Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9uuuP8abC6bhCDg3N7ZeVgANHBw.roa
File: 9uuuP8abC6bhCDg3N7ZeVgANHBw.roa (raw, json)
Hash identifier: 99bMUKSNI2GnGvmB8w7ri4KYdlzZph4VWTlujtBAJVg=
Subject key identifier: F6:EB:AE:3F:C6:9B:0B:A6:E1:08:38:37:37:B6:5E:56:00:0D:1C:1C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256112C9A17CB0CD6E07D5EC8A12E9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9uuuP8abC6bhCDg3N7ZeVgANHBw.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53340
IP address blocks: 5.182.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:61:12:c9:a1:7c:b0:cd:6e:07:d5:ec:8a:12:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6ebae3fc69b0ba6e108383737b65e56000d1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:d5:01:b5:2c:b4:0a:1f:82:c3:d8:ab:a6:
cf:8d:56:ec:3e:d4:31:31:74:b3:8e:5c:4c:95:dc:
59:35:0c:0c:bb:30:5f:09:4a:83:b1:41:7d:23:1f:
0c:58:ef:82:b7:fd:d7:94:a4:9e:57:fb:d9:03:ae:
8a:4f:c2:bf:53:46:4c:be:65:34:70:f2:d9:13:95:
05:32:be:5b:3d:87:ce:52:47:f0:c9:44:ad:e5:35:
ac:f0:3e:3f:ab:1e:f4:21:43:01:fe:3d:79:36:41:
7c:a3:e5:e0:85:d1:1c:25:b3:60:1a:c2:27:00:98:
2c:cb:92:91:2c:db:93:1b:c9:12:f5:e3:5a:df:b2:
9d:c6:52:ce:99:77:03:dd:a3:c4:f1:52:17:38:a8:
f9:db:8d:97:41:9a:7e:13:05:0e:3e:0c:27:90:9b:
a8:0b:05:a6:01:10:c7:30:81:52:4f:45:1b:46:de:
ea:50:98:04:70:ec:51:a3:a5:96:b9:d0:36:6c:45:
dc:ac:8f:00:a3:f6:81:5b:5c:53:37:4f:81:dc:b3:
6e:15:59:db:b0:87:48:16:b7:45:99:8f:fe:69:9c:
d4:5b:2d:11:8b:eb:dc:85:50:0b:79:e9:3f:41:89:
d6:b3:1f:e0:98:12:ce:ca:50:55:ad:b6:20:56:3f:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EB:AE:3F:C6:9B:0B:A6:E1:08:38:37:37:B6:5E:56:00:0D:1C:1C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9uuuP8abC6bhCDg3N7ZeVgANHBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:aa:b8:d8:3e:7a:c8:8c:e9:fa:d9:d7:0c:78:32:85:0f:48:
e5:1c:44:68:2a:58:1e:a8:6c:42:89:e0:12:c0:ff:a6:51:78:
7c:74:40:08:fd:cc:e8:b1:82:73:24:c7:6d:12:86:92:fc:3e:
21:16:e3:90:a6:31:5e:98:15:ab:8e:f8:d6:88:36:e8:57:57:
30:c7:c4:e0:c9:67:a5:e9:94:e1:f7:78:57:16:ae:9e:0d:59:
e5:ca:d5:2a:7b:ac:0c:3c:aa:4d:7c:75:5a:41:8f:98:e0:55:
7a:60:1e:17:6f:00:90:a7:9c:cd:68:33:34:70:51:0a:7d:84:
6d:03:49:47:a2:4c:89:5b:3e:50:e0:2f:75:e0:c6:1f:5d:ef:
fb:b0:43:7c:f2:38:30:f8:e3:cb:89:8f:81:92:38:5c:30:d3:
50:6c:14:55:a8:a4:40:b1:17:1a:3e:e6:8e:b3:9d:34:83:58:
58:fc:a7:7d:6d:fe:48:62:48:de:b8:b2:8a:36:3e:ae:84:57:
24:bd:e0:6b:cf:db:87:9b:f2:ec:6e:07:b3:b4:06:a6:03:12:
f5:d7:a4:e8:61:eb:6c:ae:bd:cb:4c:f8:9e:f5:cd:e9:61:4f:
b1:08:1e:7f:c1:10:ea:bb:8d:3d:13:cb:10:0e:9d:50:c9:df:
1f:4e:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:42:03 2024 by rpki-client on console-fra.rpki-client.org