Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/tsjIHmRgPahCr9VTz4T4eq4Pj2s.roa
File: tsjIHmRgPahCr9VTz4T4eq4Pj2s.roa (raw, json)
Hash identifier: GeLoyxu0Uc2bTZVYDRnMTr9HQ1APsE9Fk68MHWbt5xE=
Subject key identifier: B6:C8:C8:1E:64:60:3D:A8:42:AF:D5:53:CF:84:F8:7A:AE:0F:8F:6B
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018CC348DFF5F410943528CBB29A9A74C145
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/tsjIHmRgPahCr9VTz4T4eq4Pj2s.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8274
IP address blocks: 5.153.180.0/24 maxlen: 24
5.153.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:df:f5:f4:10:94:35:28:cb:b2:9a:9a:74:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c8c81e64603da842afd553cf84f87aae0f8f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:39:d8:c4:d1:6c:9f:ff:b7:65:5f:ce:98:
cb:f4:e5:de:37:a8:d9:8a:52:6b:dc:a1:32:f9:02:
07:54:50:6d:d6:d9:bd:0c:02:45:c1:fc:9d:ee:a3:
c0:86:4b:ac:46:61:c5:1a:0d:62:68:59:a2:72:16:
0d:5a:8d:4e:2c:b2:b7:39:9a:8d:56:c7:36:4a:30:
98:b5:34:56:8d:b2:68:64:17:d3:99:e1:78:6c:a1:
d6:90:7e:49:c0:10:ae:7a:30:cd:0b:d3:09:3f:a3:
33:34:17:39:74:bf:89:d4:2b:5b:f5:bd:3a:a7:b4:
a8:6f:53:09:50:4a:11:f7:89:65:d3:77:50:7e:42:
6b:a3:f1:c1:79:a4:1e:99:a1:8f:ac:2f:dc:6b:94:
a3:5f:70:0a:fe:da:69:d8:af:35:bc:15:70:03:c6:
61:ab:ed:09:26:c1:fa:61:7f:fd:28:3f:76:d6:a5:
54:8e:7e:03:cd:6b:c6:9a:1c:c6:70:52:7e:e9:56:
cc:97:7c:88:f3:d1:d0:e5:1f:3d:19:85:b1:05:46:
e3:55:0c:08:d4:b7:3c:60:96:7f:16:6e:3b:99:36:
b4:73:72:99:58:e6:1d:de:38:ea:98:3e:b5:79:67:
5e:78:6d:b1:d9:93:e2:7f:46:c4:ba:e5:46:80:df:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:C8:1E:64:60:3D:A8:42:AF:D5:53:CF:84:F8:7A:AE:0F:8F:6B
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/tsjIHmRgPahCr9VTz4T4eq4Pj2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.180.0/24
5.153.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:69:08:57:de:e9:6d:8d:d1:4b:93:86:93:16:57:52:73:c3:
15:05:ee:81:2f:78:53:fb:0e:7e:00:04:82:e9:d3:93:8e:9c:
96:51:5f:09:fd:43:11:13:c7:ae:27:64:bb:af:3a:58:3a:53:
eb:13:48:61:b3:91:3a:54:31:eb:e7:02:a0:7b:0c:39:02:21:
0b:a3:8d:46:b3:11:84:1a:42:bc:65:90:95:c9:14:b5:f4:69:
d2:5a:d2:3f:c8:95:49:c9:ba:65:09:2c:3a:58:4e:d8:0b:8d:
f6:31:5c:d7:99:3d:32:54:30:d1:59:16:ab:b8:a7:9e:b4:dd:
eb:16:54:84:7a:28:68:c8:32:01:1d:04:f9:9e:34:fc:c7:f8:
23:49:d6:7f:d5:3f:0b:fd:9c:d5:4c:07:1e:f5:20:c0:a4:80:
88:df:f9:60:c8:08:db:1e:25:6b:4b:a1:20:34:c5:d2:a9:71:
ac:7c:1b:99:cc:8d:b5:ca:d1:2e:8a:72:6a:9e:7f:2b:71:ca:
f7:3a:29:6c:f8:80:a5:9d:de:e5:18:79:3e:96:c3:27:9e:7e:
24:b7:f2:f6:a5:d4:28:21:86:2c:99:db:dc:92:77:b2:18:6b:
86:0d:74:10:f8:bf:f1:c3:37:2f:7f:c4:75:64:ca:51:91:72:
eb:eb:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:58 2024 by rpki-client on console-ams.rpki-client.org