Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/plBciUQQ0ImO2Mhbuam2n_zesjY.roa
File: plBciUQQ0ImO2Mhbuam2n_zesjY.roa (raw, json)
Hash identifier: Fw/VM4/6pBdVS8mDllOT3UQE3loPzcYi5+HAjA0T6sY=
Subject key identifier: A6:50:5C:89:44:10:D0:89:8E:D8:C8:5B:B9:A9:B6:9F:FC:DE:B2:36
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018DC7CCBECEA503E12C14C9CB8A5939494A
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/plBciUQQ0ImO2Mhbuam2n_zesjY.roa
Signing time: Tue 20 Feb 2024 18:35:00 +0000
ROA not before: Tue 20 Feb 2024 18:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216366
IP address blocks: 194.113.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:cc:be:ce:a5:03:e1:2c:14:c9:cb:8a:59:39:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Feb 20 18:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6505c894410d0898ed8c85bb9a9b69ffcdeb236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:a4:a6:b7:11:f7:23:1d:e3:a6:de:44:1b:
b9:e9:42:fc:9d:fa:d4:7c:16:d1:c1:be:3c:80:34:
ce:3f:19:f1:06:5e:eb:bf:a1:97:79:96:ba:a0:b8:
6f:77:0d:c2:c2:b2:4d:79:ea:67:c3:b1:ac:03:98:
c9:17:4d:b4:85:25:2a:2b:2a:73:50:53:12:16:4a:
f5:ff:33:f2:3b:8c:9a:b8:32:98:e1:1b:63:da:68:
20:81:bb:dc:60:be:87:9c:3c:f0:eb:97:64:78:24:
9f:01:6c:f9:13:7a:88:61:94:d5:2f:ec:44:8a:09:
c1:bc:e8:50:79:c7:7c:4f:50:72:bb:c0:8b:3d:57:
d7:a3:0b:9d:02:f7:2c:66:1b:aa:dc:a1:a3:35:8a:
25:69:d0:f4:ea:49:25:79:21:ce:9d:36:a1:47:28:
10:11:58:ca:1c:a2:de:7b:4a:99:13:d1:4e:97:d1:
7e:57:b0:16:ad:3f:ff:3b:aa:bb:63:3b:f8:f0:73:
a1:a4:44:17:47:08:ff:09:3c:bb:4b:41:7d:65:ba:
16:fb:ed:3d:39:56:41:4f:94:eb:e2:cb:1e:40:8a:
85:9e:fe:57:92:0a:a2:38:de:07:f4:80:7f:61:70:
ee:78:ea:74:2a:fd:74:80:77:6a:d0:0c:54:96:50:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:5C:89:44:10:D0:89:8E:D8:C8:5B:B9:A9:B6:9F:FC:DE:B2:36
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/plBciUQQ0ImO2Mhbuam2n_zesjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.151.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b6:ab:91:18:21:f5:37:7d:50:2d:91:97:93:5a:25:3c:de:
5d:ba:48:ad:6a:83:d5:fc:6c:8a:36:ee:11:77:04:86:95:41:
01:e6:1f:0c:75:35:90:e3:d5:40:4f:71:ba:66:f1:c6:2c:d6:
7b:57:2f:e3:4e:6f:c5:15:9f:02:93:92:07:78:23:c6:f7:5c:
7d:fd:12:6f:47:1a:d3:8b:40:3a:08:69:22:c2:bf:88:16:bd:
f6:46:84:09:36:7b:51:a8:53:00:d5:8a:f1:c8:74:75:a3:cc:
dc:85:ae:7d:28:e9:dc:aa:0d:6e:2e:c9:80:ad:ef:31:fb:ac:
ca:95:50:e3:99:6f:74:c6:57:20:b4:c5:25:f9:30:44:80:14:
4a:f8:2c:f0:13:d7:b1:2b:88:9f:a1:db:ae:d9:91:27:f2:38:
3d:21:11:8d:2c:bd:77:b8:76:b6:e2:59:6c:ee:c5:f4:f3:34:
df:8a:c9:69:67:4a:e3:87:a5:02:84:7d:b8:29:e0:7e:63:c7:
e5:bf:32:7c:32:5c:78:5c:4a:ba:cd:4e:fb:bf:5a:b5:fa:e1:
83:31:89:fc:30:68:3e:50:25:93:a6:20:74:4f:77:5d:6f:2a:
73:07:5b:8c:36:39:41:51:bf:1e:da:13:89:28:4d:bb:bc:2c:
07:08:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:42:33 2024 by rpki-client on console-fra.rpki-client.org