Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ioAoDMSBGTRSCCN8rUEamXWli7A.roa
File: ioAoDMSBGTRSCCN8rUEamXWli7A.roa (raw, json)
Hash identifier: 8h18FiS1GBl9Mai3nfoc4uEtZpFDFvnhRLE2xCZ9hPE=
Subject key identifier: 8A:80:28:0C:C4:81:19:34:52:08:23:7C:AD:41:1A:99:75:A5:8B:B0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45868F775FB98E0D1FAE6282DB91B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ioAoDMSBGTRSCCN8rUEamXWli7A.roa
Signing time: Wed 07 Feb 2024 18:11:16 +0000
ROA not before: Wed 07 Feb 2024 18:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42260
IP address blocks: 5.1.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:58:68:f7:75:fb:98:e0:d1:fa:e6:28:2d:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a80280cc48119345208237cad411a9975a58bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:49:24:8f:d6:02:ea:2e:cc:26:39:90:dd:
23:f3:eb:99:26:f0:2e:51:3d:2d:e7:e6:ab:0f:bd:
5f:d3:03:2a:33:a2:ac:27:63:6f:c9:1d:da:49:ac:
59:eb:5c:c9:ab:5f:86:84:a2:1f:2a:92:66:c2:e4:
7c:24:05:43:39:76:c3:a7:51:40:96:16:13:dc:50:
ff:50:05:db:84:24:53:fa:8c:e4:b6:5b:84:6b:33:
93:35:32:26:c9:bb:af:37:0e:aa:39:c7:6e:b3:27:
a1:6e:03:c2:fb:e3:26:5d:5b:93:7b:c8:6d:76:d3:
6c:06:95:16:aa:5f:fa:db:69:dc:c8:56:9b:c4:26:
18:f0:a5:3f:af:45:bf:7d:cd:4d:84:a4:39:ca:80:
40:8c:b7:b1:93:64:1c:81:c1:3b:ef:a0:18:1f:3b:
bf:7c:57:fb:9d:84:23:74:53:de:c8:ca:cd:2a:0c:
f7:62:d6:f8:8f:d4:76:ed:f1:c0:76:7c:e4:82:05:
eb:b4:3c:7f:d2:31:7b:2a:df:d0:f4:a1:9c:ce:dd:
f8:61:53:31:88:f1:d1:40:13:78:cd:3d:71:0e:52:
64:6c:01:be:d9:38:e0:20:dc:e8:3e:ef:1a:b2:c2:
43:ba:c6:04:68:d0:ea:cd:9a:f9:a3:ac:6b:3f:0b:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:28:0C:C4:81:19:34:52:08:23:7C:AD:41:1A:99:75:A5:8B:B0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ioAoDMSBGTRSCCN8rUEamXWli7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c9:56:1b:b3:df:d5:e4:9c:9a:72:6b:ee:51:99:48:a4:3c:
b3:9b:c8:36:8f:60:bd:a3:e0:0f:11:83:30:56:16:64:cc:99:
84:08:f4:1a:ea:4d:95:c7:07:7a:bd:bf:ac:2b:6b:a0:a3:84:
bb:ba:e6:bd:c1:5b:53:3e:de:57:55:b9:12:6a:58:e2:6a:9a:
4a:b0:db:42:25:d0:9a:81:12:22:53:dc:8c:ab:39:fc:bc:23:
23:ac:53:3a:0e:dd:a0:7b:34:48:7b:cc:06:05:55:55:9f:7e:
0a:2a:44:f2:53:0d:eb:47:f2:e6:d2:db:69:ba:57:98:32:bd:
93:76:8f:21:ff:d9:0a:84:64:5a:e9:a0:43:7d:8c:60:fd:9d:
43:03:f0:31:23:aa:87:be:59:53:ee:49:30:21:3b:19:cd:54:
5e:9d:51:30:2c:f6:3f:67:c6:d8:44:e5:b2:cc:ec:ac:c1:13:
a2:70:09:01:f8:d6:45:e9:36:f8:32:12:ce:e4:0f:f7:c7:0b:
0a:43:8c:dc:3f:4d:14:86:5b:e2:32:25:39:d0:e2:00:16:2f:
cd:55:40:15:03:8f:36:87:74:38:9a:5b:9f:78:e4:1e:ff:60:
ec:83:4a:74:41:8e:ab:17:ba:f1:2c:68:fd:ea:11:43:e9:83:
7e:07:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:25:57 2024 by rpki-client on console-ams.rpki-client.org