Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5CDwvjHzcgVxQVccy3U4zfgjpk4.roa
File: 5CDwvjHzcgVxQVccy3U4zfgjpk4.roa (raw, json)
Hash identifier: VHyjVYdzEpoHVs7YIGS9va8eF9mugVBGskbXVm40xb8=
Subject key identifier: E4:20:F0:BE:31:F3:72:05:71:41:57:1C:CB:75:38:CD:F8:23:A6:4E
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 018CC6B93939BF0F5000D818CFC8203B9D39
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5CDwvjHzcgVxQVccy3U4zfgjpk4.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57828
IP address blocks: 91.235.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:39:39:bf:0f:50:00:d8:18:cf:c8:20:3b:9d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e420f0be31f372057141571ccb7538cdf823a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:a4:c8:8e:80:da:15:41:1f:f4:33:07:94:
24:0f:80:3f:25:38:62:d0:5b:24:7b:63:47:88:34:
6a:65:99:89:5f:d0:43:8f:fd:65:f7:cf:27:f0:b3:
b1:49:41:d8:97:c0:2e:96:25:a8:b8:bc:5c:cc:26:
a0:38:80:c0:10:4e:02:a2:c7:15:7f:02:09:e7:bd:
0f:53:ad:b4:5b:56:7a:e4:ba:1e:20:84:51:30:03:
f5:ad:59:69:70:a4:e8:2a:fb:f1:5e:6e:b6:55:ee:
f1:4a:bb:54:1d:58:fb:a9:e7:ef:8e:8e:b5:d8:13:
1f:d4:0c:cc:6c:5d:31:bc:46:42:55:6f:c9:b3:8a:
ae:16:ce:1f:2e:c6:eb:3a:74:5a:05:b4:30:26:b2:
36:97:0a:d8:0e:d0:02:05:69:51:8a:4e:d9:d6:d0:
98:d8:f0:eb:e1:20:bb:ef:f3:50:f2:f9:54:cc:b3:
cc:a5:d5:8d:dd:9b:ad:72:96:8b:86:5e:c2:5d:71:
90:b9:e3:18:61:07:8e:b3:a3:0e:87:f3:04:7b:23:
7c:ed:b5:1e:67:34:8f:bd:75:0b:c6:b4:b6:6a:b9:
f9:af:60:88:35:aa:06:98:be:7e:ff:54:e4:8e:d0:
8a:e8:cf:be:d1:32:e3:ea:09:66:7d:e1:5c:ef:8e:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:20:F0:BE:31:F3:72:05:71:41:57:1C:CB:75:38:CD:F8:23:A6:4E
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5CDwvjHzcgVxQVccy3U4zfgjpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.203.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d3:74:9a:00:0d:29:c1:5a:d0:dc:2c:a2:10:c1:c0:4e:1e:
3f:7d:82:6b:bb:77:15:ab:ac:4b:8f:d1:52:d7:a4:31:bc:78:
7e:7b:5a:26:81:d2:91:07:2f:63:4f:fe:49:2d:24:8a:e1:45:
8e:ad:79:8d:19:06:47:2e:93:11:62:82:f4:6b:22:a3:f1:a9:
17:56:83:26:92:2b:30:51:a0:29:02:28:a0:fa:42:3c:7b:22:
41:98:32:8c:0b:a0:2c:92:a2:02:06:fe:66:97:e2:36:eb:e9:
3d:e6:31:35:25:77:b8:d1:30:a8:c8:1e:ce:d4:5e:aa:9c:43:
f8:cf:e6:57:d6:15:f4:c2:28:be:ce:24:b4:8e:78:8f:58:b8:
1d:31:b5:e0:33:68:90:da:d6:46:87:9e:83:7b:05:fb:7d:3f:
4a:bd:9b:d1:a0:d0:bb:1e:39:b3:33:79:2c:67:5c:00:68:4d:
6d:7b:89:52:56:27:d3:ab:c4:7a:e6:4a:a2:83:5a:1b:28:20:
62:d3:45:97:ca:62:94:e3:04:23:57:da:d5:22:22:ab:fa:ff:
92:96:0c:60:71:89:41:d7:d6:ba:0a:50:cf:6d:5f:8b:a9:ba:
ae:ed:96:ea:ec:66:bd:97:e0:b4:ea:b9:f8:d2:ab:e7:ac:25:
96:d8:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:22:00 2024 by rpki-client on console-ams.rpki-client.org