Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/arytXZ6LFO0omfxb1Y_v0FyJS-g.roa
File: arytXZ6LFO0omfxb1Y_v0FyJS-g.roa (raw, json)
Hash identifier: NGg7/Q0qdjlNBB79DSTk0b4nbKrSXaF62xi5RBu5pfQ=
Subject key identifier: 6A:BC:AD:5D:9E:8B:14:ED:28:99:FC:5B:D5:8F:EF:D0:5C:89:4B:E8
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 018EF541AD95FCBC5E9159EB67637089615C
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/arytXZ6LFO0omfxb1Y_v0FyJS-g.roa
Signing time: Fri 19 Apr 2024 07:28:25 +0000
ROA not before: Fri 19 Apr 2024 07:28:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198022
IP address blocks: 185.92.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:41:ad:95:fc:bc:5e:91:59:eb:67:63:70:89:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Apr 19 07:28:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6abcad5d9e8b14ed2899fc5bd58fefd05c894be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:75:24:42:0e:67:cf:18:d4:37:f9:b6:a6:
0a:0b:93:e2:b9:75:b8:c9:dd:2e:dd:a4:77:8c:a6:
34:ff:fa:4f:7b:2b:c1:22:30:a3:5a:21:4b:63:28:
9b:d8:21:25:32:68:7d:5c:98:ac:60:79:d6:0d:73:
7d:83:d5:a2:75:da:f3:58:17:7b:c0:7b:05:c2:c8:
36:7a:2c:4d:39:8c:73:d3:bd:4f:e8:bb:0e:11:29:
ed:d2:b9:66:a1:91:09:8a:b8:a9:65:46:42:fa:f6:
25:f2:e7:e8:37:7a:ef:2b:50:6e:92:30:b4:f6:35:
62:c7:19:3f:22:5c:95:61:5a:8b:3f:7e:54:0a:31:
37:b4:d7:f0:7e:25:22:8f:56:58:b5:1e:d4:a2:d2:
f7:25:24:5b:4e:1e:30:e8:98:98:5c:fc:c6:b0:c1:
1b:82:8b:8b:a6:b3:74:fa:41:c4:7f:c7:0d:f6:4d:
8d:b2:43:dd:f8:9d:b5:d2:76:47:af:52:f0:55:7f:
b6:21:a7:1d:78:67:a9:ba:01:e6:ca:74:91:a3:45:
b8:62:3c:96:22:0d:1d:36:91:79:01:26:f3:2d:7b:
a4:8b:c3:4d:aa:df:3a:4d:1c:52:64:50:9a:18:75:
aa:07:18:6a:53:a6:9a:aa:2b:56:8b:bb:e9:9f:67:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BC:AD:5D:9E:8B:14:ED:28:99:FC:5B:D5:8F:EF:D0:5C:89:4B:E8
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/arytXZ6LFO0omfxb1Y_v0FyJS-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.160.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:82:b9:5c:c8:f9:71:78:bb:36:66:3b:95:aa:83:f4:cf:97:
0d:24:8e:d9:e9:9e:ac:73:28:5e:c8:e3:2d:bc:9d:03:98:9c:
4f:bc:8b:33:63:43:3d:e1:ef:52:5b:20:5f:9f:55:c0:94:7b:
e0:d0:f4:cd:6e:eb:7d:03:0c:38:1c:ac:e5:58:7a:aa:51:02:
57:3b:ba:c2:d7:98:46:4d:1c:4f:8f:f7:fc:00:d6:61:f4:d2:
49:c5:07:4b:ce:4c:4b:93:8c:e4:ac:f4:93:0f:71:fb:3e:9c:
32:62:e4:11:37:33:4d:97:75:52:ea:f1:f3:e4:fb:b5:8f:2a:
59:89:84:45:19:b3:c7:d9:55:64:06:b2:6e:4f:ef:c7:3d:8b:
b5:41:4b:d0:85:a4:af:b8:81:7d:d8:31:0e:2b:ab:df:e2:74:
1b:d1:df:83:aa:c5:49:56:da:8e:2b:1a:74:b2:7e:aa:27:36:
2a:b6:ac:37:5f:63:ec:c9:08:85:26:f2:7d:54:65:05:d4:bd:
56:f5:21:45:92:d2:1d:62:b3:8d:6a:95:39:60:60:ba:4c:79:
50:b1:cb:5e:8d:29:68:87:45:25:37:96:7c:24:30:24:43:f4:
56:27:26:49:d1:ad:3d:2a:5c:2e:94:1c:a7:d7:6d:36:20:e5:
01:bd:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:10 2024 by rpki-client on console-fra.rpki-client.org