Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5qvSw9D9jPyTUSJpa37wjUSOuS4.roa
File: 5qvSw9D9jPyTUSJpa37wjUSOuS4.roa (raw, json)
Hash identifier: xV89oLO+eP/RDja2gpnjhNNs10QnHFZVpCb8Re1aDYg=
Subject key identifier: E6:AB:D2:C3:D0:FD:8C:FC:93:51:22:69:6B:7E:F0:8D:44:8E:B9:2E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274C568A5D11B99B0CE602C9A6E74F
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5qvSw9D9jPyTUSJpa37wjUSOuS4.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6135
IP address blocks: 213.238.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4c:56:8a:5d:11:b9:9b:0c:e6:02:c9:a6:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6abd2c3d0fd8cfc935122696b7ef08d448eb92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:81:06:f6:b1:38:81:ce:08:88:d5:43:66:
d7:21:86:fa:35:c2:26:9d:b9:f7:07:c3:90:7f:d3:
3a:79:a7:b8:d4:a6:e3:71:d9:37:1c:47:ff:44:2d:
ce:02:58:de:f3:26:2e:91:a6:83:46:52:b2:a3:8d:
73:1c:70:67:cc:fc:a6:11:e5:d6:7e:d5:16:47:31:
46:dc:f7:78:36:5d:12:07:46:f2:6e:5e:ca:87:89:
f2:3e:52:06:52:3e:f6:24:7a:4f:ed:32:e3:dd:be:
c4:f3:51:62:fd:d9:cb:28:82:70:d8:cd:32:5e:8c:
19:03:04:2f:fd:23:ed:b6:34:34:05:f9:df:05:3d:
4a:75:dc:69:af:56:13:1f:9f:e2:e9:10:f8:a7:60:
cf:90:bc:92:dc:1d:cf:bc:c9:bc:58:9e:c5:99:65:
c4:16:c8:a3:8b:a0:a4:d8:19:03:4a:41:92:96:9d:
87:bf:f6:53:07:a2:cf:48:69:62:be:af:cb:d2:5e:
fa:bc:6c:bd:30:6d:ec:5a:df:28:f5:31:41:4c:af:
9b:6d:2c:3b:9b:c3:77:d1:17:5c:13:38:9d:19:1c:
70:5b:d4:28:44:cc:67:10:b1:00:b9:52:85:b4:0b:
d3:48:e6:71:4c:7f:e1:40:f3:bc:59:5c:95:2e:6d:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:D2:C3:D0:FD:8C:FC:93:51:22:69:6B:7E:F0:8D:44:8E:B9:2E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/5qvSw9D9jPyTUSJpa37wjUSOuS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1f:f4:0c:7f:53:53:87:62:64:fc:00:c0:73:42:e1:4e:3f:
54:01:39:94:62:a2:4d:ed:06:32:f2:7a:d0:57:bd:ba:c1:74:
65:1c:14:84:64:be:3a:71:b1:fd:23:bb:fe:33:42:d9:2c:f6:
fd:45:23:3f:19:66:8c:13:6c:ae:f1:c2:0f:a6:88:fd:6f:e5:
56:33:f0:5a:e3:52:1a:a9:93:c3:11:87:3a:37:a5:fa:42:91:
de:d1:95:6f:ac:a8:73:5c:f9:ed:14:1e:4b:1c:9d:c5:1a:dc:
17:02:61:aa:82:64:86:a9:49:40:ec:96:25:08:1c:88:69:d8:
c9:2f:42:b0:dd:ec:f6:ac:a8:e3:bb:4f:45:25:6e:83:e6:60:
3b:4d:7b:eb:c6:fe:52:11:5a:14:ea:c6:bc:63:fc:f7:44:bc:
a1:a7:e5:f7:0e:63:cb:20:e2:78:d2:22:08:06:f6:da:66:8f:
a2:1a:8e:f6:25:17:e6:75:e3:26:d3:0f:1a:1e:46:d9:11:ea:
17:54:3d:4f:03:5a:f8:30:5d:dd:97:0a:01:85:0b:d2:8c:c5:
f1:4b:69:45:d2:69:92:d5:56:9c:c0:79:89:fa:28:ea:0a:9c:
ef:d0:97:3c:81:69:9a:2d:cb:40:0a:b4:be:9f:e0:33:19:cc:
4a:b7:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:10:10 2024 by rpki-client on console-ams.rpki-client.org