Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/m6x5jeE6HKW-pkBlQko6UPn6a0Q.roa
File: m6x5jeE6HKW-pkBlQko6UPn6a0Q.roa (raw, json)
Hash identifier: +5uk5z1LmLEbE0dg1PG9OITwd0F/my9ou6+aaXqV2NA=
Subject key identifier: 9B:AC:79:8D:E1:3A:1C:A5:BE:A6:40:65:42:4A:3A:50:F9:FA:6B:44
Certificate issuer: /CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
Certificate serial: 018CC56E0379201525C3F66904C0FD72781D
Authority key identifier: 26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/m6x5jeE6HKW-pkBlQko6UPn6a0Q.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51595
IP address blocks: 194.0.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/JsHp77ShppNmGh54A3SnFaAlXjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/JsHp77ShppNmGh54A3SnFaAlXjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:03:79:20:15:25:c3:f6:69:04:c0:fd:72:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bac798de13a1ca5bea64065424a3a50f9fa6b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:2c:0b:c2:28:85:1e:69:16:ab:87:13:e3:
49:23:cc:13:79:15:5c:b8:da:43:77:15:70:26:5b:
42:b0:8e:9c:73:ff:f1:c8:d3:b6:7d:82:98:f4:d4:
1d:e9:f3:e9:a4:17:83:0e:5e:b7:d7:12:e2:8a:65:
17:77:93:8e:19:62:f2:c3:5e:b4:c7:10:b6:d4:b3:
1a:05:5b:05:42:ff:fe:40:e4:62:61:bb:27:fe:09:
5b:62:a1:69:90:b0:ce:8e:5d:f2:36:79:ad:a1:02:
58:a6:9e:f6:ad:ff:26:e6:15:5a:07:de:37:64:47:
e9:fb:cb:2f:9c:dc:12:93:77:1f:4b:b4:6c:19:61:
5f:77:21:90:df:f6:41:8a:8c:56:9c:c6:84:72:47:
1f:96:8e:21:70:e5:db:fc:7f:d8:d2:52:24:48:a4:
d1:0c:be:d7:c0:a4:82:a0:6c:73:fd:e0:07:a1:d1:
c9:ae:89:23:61:88:0b:87:5d:74:b4:58:27:b2:2e:
45:06:41:8f:78:03:6a:56:3e:fc:ec:35:b0:f6:76:
4c:54:44:d7:13:3f:dd:2f:36:2a:82:8e:44:16:9c:
f4:d1:57:a4:08:20:52:0b:64:91:9c:9a:15:32:c9:
ce:83:6d:18:21:cb:8d:27:86:0c:fd:d4:ee:99:cc:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:79:8D:E1:3A:1C:A5:BE:A6:40:65:42:4A:3A:50:F9:FA:6B:44
X509v3 Authority Key Identifier:
keyid:26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/m6x5jeE6HKW-pkBlQko6UPn6a0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/JsHp77ShppNmGh54A3SnFaAlXjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.155.0/24
Signature Algorithm: sha256WithRSAEncryption
11:96:6d:87:ba:d1:a0:98:d3:fa:e5:d4:c6:00:b8:0d:71:9b:
14:15:5f:c6:6f:bd:ee:b3:bc:80:7a:de:a0:41:c7:dd:59:ae:
57:d0:17:ea:c7:43:c9:c5:00:a8:9e:d2:c8:0b:59:40:c7:7d:
96:2f:07:19:bb:7a:f4:35:dc:97:7b:23:8f:f0:38:5a:df:11:
e4:4c:e5:7e:99:48:3b:84:8e:5d:0a:7d:97:f0:73:8e:8b:63:
96:87:56:58:a3:24:a7:0d:e3:bf:81:21:ca:fc:c8:57:61:f3:
9d:4e:11:ba:e3:42:24:dc:26:5e:f5:93:01:14:d0:84:7c:d9:
55:69:5c:70:9f:1d:0d:d7:c7:d8:e1:67:0b:0e:72:63:98:ca:
fd:d7:15:94:85:3d:f9:05:f6:fe:7f:35:e4:93:ae:ee:b1:9a:
c7:ef:ec:85:76:42:ca:e1:e5:b6:2a:17:76:5c:bf:37:bb:10:
16:06:9a:b8:38:e4:f2:46:ac:18:86:4f:53:b5:ca:07:bb:32:
63:8a:35:4c:c3:1a:a6:dd:10:b0:17:7e:49:16:48:2c:26:1a:
3e:78:65:0b:b6:65:b9:6a:af:bc:07:04:b0:95:3c:f8:4c:34:
83:0c:ef:53:a3:87:09:1c:31:0c:57:65:96:7c:3f:b0:1c:39:
76:ed:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:51 2024 by rpki-client on console-ams.rpki-client.org