Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BDURNcxeY9ZDV7-176B8K-Q_hc0.roa
File: BDURNcxeY9ZDV7-176B8K-Q_hc0.roa (raw, json)
Hash identifier: huR3k1V2atrVlCiMYNWQTVXPAehGDwWkzLPjoy0hQO4=
Subject key identifier: 04:35:11:35:CC:5E:63:D6:43:57:BF:B5:EF:A0:7C:2B:E4:3F:85:CD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526D01629E88B8E101D09B4D85B5572B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BDURNcxeY9ZDV7-176B8K-Q_hc0.roa
Signing time: Wed 14 Aug 2024 19:46:01 +0000
ROA not before: Wed 14 Aug 2024 19:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60287
IP address blocks: 5.42.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6d:01:62:9e:88:b8:e1:01:d0:9b:4d:85:b5:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04351135cc5e63d64357bfb5efa07c2be43f85cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:48:13:22:b8:51:e5:6e:45:bd:57:2a:8c:
eb:94:6f:ac:f3:c5:5a:11:ec:04:67:e2:53:1b:76:
8a:81:c2:d3:d6:d5:f3:19:b1:eb:ec:9d:48:a0:ea:
ea:ca:65:27:c7:6b:39:b3:9e:1c:3c:ca:4b:74:8a:
5e:0c:d6:a2:bf:24:2f:6e:4f:4f:8d:64:16:ca:5d:
24:4f:03:a0:13:c4:64:29:33:fb:89:c2:1b:22:b2:
21:6d:06:ba:b2:0d:90:04:f2:fb:68:e1:10:90:b4:
a7:18:22:da:56:e1:0c:b9:d2:f9:4c:1e:cf:74:b2:
12:66:db:87:c5:e3:6b:70:5d:d4:c6:42:97:86:07:
b6:4b:52:fb:d6:71:31:ff:48:f2:39:f4:d7:35:88:
bd:03:7d:3e:9f:b6:4d:92:27:b5:37:81:e9:bb:d8:
cc:7b:18:e0:36:76:c8:99:d3:1b:ea:9c:11:15:16:
0f:4e:72:0b:21:de:0e:c6:ef:74:c8:b3:7f:ba:08:
11:d7:47:de:45:15:d9:d3:e7:bc:b8:2f:b4:df:6f:
85:76:28:e8:ec:d9:6f:ef:c5:fb:9d:37:12:ca:ad:
d9:e6:d6:ce:21:e1:47:4a:27:8c:7a:c0:8b:64:2a:
46:d2:7c:b8:d4:73:31:cd:af:ed:ad:d6:a6:23:b6:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:11:35:CC:5E:63:D6:43:57:BF:B5:EF:A0:7C:2B:E4:3F:85:CD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/BDURNcxeY9ZDV7-176B8K-Q_hc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d7:ea:72:1f:0b:8d:8b:e3:52:a6:66:b1:be:2f:c1:5e:75:
23:e7:88:12:98:25:b4:cd:71:58:c3:5d:e2:0a:60:65:dd:51:
ea:2f:c2:d5:6b:c0:e2:a3:41:ac:11:ce:26:d8:d0:17:b4:d4:
e4:25:56:f9:ce:7d:c3:56:be:e7:a5:78:80:bd:d5:83:db:59:
75:14:7b:7f:5e:6a:43:ae:d9:07:8d:f3:dd:f4:73:7d:df:a4:
b9:8c:fc:de:57:3d:9a:f4:eb:0e:32:1a:14:04:92:e0:7f:77:
06:f9:49:fd:2a:3e:77:e2:0e:2a:65:3c:6f:dd:8b:66:98:67:
ce:da:10:ed:af:4a:96:f9:47:16:f6:ca:41:dd:2d:b8:4d:f6:
e5:98:ab:d0:ec:7c:b7:1b:3f:e7:db:72:bc:1a:28:2d:a8:b3:
bc:38:29:c1:e6:61:50:3d:a9:d0:8a:86:3c:b0:ef:9a:13:77:
c8:c0:c4:f2:cd:c5:2e:0d:56:36:d4:ce:a9:ce:e6:40:19:3e:
eb:e9:d8:ee:dd:05:78:ee:cd:2f:bd:cc:27:52:08:3e:4e:cf:
00:bc:64:83:1b:be:b4:94:1f:1c:0c:7c:18:f8:53:8b:ad:50:
54:c2:b4:78:30:42:d4:42:4c:28:b4:24:74:b3:82:0b:11:19:
b3:0c:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org