Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/1-DW4bAGAFOB5tXQ6ff-qcRUVg7w.roa
File: 1-DW4bAGAFOB5tXQ6ff-qcRUVg7w.roa (raw, json)
Hash identifier: aQyo7itWwdKxpJe+xyAy9NCW9tWWBXMURw+vse4wpxM=
Subject key identifier: F8:35:B8:6C:01:80:14:E0:79:B5:74:3A:7D:FF:AA:71:15:15:83:BC
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 018CC4933088411FB46BB4FAA3CDAE0E82DD
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/1-DW4bAGAFOB5tXQ6ff-qcRUVg7w.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39383
IP address blocks: 5.183.171.0/24 maxlen: 24
5.183.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:30:88:41:1f:b4:6b:b4:fa:a3:cd:ae:0e:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f835b86c018014e079b5743a7dffaa71151583bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:8d:21:3e:7c:11:30:b0:cd:07:2d:4a:78:
2c:57:9b:aa:95:86:29:a4:d2:38:ab:39:df:31:c5:
d0:4d:a9:df:2c:38:94:1e:40:31:08:8e:ff:81:be:
ff:03:64:26:8c:16:bd:10:ae:c9:b2:0b:45:92:5c:
18:5c:12:ca:8c:8e:81:9c:19:67:c0:78:0d:b8:9b:
90:4e:4e:f1:d3:cd:b8:30:ea:f6:68:62:75:ce:8b:
5e:31:e7:cf:f3:b7:8e:cb:ad:55:b3:9c:6f:47:cb:
05:7f:9d:ed:9f:52:29:d9:ea:4b:99:ee:02:30:6d:
bd:18:fe:37:9b:7a:e4:42:54:31:b8:11:8d:78:50:
41:88:75:a3:e7:b6:69:dc:cc:74:92:d7:b9:7a:a9:
88:95:61:de:69:d7:16:72:8d:b6:11:53:91:39:96:
a4:ec:3f:db:82:05:6f:a6:68:1a:6e:13:94:3d:92:
cf:5e:37:75:7b:c8:de:71:65:e9:72:f0:6e:cc:44:
ef:a0:16:d3:d5:67:d7:bc:0e:3c:4b:cb:be:6e:4a:
1d:26:17:43:39:ae:7d:73:ab:51:31:23:7f:05:da:
80:ee:99:2d:21:8b:08:f9:d6:5f:23:f4:0d:f4:e3:
bd:e1:13:0a:a8:8c:0e:38:19:14:34:e0:48:15:21:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:B8:6C:01:80:14:E0:79:B5:74:3A:7D:FF:AA:71:15:15:83:BC
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/1-DW4bAGAFOB5tXQ6ff-qcRUVg7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:4d:a3:7a:c7:fd:32:c2:cc:e7:55:49:b7:88:36:ad:b1:7a:
58:c8:68:2c:b8:b6:ba:78:5b:52:17:53:50:cb:86:d7:ff:2f:
10:c3:53:3d:f7:2b:8c:ba:43:9b:53:6a:22:db:bd:75:87:f7:
6e:75:a7:b5:72:04:c5:dc:e9:3f:41:08:c3:3d:02:40:3d:76:
3d:09:95:27:ca:d9:10:c3:75:ee:6e:35:47:f9:15:e4:b5:7b:
eb:b9:00:2c:bb:e0:03:c0:f5:21:d6:94:19:c8:84:cb:d5:fc:
e0:7f:8b:aa:a5:8e:ed:74:68:f9:c1:38:90:a9:bf:68:16:2e:
79:2c:5a:cc:c0:58:f7:14:06:0f:e7:c4:ce:1a:c6:6a:6f:74:
5a:6d:b9:cf:aa:98:69:cb:51:b2:39:5f:70:e2:61:19:b0:10:
68:b2:9f:6d:3f:ed:78:58:f9:f7:cc:0a:09:f8:16:d6:9b:b3:
05:47:ff:9f:eb:77:42:ea:09:7d:25:55:aa:51:ae:21:5b:08:
ac:11:53:dc:46:3d:25:8e:50:88:ac:14:b0:46:f0:96:57:82:
f9:00:c5:db:24:69:37:45:3a:e2:de:b5:c5:84:01:20:47:7c:
02:4e:8e:77:09:76:6e:ad:f4:7a:97:24:a0:07:05:56:05:c5:
f2:a9:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:54:48 2024 by rpki-client on console-ams.rpki-client.org