Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/f4du952mG7voblxBazx5ujmITWY.roa
File: f4du952mG7voblxBazx5ujmITWY.roa (raw, json)
Hash identifier: P+UtA3XzQwDV9nFtYDVzSg1jnFxX6NnUWf6p4T9hTG0=
Subject key identifier: 7F:87:6E:F7:9D:A6:1B:BB:E8:6E:5C:41:6B:3C:79:BA:39:88:4D:66
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018EF22F3EBC514433AE770711340100C352
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/f4du952mG7voblxBazx5ujmITWY.roa
Signing time: Thu 18 Apr 2024 17:09:26 +0000
ROA not before: Thu 18 Apr 2024 17:09:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215623
IP address blocks: 5.42.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:2f:3e:bc:51:44:33:ae:77:07:11:34:01:00:c3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Apr 18 17:09:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f876ef79da61bbbe86e5c416b3c79ba39884d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:04:b3:18:bf:0d:5f:64:7f:1f:5f:27:b3:
2f:95:41:0d:c8:0b:7d:74:bb:37:05:d0:df:62:6b:
50:e8:2f:4f:10:97:61:77:10:0e:c3:cb:2d:c6:1f:
7e:9e:a0:0e:97:b8:f7:2f:29:d4:4e:61:eb:07:54:
4f:b0:c4:19:79:f3:b8:f2:88:09:f9:a9:d9:c1:b3:
a7:e3:f1:4f:dc:8e:48:d2:0e:9c:7d:02:7f:2c:88:
ee:70:22:b7:ee:6d:4c:12:df:5f:dd:e0:3d:19:7b:
a2:ff:4a:9b:0c:a1:84:6e:64:ee:15:43:a8:68:7e:
7b:f1:49:bd:11:2b:ff:80:52:0c:37:85:0d:3f:df:
d9:fb:31:3a:eb:0e:f6:08:43:b0:db:a9:81:54:2f:
b9:db:43:90:08:0a:ae:b0:93:97:1a:ca:94:49:a8:
a9:b8:a9:40:be:a2:4e:c2:ea:79:cb:76:f1:c4:eb:
92:61:d5:20:bc:9c:f6:93:f0:a5:f8:19:85:01:5b:
e2:89:a1:ea:4e:2e:9c:07:f0:57:62:7f:05:61:98:
21:e6:c2:62:50:49:e2:0e:16:81:f6:a9:3c:25:81:
97:24:69:70:4e:1a:b7:5d:2d:f5:b1:f4:1c:32:16:
90:4b:95:f3:84:8b:a1:a9:db:f9:e7:20:2a:09:70:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:6E:F7:9D:A6:1B:BB:E8:6E:5C:41:6B:3C:79:BA:39:88:4D:66
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/f4du952mG7voblxBazx5ujmITWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.213.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b4:cf:a7:e7:99:8a:da:f2:83:83:a4:b6:c6:89:16:78:ce:
69:36:cf:c3:11:22:63:8b:7a:28:91:bd:ac:6f:2d:8b:22:64:
11:d5:8c:bf:b5:bf:0e:92:0e:10:fa:c1:fe:41:06:7a:37:53:
c9:80:19:43:0e:4f:ea:23:8f:f7:f3:9f:bd:1d:2b:f5:ba:aa:
ba:79:27:3d:49:00:74:e3:3c:a9:aa:04:55:ca:c1:01:09:06:
62:74:13:23:a8:79:ba:d5:7c:0f:df:85:a0:b9:44:b7:bf:20:
4c:b9:14:ea:45:c9:6d:5c:38:7f:a2:dc:cf:e8:39:b9:73:36:
3f:25:0e:17:4b:6d:a3:5d:84:0c:51:5a:3f:c1:f8:89:d5:c2:
c0:2c:0a:06:10:09:54:8f:d1:b4:d4:de:22:c4:36:6f:a1:72:
63:0b:cc:b9:32:dc:4e:2e:46:29:d4:cc:0d:83:48:00:f7:65:
eb:ef:cc:8c:6e:ba:cc:9a:79:9f:a1:61:80:6f:9e:6b:23:95:
79:df:68:9b:22:c1:a2:6e:ef:0b:bc:7e:85:11:47:90:e1:31:
75:22:d3:cb:95:76:e8:0f:b1:4f:f7:c7:17:b2:ca:4f:05:14:
3a:35:71:18:96:ae:53:b8:1a:e6:28:5f:5b:c9:72:7b:19:20:
63:c9:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:44 2024 by rpki-client on console-fra.rpki-client.org