDNKO7vXcUlsbjD8-SBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.154.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a1:81:d2:fb:5e:cd:aa:52:bb:47:7f:8c:88:8a:07:5e:4f:
11:e4:23:df:50:db:c0:06:b9:6e:05:7b:15:be:41:53:3e:7a:
88:f1:2a:5d:c4:e3:2a:87:28:00:de:7e:7b:88:4d:d8:96:47:
0a:7e:64:28:ea:a2:96:5c:7f:6e:c8:9f:51:4c:0b:61:37:89:
f0:e6:b7:f0:7d:36:b4:de:9e:c4:41:e2:d3:24:bf:c6:27:e4:
2b:5b:83:a6:d1:3e:5f:34:96:48:bb:17:7a:26:51:aa:93:e0:
cc:77:a1:40:d8:d6:2f:ad:a7:8d:f1:d4:3c:91:35:32:f8:86:
e1:fa:35:e0:67:38:82:ab:b9:45:90:bd:27:20:a5:5b:21:d1:
50:c7:8f:a4:5e:9b:9c:f3:19:c8:7b:77:ce:37:cf:1f:39:19:
e7:e1:da:c6:fe:fb:d1:5b:45:1f:56:a4:df:bd:29:b2:87:b6:
0c:77:e7:20:4f:37:f6:2e:96:d0:45:cb:57:3c:7f:d5:58:9a:
32:ba:57:02:44:1e:dc:fb:c4:94:6b:55:32:37:18:ea:fd:24:
02:6e:2e:1b:07:1c:8d:a7:54:37:b7:cd:d7:85:4a:83:a2:18:
6e:b3:50:6f:c1:9d:cb:b1:db:3a:b5:d4:02:d7:58:06:bd:65:
ae:d5:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 02:10:51 2024 by rpki-client on console-ams.rpki-client.org