Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/b5q-f9b3DiX-MSurPvw9yfSHAKg.roa
File: b5q-f9b3DiX-MSurPvw9yfSHAKg.roa (raw, json)
Hash identifier: gnTJ4PhndQ/+9J8sfdVVMmcEfN79WyR6ewKak/OCohc=
Subject key identifier: 6F:9A:BE:7F:D6:F7:0E:25:FE:31:2B:AB:3E:FC:3D:C9:F4:87:00:A8
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E901A85C7ABD5E551CA7B247D4440
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/b5q-f9b3DiX-MSurPvw9yfSHAKg.roa
Signing time: Mon 01 Jan 2024 14:30:06 +0000
ROA not before: Mon 01 Jan 2024 14:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41324
IP address blocks: 82.222.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:90:1a:85:c7:ab:d5:e5:51:ca:7b:24:7d:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9abe7fd6f70e25fe312bab3efc3dc9f48700a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:9e:2d:c7:ba:34:e0:9e:91:12:df:60:d3:
f0:42:5b:f2:56:c6:bc:6a:1f:0a:74:e4:f8:21:9a:
9d:e6:96:04:fa:d0:76:ee:96:9a:e1:96:54:bc:c1:
73:e7:06:35:dc:d8:a4:28:c6:49:6f:eb:aa:c3:16:
60:ca:08:6a:55:42:d4:9b:de:f1:2d:18:a0:5b:9f:
94:6a:2b:53:fe:38:05:9b:c9:2c:15:b0:71:91:6f:
34:33:3d:3c:28:71:da:32:d5:0a:03:2f:e2:37:5e:
e3:19:78:bb:08:4f:ad:da:a6:d0:ad:91:80:a6:21:
56:7e:dc:d8:9e:23:7e:5c:fb:ef:30:2b:a6:5c:b0:
ab:31:f4:69:d5:0c:45:7a:c9:a5:4e:21:4c:83:ab:
d3:d1:11:71:df:02:20:d4:3a:e8:eb:39:45:9d:34:
08:a1:5e:3c:69:8c:55:e5:12:d6:a0:3a:22:08:61:
7e:cf:9a:ab:63:c8:c9:ab:32:a6:a5:a1:2f:f7:0e:
6c:f3:f2:e8:e2:a8:0c:a2:5a:4e:d7:7e:59:c0:07:
3a:0a:36:8d:0d:9f:bd:3c:97:2d:07:0d:14:58:8d:
3c:24:98:55:a0:0b:45:23:fd:00:22:b6:03:25:df:
be:9e:ce:ce:5e:7a:40:70:1f:35:11:44:c1:1b:eb:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:BE:7F:D6:F7:0E:25:FE:31:2B:AB:3E:FC:3D:C9:F4:87:00:A8
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/b5q-f9b3DiX-MSurPvw9yfSHAKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fe:7f:25:83:5b:a3:3e:54:02:b1:db:03:3f:1c:11:af:81:
f9:b3:42:00:65:af:cc:8f:0c:28:2e:0f:21:ee:b6:75:5d:33:
28:49:df:b2:b2:87:74:7b:04:16:e1:be:b4:76:ba:9f:94:2c:
8e:23:49:08:56:8c:4a:aa:b4:c0:83:4d:7d:15:85:d1:41:a2:
43:30:c7:54:ec:09:01:bc:34:8e:f4:9b:a4:40:3e:44:ec:80:
ab:bc:a0:7e:d2:7e:e1:35:42:20:78:f7:13:5d:a7:99:dc:2d:
1f:d4:06:ab:5f:00:92:fb:bf:32:c2:81:76:40:40:b3:c0:70:
db:a5:1c:f3:e3:02:0b:79:91:3f:8c:38:21:43:21:8a:57:10:
5a:74:88:3c:7e:12:21:64:93:bc:49:4f:4a:09:d4:99:40:87:
a5:76:51:5c:45:e3:ae:85:ef:35:c7:70:e9:ca:53:67:9e:58:
bd:fa:e9:2b:fa:99:cb:2e:9b:4f:b1:10:1d:9a:75:19:1e:55:
46:0f:92:c4:18:10:54:5f:88:e5:a9:cf:aa:7c:3e:97:f5:ce:
1e:98:ae:d2:4e:c8:1a:84:5b:cc:6a:80:81:09:70:a4:7d:d7:
9d:cd:fc:fc:2f:8b:03:bb:e2:c4:61:0c:93:a5:f3:d9:60:45:
09:71:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:51:54 2024 by rpki-client on console-fra.rpki-client.org