Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa
File: te5bNKnsPKJsJIOpjdpdUzfmYCc.roa (raw, json)
Hash identifier: y/jFgLlSl9YaZ52iSmxKyOnfw/BFISocjiKcO8H9YD4=
Subject key identifier: B5:EE:5B:34:A9:EC:3C:A2:6C:24:83:A9:8D:DA:5D:53:37:E6:60:27
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 018CC26D2DEB24110EC1182CDC7167EE05C6
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213113
IP address blocks: 93.177.80.0/24 maxlen: 24
2a0a:d981::/32 maxlen: 32
2a0a:d980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:eb:24:11:0e:c1:18:2c:dc:71:67:ee:05:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ee5b34a9ec3ca26c2483a98dda5d5337e66027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:06:53:ff:49:0c:0b:32:d1:f4:ce:fa:b8:
fc:70:bd:b6:a0:c6:d0:86:eb:ff:c6:e7:2f:da:60:
ee:e0:04:56:f6:62:d0:26:00:f1:31:98:e1:7d:86:
82:43:0b:16:dc:73:60:fb:fa:01:62:23:ac:6a:56:
f0:94:f5:40:81:06:55:8d:c5:88:e1:72:1f:12:ee:
8d:52:1b:d4:66:1b:fc:b2:b3:89:ac:54:bd:55:d4:
83:77:af:49:b9:b7:e2:7f:74:19:3f:b9:94:6b:07:
48:e5:20:c6:c6:51:e4:52:22:15:60:b8:42:82:7b:
4d:cb:3d:1f:6a:cc:02:2a:f9:4d:39:36:01:17:9c:
93:03:b3:67:fc:80:1b:cf:56:35:1e:a6:22:62:92:
1a:43:a5:dd:7e:69:1f:3f:0b:19:ac:c1:e0:2e:5f:
d9:4c:d1:e1:e0:f3:a2:71:e3:5f:d4:10:c7:b2:12:
56:db:09:a6:e7:93:5f:74:97:02:1d:c5:e7:22:7c:
0e:7b:da:0d:2b:73:92:f2:ba:0b:15:50:90:05:92:
d7:e3:62:77:30:77:18:1d:12:52:67:d9:aa:34:90:
70:a0:e9:6d:ee:fe:19:73:f3:56:ba:a0:d4:43:81:
14:3d:37:77:0c:b6:45:3b:2a:ed:85:ae:f9:d6:12:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:5B:34:A9:EC:3C:A2:6C:24:83:A9:8D:DA:5D:53:37:E6:60:27
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/te5bNKnsPKJsJIOpjdpdUzfmYCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.80.0/24
IPv6:
2a0a:d980::/31
Signature Algorithm: sha256WithRSAEncryption
54:d2:33:42:f4:2c:93:81:55:f9:2f:13:9a:bd:55:a3:79:fc:
8c:3b:53:16:d9:67:b7:58:dd:86:d1:c4:95:f2:26:eb:f2:1d:
fd:14:10:de:2f:42:26:fa:16:16:f1:47:67:99:d0:1e:ab:6a:
65:53:64:f0:45:77:e5:4f:19:ee:4c:1e:38:b2:9c:03:ce:a7:
2e:e3:cd:b0:51:12:fe:8f:f3:a9:fb:84:86:9f:73:c5:99:10:
24:33:b9:31:a6:7a:b9:f0:ee:a2:9f:fd:4e:83:84:d8:0f:23:
45:6b:17:a9:b5:2f:73:a8:51:8d:f7:5c:49:e6:69:36:1f:17:
5d:bc:15:71:3e:a2:ff:32:81:52:73:f5:aa:f8:9b:be:b1:45:
3f:16:42:d5:d6:46:1f:e9:45:0a:86:c4:53:8a:9c:26:2c:f9:
85:1a:2e:b9:15:18:a4:61:48:53:b0:30:17:d7:8c:cb:8e:50:
43:89:52:7f:17:21:4b:04:3c:8d:71:64:9b:1d:43:d3:c6:97:
34:a5:9f:6e:c3:d6:0f:85:4d:69:4f:8a:19:a4:99:8f:9a:86:
c5:fe:a5:f5:28:ba:13:66:68:5f:a5:46:b0:42:9e:63:cc:75:
c5:47:e6:7e:e8:fd:a2:7f:4b:dc:fb:6e:58:53:42:26:bb:d4:
7b:bd:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:58:14 2024 by rpki-client on console-fra.rpki-client.org