Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U60c4RzJCPcvkMecGzIdRefHi5o.roa
File: U60c4RzJCPcvkMecGzIdRefHi5o.roa (raw, json)
Hash identifier: eLHitQJEbOGgo+JiitgHtPCDe7LBfo3vcQ2eWI9GoiU=
Subject key identifier: 53:AD:1C:E1:1C:C9:08:F7:2F:90:C7:9C:1B:32:1D:45:E7:C7:8B:9A
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C79910BD589E1D0F925BDE8A3705
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U60c4RzJCPcvkMecGzIdRefHi5o.roa
Signing time: Mon 01 Jan 2024 06:29:44 +0000
ROA not before: Mon 01 Jan 2024 06:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 5.182.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c7:99:10:bd:58:9e:1d:0f:92:5b:de:8a:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ad1ce11cc908f72f90c79c1b321d45e7c78b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:36:20:65:09:5d:d9:da:45:7d:96:ef:2b:
d6:06:d1:ed:65:92:f8:e9:79:87:b2:e5:63:c7:66:
c0:67:f6:db:13:75:6f:be:2f:32:93:f5:ac:96:ac:
95:bf:1c:d4:66:70:bc:e6:97:3d:75:49:8c:20:70:
cb:eb:a2:b3:8a:27:da:70:b3:1b:67:de:7c:65:c6:
ae:5d:27:7f:21:78:1a:07:c0:ac:04:0f:b9:64:b7:
2e:29:29:8d:7b:63:5b:c2:9b:92:f4:bc:37:43:99:
f3:5a:82:0e:5b:0a:eb:05:29:1f:2d:47:3c:26:f5:
63:c3:c6:2d:2d:5a:1a:af:d8:1f:06:bc:19:13:5e:
54:c2:fa:c4:d5:1f:95:33:31:59:b1:5c:3b:e1:59:
4c:af:b4:aa:9a:3f:ce:83:36:4e:10:d8:d2:f9:0d:
e2:38:c2:34:2f:b5:15:7f:07:17:1c:7e:df:41:96:
81:63:c2:9d:bb:49:ec:b9:67:ee:a7:f2:e4:aa:ed:
d4:31:80:23:48:72:20:b4:7d:b1:59:51:68:da:69:
e9:db:d2:8d:40:bd:ef:60:0b:33:49:07:d4:b6:51:
a8:4f:a3:37:c5:c3:ee:38:e3:0a:1b:d7:d7:84:75:
4c:e7:f4:e0:18:9b:f5:4e:26:e4:ed:30:c8:17:4c:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AD:1C:E1:1C:C9:08:F7:2F:90:C7:9C:1B:32:1D:45:E7:C7:8B:9A
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/U60c4RzJCPcvkMecGzIdRefHi5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
62:08:9e:41:a6:e0:9f:25:5e:58:1a:dc:5f:71:32:82:58:d3:
4b:64:d8:d8:eb:3c:bc:96:7d:79:93:76:5d:9a:36:8f:aa:e3:
08:da:ae:41:06:fa:a4:cb:e8:e5:5c:e1:87:12:bf:fc:48:ac:
2f:47:a1:9d:5a:90:a3:7a:03:b5:05:7c:2d:85:47:2d:bc:55:
84:5e:8d:3b:e3:0e:61:59:6f:bd:97:61:f4:72:34:76:88:1a:
a6:4f:80:57:87:b5:13:b0:54:53:3a:03:3a:49:29:b1:63:af:
80:15:63:ec:d4:2a:98:7c:8b:9c:92:dd:d3:52:c1:15:1f:a4:
bd:3b:ce:47:c7:98:89:19:6e:92:24:7f:5e:24:8c:12:f9:08:
93:24:89:11:c0:6a:59:f1:29:17:1d:81:3f:31:2b:70:d6:86:
fb:f8:36:54:43:39:94:19:6f:60:51:81:b9:0e:cb:bc:47:b7:
28:56:c6:f4:25:6e:ec:45:c4:dd:60:6a:d6:99:5c:4e:f1:b8:
f8:cd:6f:31:a1:5d:b0:77:61:71:7a:22:f0:82:fc:1a:e6:48:
a5:a5:38:45:10:bd:92:73:43:44:15:f0:88:ee:f0:85:fe:4e:
0c:bc:5c:5b:54:05:f3:86:f1:da:ec:df:81:0c:e1:4e:21:91:
74:4d:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:34:05 2024 by rpki-client on console-fra.rpki-client.org