Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tAQztadsulBdqBwaouH11fKCm54.roa
File: tAQztadsulBdqBwaouH11fKCm54.roa (raw, json)
Hash identifier: 5MRUiEh4aM5FkIRbXwHxOjH+/bIHDCKw2fLLC3lsHL4=
Subject key identifier: B4:04:33:B5:A7:6C:BA:50:5D:A8:1C:1A:A2:E1:F5:D5:F2:82:9B:9E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D692B0A7A4A448368B2FD53CC529EEB3C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tAQztadsulBdqBwaouH11fKCm54.roa
Signing time: Fri 02 Feb 2024 09:34:04 +0000
ROA not before: Fri 02 Feb 2024 09:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56985
IP address blocks: 5.183.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:2b:0a:7a:4a:44:83:68:b2:fd:53:cc:52:9e:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 2 09:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b40433b5a76cba505da81c1aa2e1f5d5f2829b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:8b:14:00:13:96:de:31:1c:df:b2:d3:1c:
81:e8:ec:75:0c:af:6a:6c:ad:6f:3d:b4:25:96:fb:
5a:07:39:57:78:12:59:73:c7:9f:d8:bf:de:0b:a6:
d2:38:ed:6c:99:2b:f7:0f:d3:5b:60:9d:99:68:13:
b8:5f:28:1b:a9:dd:60:ee:d6:d8:db:c5:bf:6a:a2:
e9:a1:cf:06:07:f9:94:62:89:5b:4f:3a:9d:b6:40:
45:3e:15:59:a6:8b:bd:92:a5:d0:7d:2e:a3:3f:00:
5c:7f:74:d2:1e:f6:c8:7c:30:73:7b:28:76:3a:67:
b7:0e:54:d6:46:51:7a:6b:d3:7f:30:87:b7:8b:b4:
0d:cb:89:ab:cc:b1:db:8e:0d:7c:4d:17:ec:11:d8:
0d:1e:8b:14:d7:91:c5:7c:6a:bf:a4:07:a1:b0:4e:
e6:a2:e3:52:48:9e:9e:01:aa:44:de:27:94:6d:10:
76:ae:26:fb:cf:76:df:3e:2f:20:46:e3:da:64:50:
c2:24:32:dd:90:65:01:de:5d:66:70:1f:63:89:89:
fb:de:5d:42:a3:b5:0a:bb:f8:fa:84:b0:7b:b1:5b:
cf:b6:54:3c:b6:a0:3f:f7:3d:de:7e:42:f6:76:8a:
3d:05:f0:bd:2c:78:fd:94:9f:3f:73:62:6f:b9:88:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:33:B5:A7:6C:BA:50:5D:A8:1C:1A:A2:E1:F5:D5:F2:82:9B:9E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/tAQztadsulBdqBwaouH11fKCm54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.131.0/24
Signature Algorithm: sha256WithRSAEncryption
44:03:12:26:54:d5:c0:05:51:4e:68:ab:ff:ca:e4:89:2a:18:
5f:e6:b8:c2:d1:33:1d:4b:64:01:ad:b2:aa:df:82:4c:61:59:
21:35:5f:28:a7:b0:9d:7e:87:c0:74:c8:e5:4a:03:7d:89:20:
6a:32:1c:bb:13:d1:e9:53:6c:68:85:32:a3:cc:ee:ca:9b:5a:
3f:b3:da:a9:a3:02:f7:61:2f:29:24:d9:b8:16:1a:7f:57:16:
f4:59:a1:78:f4:77:be:03:d0:da:ea:0d:2b:2e:de:63:8e:79:
63:eb:77:ba:2a:8f:ff:5e:ae:d6:63:89:92:8c:99:c0:b1:2c:
6e:25:ec:4d:18:69:e6:be:bd:0b:0e:a1:ba:07:6a:a7:69:ac:
12:72:43:ee:29:96:df:73:d5:59:98:e8:73:dd:47:ce:4a:e5:
21:d3:80:3f:88:0e:46:d3:8c:5e:48:e0:fd:ef:58:41:00:ff:
20:8c:e6:e0:32:5f:24:07:ab:08:06:0f:d6:40:23:dc:25:86:
60:b6:e7:fb:d0:bd:a8:f5:34:d8:78:e0:ac:98:78:af:05:00:
89:ee:3a:f7:59:97:89:0f:09:db:ca:c0:e5:b9:e2:88:ab:28:
83:c0:80:fc:42:04:67:a2:a8:57:79:61:c7:05:24:c9:e7:d0:
a2:e0:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:12 2024 by rpki-client on console-fra.rpki-client.org