Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sJu6clnqwpriga4g7nnCbUDPkFU.roa
File: sJu6clnqwpriga4g7nnCbUDPkFU.roa (raw, json)
Hash identifier: 5YpfF5vQd1AJbIYVO5qQpgw9crWz4IyOFiy09hdLuA4=
Subject key identifier: B0:9B:BA:72:59:EA:C2:9A:E2:81:AE:20:EE:79:C2:6D:40:CF:90:55
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191AC74D2A19179891D5033345175DEC2F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sJu6clnqwpriga4g7nnCbUDPkFU.roa
Signing time: Sun 01 Sep 2024 07:20:22 +0000
ROA not before: Sun 01 Sep 2024 07:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214564
IP address blocks: 5.83.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ac:74:d2:a1:91:79:89:1d:50:33:34:51:75:de:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 1 07:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b09bba7259eac29ae281ae20ee79c26d40cf9055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:ba:69:13:ad:dc:78:a5:40:54:32:ae:41:
2a:05:0e:52:a6:ae:46:a5:28:c1:a0:1d:bf:1d:0b:
b8:b1:f1:4b:74:0f:16:c9:3b:29:13:3d:1e:6b:92:
7c:94:05:11:e9:6c:8a:eb:bf:05:01:fe:74:b7:28:
d8:7c:9a:d8:fe:81:48:ca:ea:a1:a7:26:10:18:e8:
5f:5c:14:59:34:93:91:3b:c8:88:b4:1f:8e:05:e3:
b4:cf:b2:00:05:cd:54:f8:2f:e5:95:70:cf:a1:57:
cb:8b:4c:f6:eb:c3:58:c3:64:1a:b4:98:af:0f:83:
db:a2:18:18:99:8b:3f:ed:59:67:3b:fb:99:9d:ab:
57:63:cf:f9:2c:d6:50:02:d9:a3:a7:24:e1:16:f6:
38:9c:63:17:3b:78:d1:92:f2:5a:93:c0:40:87:f2:
83:c1:dd:9a:cd:2b:05:43:0b:35:e7:9f:3a:13:51:
a1:a4:45:1d:85:e6:7f:27:ce:a1:13:71:c3:2f:17:
3d:dc:d7:de:47:cf:e1:2c:d3:92:2d:5d:1f:ef:a9:
4c:16:24:90:15:d5:08:29:4c:70:95:b0:db:10:dc:
60:88:bc:9c:08:89:aa:e6:48:e9:15:8f:6b:f3:a7:
8b:37:5a:86:2d:f1:65:a1:d2:7c:e9:b4:49:f4:79:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:BA:72:59:EA:C2:9A:E2:81:AE:20:EE:79:C2:6D:40:CF:90:55
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sJu6clnqwpriga4g7nnCbUDPkFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:95:ec:71:78:c4:8a:05:67:34:a9:df:45:4d:6f:2b:60:5b:
5a:dc:11:28:4e:5d:2f:fb:a1:d8:84:45:e9:65:2d:04:a6:4f:
28:0a:f5:06:74:50:bb:9b:39:5e:93:a5:73:df:f2:13:c7:0a:
f7:21:da:87:11:3a:11:88:2f:a3:d9:46:66:42:8c:26:da:25:
c2:b1:49:bc:53:1f:df:d7:03:f2:a8:99:78:5c:2f:dd:a3:20:
68:98:a2:1c:e9:49:59:92:19:e9:7d:7b:b7:aa:07:10:48:7f:
1a:34:aa:ae:38:33:d6:8d:34:8e:fb:f9:04:92:d9:ef:af:ce:
85:40:68:a7:ab:1f:35:e4:2d:85:d2:80:99:6c:ae:eb:85:c2:
df:d1:78:f7:03:c6:7e:d0:ce:a3:71:ef:53:83:2b:04:31:84:
9c:d1:f4:c9:84:0d:fa:62:85:93:ed:43:5d:5e:03:07:94:9e:
0b:98:0d:89:cb:1c:42:61:f5:e5:c6:6a:0b:b7:93:38:e1:45:
25:ff:7c:60:c9:2b:2e:80:63:b6:4c:08:13:50:14:f4:8d:49:
cc:5b:ae:da:9a:2b:0f:66:3e:49:f4:e3:0d:2b:14:ff:54:69:
e7:32:72:69:8a:39:da:13:8a:64:e5:da:66:0a:d7:68:38:bd:
f3:ce:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org