Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/5NiSlN2Pr_0rKLJBaI4j7jSCCJA.roa
File: 5NiSlN2Pr_0rKLJBaI4j7jSCCJA.roa (raw, json)
Hash identifier: kBP1gVBThxz8ok/3e5QRegDPaNLiS+xEI0zrhiWUlsw=
Subject key identifier: E4:D8:92:94:DD:8F:AF:FD:2B:28:B2:41:68:8E:23:EE:34:82:08:90
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA2986A76F2AE3821DDDF1AFF207E2AC
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/5NiSlN2Pr_0rKLJBaI4j7jSCCJA.roa
Signing time: Tue 02 Jan 2024 12:32:48 +0000
ROA not before: Tue 02 Jan 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60750
IP address blocks: 85.203.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:86:a7:6f:2a:e3:82:1d:dd:f1:af:f2:07:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4d89294dd8faffd2b28b241688e23ee34820890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:64:2f:7a:5d:e4:68:bd:db:7f:34:47:53:
c3:11:df:ac:03:73:d2:98:6a:df:53:48:49:c6:ad:
7d:5d:81:94:70:a1:b2:fc:9c:64:55:14:43:65:3f:
c9:e3:f1:5e:6b:02:b1:7a:6f:6e:88:d7:5c:09:e2:
5d:62:ae:42:14:88:92:a5:33:32:9b:11:4b:fb:11:
da:03:5f:62:9d:ab:2f:c3:25:16:b6:c1:94:2a:26:
90:b6:0e:4e:bc:9a:7f:84:1e:43:c4:be:62:a4:91:
e6:b8:08:33:00:2a:10:f9:25:ef:4a:87:92:cc:e1:
e7:5e:cc:f4:c4:35:40:65:b7:45:24:2c:a7:54:cd:
aa:4c:0c:f6:4d:45:ab:61:4a:5c:cd:95:2a:45:43:
37:b5:17:5f:3d:98:9a:0f:fd:9c:7a:08:60:00:4c:
f4:d0:7c:0d:50:68:47:35:16:89:95:2e:f7:25:b5:
e8:40:1e:91:6b:9d:c0:a1:42:ae:21:c8:c6:1c:fd:
e6:36:6b:e4:c6:45:f7:30:6f:7e:50:7d:f0:f1:a5:
0c:e7:09:7c:0f:5d:1d:d7:3c:0e:1d:67:c1:e7:b4:
62:be:80:f6:02:b5:a2:ca:f9:05:b7:ac:bb:99:2b:
be:61:6d:bb:c5:8e:cd:27:7d:5d:73:5d:ce:26:7b:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:92:94:DD:8F:AF:FD:2B:28:B2:41:68:8E:23:EE:34:82:08:90
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/5NiSlN2Pr_0rKLJBaI4j7jSCCJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.11.0/24
Signature Algorithm: sha256WithRSAEncryption
54:05:29:be:05:06:fe:c6:c4:6c:46:65:95:77:47:d7:50:d9:
bc:1e:38:2e:ed:68:75:13:94:91:33:db:28:6c:3f:fc:0a:98:
a3:1b:ab:c5:dc:66:80:a8:0e:4a:71:39:0f:bf:fd:ce:01:50:
74:46:f2:81:80:a3:01:5d:54:28:04:9c:f6:96:d7:a7:b4:d0:
3b:27:5e:7b:ea:18:21:c2:37:41:a8:21:16:44:29:bd:f9:7a:
2b:1b:bd:d7:ca:e0:70:a8:15:db:99:77:b2:55:6d:64:93:56:
db:3d:c2:35:49:7b:c0:19:29:5e:96:ed:bf:6a:db:0c:de:67:
48:78:c6:62:1e:13:58:62:b8:a6:93:5b:a8:3c:93:b2:03:0b:
ee:05:69:de:8d:e1:9c:8d:75:bd:a0:14:c2:94:68:e9:42:7a:
55:75:37:db:91:8d:46:e6:56:1e:a0:07:d3:1a:2a:41:5a:a3:
dc:6b:a2:27:3b:67:74:f5:d3:5f:3e:77:f7:6d:d0:90:0f:85:
7f:c6:2e:d4:1c:bd:70:c3:46:45:97:5d:d9:71:05:9c:08:c7:
31:4c:46:ef:8b:2f:86:75:14:4c:0f:1a:19:cb:76:89:bc:87:
ef:e6:64:7e:82:d7:5f:3d:be:35:7a:e8:9c:2f:e0:27:c8:aa:
cb:9d:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:51:06 2024 by rpki-client on console-ams.rpki-client.org