Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/5TjM7-7Zy0bGir__0rrviZU0gfs.roa
File: 5TjM7-7Zy0bGir__0rrviZU0gfs.roa (raw, json)
Hash identifier: 12iNbOREykK8D0tVZCXAr6KXsbVUH1RZAfi/BK67BO4=
Subject key identifier: E5:38:CC:EF:EE:D9:CB:46:C6:8A:BF:FF:D2:BA:EF:89:95:34:81:FB
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 018CC794B027FD6EECCF4B0445B4A6F961FC
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/5TjM7-7Zy0bGir__0rrviZU0gfs.roa
Signing time: Tue 02 Jan 2024 00:30:59 +0000
ROA not before: Tue 02 Jan 2024 00:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8874
IP address blocks: 194.120.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b0:27:fd:6e:ec:cf:4b:04:45:b4:a6:f9:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Jan 2 00:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e538ccefeed9cb46c68abfffd2baef89953481fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:64:12:bf:3d:6e:38:b4:82:06:82:55:d9:
38:b9:ef:4e:e9:dc:5a:b9:1d:88:e0:b3:8d:a1:b9:
09:31:f1:a7:24:1d:45:40:d2:76:1e:56:b9:7f:98:
81:6a:c9:a0:bf:1d:d2:c7:85:02:5f:f4:ed:10:69:
6b:3a:0e:93:7f:16:5d:ae:b9:35:46:bc:85:ea:06:
32:0a:99:60:e1:c3:7e:29:35:2b:46:e6:27:68:a1:
5d:88:cb:89:9a:76:e3:01:bb:4a:37:a9:82:58:0f:
78:de:bd:e3:c9:7b:92:a5:15:7d:4f:06:10:e7:11:
0c:6f:8c:1e:6f:30:3c:c3:34:11:15:52:a7:05:de:
7a:f5:19:6a:18:58:9e:fa:bd:b4:33:f2:5a:d4:9e:
31:70:2f:0c:31:6a:f4:0e:78:fc:0d:9a:0b:b3:d7:
e0:f9:04:0b:50:48:3f:4c:a7:ac:e2:26:3f:ba:55:
4d:6a:2e:dc:05:db:70:64:f5:f9:f1:a3:56:83:7c:
e9:d5:b2:36:ea:b9:6b:95:24:51:48:fe:09:4e:40:
06:ac:1e:54:56:88:8e:9d:7f:85:b3:65:58:95:a1:
9b:fd:cb:d8:ac:f2:f6:2c:4b:da:77:5d:c8:88:c1:
35:43:83:22:fa:07:e7:dc:41:a9:99:93:d3:f2:bd:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:CC:EF:EE:D9:CB:46:C6:8A:BF:FF:D2:BA:EF:89:95:34:81:FB
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/5TjM7-7Zy0bGir__0rrviZU0gfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.55.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2a:be:69:81:39:d6:98:3a:3a:94:2a:a2:49:8f:4b:17:0b:
eb:48:00:8d:dd:24:f3:b6:d2:e1:d0:67:ed:10:51:ee:7b:23:
aa:72:c9:d0:44:17:55:f8:06:68:a4:5f:04:a9:46:06:da:da:
4e:45:9d:47:83:35:b1:a9:7a:c5:64:9a:39:27:bb:a8:f9:6f:
8e:b2:d5:06:c1:15:20:e2:91:da:7f:97:13:d9:01:ee:01:b7:
e6:96:6b:e4:e8:71:50:08:ce:a4:69:79:78:4c:6f:bf:27:05:
f9:21:57:2a:a4:05:77:7e:89:30:75:ff:b2:91:1c:47:cc:80:
b3:a3:2c:5a:83:b7:9f:6b:ff:ae:54:4d:c7:53:1b:f4:dd:95:
03:5f:f1:d4:7e:7f:9b:97:bd:ff:00:b8:86:4e:29:aa:c6:a1:
fb:9c:88:09:b2:19:f6:8d:e5:b3:cc:e9:aa:74:8d:00:44:21:
86:1f:ba:15:bb:ee:19:65:eb:25:dc:3b:36:f6:f9:1c:49:90:
4d:f7:0a:7e:10:3e:27:74:22:d0:07:c3:a9:ff:b2:05:24:7a:
64:6d:f1:75:cf:a1:09:b1:f6:b7:d6:51:be:e7:ea:69:d6:11:
90:ce:4e:9b:61:2f:38:ba:39:bb:1e:96:b3:8d:d8:48:99:52:
d2:80:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:51 2024 by rpki-client on console-fra.rpki-client.org