Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/51FdA_mORRb0O20tk0v2Hgs_3ms.roa
File: 51FdA_mORRb0O20tk0v2Hgs_3ms.roa (raw, json)
Hash identifier: 3x6e8JS4ZARCG2D9oHEriyhEV8CJZtrY8+C0mc1I/28=
Subject key identifier: E7:51:5D:03:F9:8E:45:16:F4:3B:6D:2D:93:4B:F6:1E:0B:3F:DE:6B
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 018D59E1B0E3F19AB35FBFC34BD29539F9DD
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/51FdA_mORRb0O20tk0v2Hgs_3ms.roa
Signing time: Tue 30 Jan 2024 10:19:39 +0000
ROA not before: Tue 30 Jan 2024 10:19:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200972
IP address blocks: 217.26.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:e1:b0:e3:f1:9a:b3:5f:bf:c3:4b:d2:95:39:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Jan 30 10:19:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7515d03f98e4516f43b6d2d934bf61e0b3fde6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:84:2a:c0:f2:95:9d:e3:04:8b:13:87:ef:
03:36:60:90:ba:cf:40:98:18:b4:e6:b9:87:1f:ad:
a6:22:da:b6:3d:eb:a4:c4:61:7b:84:83:3c:1e:95:
0d:59:ec:65:1e:ac:71:c0:60:73:0d:3d:1c:a1:00:
e9:43:1d:84:42:af:5f:02:26:4c:e8:1d:06:a7:e4:
6b:73:31:40:4a:ef:ce:f2:a0:42:b9:22:f4:7b:52:
5f:75:da:32:57:b4:4a:57:3a:00:f1:d1:c8:d2:82:
d8:2b:52:a9:82:a4:e2:6c:aa:0d:ea:c3:2c:22:e2:
16:57:2a:c1:57:6b:6e:43:1e:ab:84:35:55:ac:22:
94:0e:7e:0b:f7:b2:12:e0:ce:9b:28:36:60:28:4e:
ae:d4:56:ea:90:ff:e5:69:e4:fc:dc:8c:1e:8e:9c:
95:68:e3:ed:48:10:20:c8:14:f9:13:20:9f:36:57:
58:3f:b2:32:d8:6f:d5:c3:11:b3:fe:89:cc:a8:b8:
79:0b:4b:6e:69:38:71:b4:09:9d:ba:b9:d4:e1:99:
a7:1d:b3:6c:5a:6d:c3:da:f0:23:ed:72:5d:63:2a:
51:6d:64:f0:7d:0a:0d:6c:2b:03:02:08:dd:44:9e:
d6:a6:67:c8:a0:be:0b:c4:ea:59:91:18:35:c8:35:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:5D:03:F9:8E:45:16:F4:3B:6D:2D:93:4B:F6:1E:0B:3F:DE:6B
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/51FdA_mORRb0O20tk0v2Hgs_3ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b3:0f:d5:f2:2f:7e:da:84:b4:47:f6:6c:a4:61:3d:31:16:
25:19:d9:37:57:6e:63:de:eb:db:ef:ce:2a:a2:d7:eb:17:c0:
f7:6f:18:73:0b:1a:d2:62:fe:6c:53:95:cf:b0:da:01:b1:49:
e3:7d:82:14:6c:5f:3f:1b:c2:8f:12:ff:16:1c:f0:51:5b:db:
c3:6f:e0:a1:2e:71:8a:4a:43:bb:44:6b:dc:40:f4:52:7b:9e:
aa:65:c4:89:17:47:01:67:dc:76:c1:68:ca:2a:29:ed:a5:9a:
77:c0:2e:3c:04:80:5b:11:2d:1e:ca:db:f2:de:ac:c1:a4:c4:
67:74:b5:2a:8d:29:f2:ee:ba:e8:3b:a2:73:db:5c:6b:7a:d7:
de:19:06:98:91:5d:e0:35:56:6e:47:19:0b:42:70:66:a0:2f:
48:db:63:ec:a2:76:3b:38:3d:29:25:3d:9c:d8:1c:02:9f:5f:
33:56:ac:5a:27:73:50:d7:b1:1b:18:19:93:42:88:c9:96:ae:
e5:33:40:70:ec:fc:42:ed:8e:53:97:9d:4c:70:04:9d:ca:f9:
e7:73:a0:1e:13:63:4f:69:2f:3b:d7:d2:e3:8b:74:91:e4:a0:
0b:18:d7:79:cb:dc:a5:f9:37:c2:98:7c:3e:91:75:d8:b7:7c:
08:f5:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:45:55 2024 by rpki-client on console-ams.rpki-client.org