Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/R5wIRbpGNFv54-DW13yuONk94gg.roa
File: R5wIRbpGNFv54-DW13yuONk94gg.roa (raw, json)
Hash identifier: sDbAa6B0pbvoURWuBA2M4O1o2u/VQuaukoG6po9ysz8=
Subject key identifier: 47:9C:08:45:BA:46:34:5B:F9:E3:E0:D6:D7:7C:AE:38:D9:3D:E2:08
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 018CC349588106D9A9D21F7471B6995B74B4
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/R5wIRbpGNFv54-DW13yuONk94gg.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:58:81:06:d9:a9:d2:1f:74:71:b6:99:5b:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=479c0845ba46345bf9e3e0d6d77cae38d93de208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:01:86:cc:71:c5:b8:7e:c1:d2:b5:7b:38:
eb:09:b7:69:33:34:7f:cb:5c:3c:2b:22:bc:67:b3:
01:c0:20:7c:a9:f0:14:86:ec:39:71:4c:8b:16:da:
07:11:9f:1a:62:eb:e4:4b:7a:75:ea:71:e8:20:de:
20:6c:cf:58:4b:77:e4:dd:5a:79:16:90:fc:58:a3:
88:b4:9e:44:40:5e:e8:5d:5b:40:17:06:42:1d:09:
45:72:49:fd:8a:81:80:ae:19:f8:73:2f:1d:94:0e:
6c:00:7c:4c:dd:b1:8a:c7:d8:52:71:02:9f:1f:0e:
61:53:4c:d2:01:88:d1:1d:af:3c:0b:d9:1e:76:b4:
26:68:e7:1b:5f:dd:87:e8:31:a2:d0:41:d7:95:5e:
14:a5:10:47:54:4d:a0:40:ed:14:ea:9b:a8:b8:66:
f2:7e:27:ac:87:46:04:27:d1:ab:eb:69:e1:6a:e5:
9e:ad:39:ae:1e:ce:eb:86:e9:b4:91:3b:32:f4:17:
3f:86:83:97:01:24:39:9f:d3:16:c6:c7:ee:06:84:
90:27:c4:24:c2:55:ef:3d:31:73:33:6b:a5:b3:69:
7f:9a:7e:18:21:79:97:a8:c7:23:49:f2:55:50:17:
00:89:84:9b:b6:ed:d3:82:cb:17:0d:e2:c4:94:9d:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:08:45:BA:46:34:5B:F9:E3:E0:D6:D7:7C:AE:38:D9:3D:E2:08
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/R5wIRbpGNFv54-DW13yuONk94gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:34:13:53:64:d7:f1:c5:74:bb:ca:89:d1:da:28:a6:e5:20:
b7:04:9b:68:71:60:9d:b2:64:e6:dc:7a:04:c7:e4:a3:f2:02:
bc:90:47:ab:46:f4:2e:3d:c3:67:8d:69:3c:67:05:6c:23:55:
91:05:9c:cb:2d:47:d6:3d:03:42:95:4a:78:d4:2d:78:2c:11:
48:fd:dc:48:1a:0f:bc:79:d8:3c:47:f9:fc:9e:56:b6:88:55:
e7:0e:ae:2e:97:9f:66:73:ff:fc:ed:dd:1a:31:73:6b:b3:ad:
c1:91:2f:7c:04:3b:c7:b1:8e:48:30:5d:ae:c6:80:c4:2b:18:
48:08:5f:de:c1:1a:1c:d8:a1:56:52:a5:a4:27:50:13:69:fd:
88:03:56:84:57:58:b9:07:51:0c:f2:69:35:3c:89:f7:9f:5f:
67:fe:88:82:9d:db:81:87:b7:c4:c7:2d:d2:15:c0:ae:1f:4f:
e4:02:e3:cb:f0:c7:af:00:41:9b:f8:ce:c7:b6:4b:65:ef:61:
71:f3:f4:31:1e:7f:71:ed:7c:dc:c9:4e:93:ac:5b:e4:77:d9:
d7:c8:5d:32:b4:3a:08:74:62:c1:01:d4:ab:c0:c4:ea:74:f1:
73:8f:b0:0d:fb:b3:2e:94:1c:d3:9f:2d:82:40:f3:22:c2:9c:
df:8d:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:25:15 2024 by rpki-client on console-ams.rpki-client.org