Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DrJShOXg4imTyLAVTwF8SccdnlE.roa
File: DrJShOXg4imTyLAVTwF8SccdnlE.roa (raw, json)
Hash identifier: Vj6lL1s6X5XUlOFJopvC3rK9RWULI1CfINE1e1D8RYQ=
Subject key identifier: 0E:B2:52:84:E5:E0:E2:29:93:C8:B0:15:4F:01:7C:49:C7:1D:9E:51
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019023C819051AFDD097C1E04C7E96D3F90B
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DrJShOXg4imTyLAVTwF8SccdnlE.roa
Signing time: Mon 17 Jun 2024 01:20:34 +0000
ROA not before: Mon 17 Jun 2024 01:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202602
IP address blocks: 5.253.18.0/24 maxlen: 24
5.253.19.0/24 maxlen: 24
45.92.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:c8:19:05:1a:fd:d0:97:c1:e0:4c:7e:96:d3:f9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jun 17 01:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb25284e5e0e22993c8b0154f017c49c71d9e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:18:1f:60:11:f2:bf:b9:fc:e1:59:01:99:
8f:74:4b:5f:4c:6e:2a:07:87:6f:b4:3b:31:4a:dd:
45:08:48:8a:40:8b:c0:38:5a:1c:62:f5:46:cb:71:
88:9e:31:e2:87:70:8c:e9:c2:de:66:19:93:4b:f5:
22:02:44:ed:c8:41:ca:0a:17:33:73:ee:88:09:69:
51:85:38:64:aa:ed:49:c8:3f:92:c9:da:85:c3:44:
c8:ab:92:2f:4f:35:e3:12:5d:36:f5:7a:58:f9:14:
41:55:a3:fb:7a:86:0b:09:dc:a7:63:56:dc:0c:37:
c6:de:08:81:50:e0:b9:3a:2c:dd:61:58:01:3e:f7:
41:4e:1b:f0:6c:6c:97:9b:24:e4:81:b4:d0:ba:25:
bf:f1:df:ab:e8:0d:37:52:57:4c:7e:98:44:02:52:
8b:aa:5e:bb:60:eb:56:b5:61:e4:c7:c8:bd:c0:49:
f4:b9:ff:1c:3a:8e:66:d2:84:73:3b:97:12:7f:94:
cd:c2:c8:9a:89:e6:0d:20:46:ca:dd:b5:ce:e4:f7:
58:7b:37:a2:ad:d7:be:48:3d:e9:f5:95:13:84:13:
47:c6:d9:c4:57:3e:13:1f:2b:97:d5:2a:88:d2:4f:
24:f0:8f:d8:fe:fb:cc:b0:4d:de:8a:63:91:98:cd:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:52:84:E5:E0:E2:29:93:C8:B0:15:4F:01:7C:49:C7:1D:9E:51
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DrJShOXg4imTyLAVTwF8SccdnlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.18.0/23
45.92.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:48:28:ef:68:26:df:fe:e5:b8:84:dc:65:ca:5f:ff:b9:65:
16:8a:e2:6e:bc:fa:98:91:71:db:a1:2c:c5:33:72:9b:5a:d5:
49:2d:18:90:bb:95:0a:26:95:27:2d:df:85:cf:16:c4:e8:88:
f7:5d:64:3b:d0:2c:6e:72:66:5d:63:bc:e6:50:2c:60:dd:9d:
25:08:b4:9a:26:3b:69:da:cf:dd:1a:38:dd:f5:38:bd:dc:d4:
5c:54:ee:a9:3f:83:3c:62:9c:45:ee:50:85:40:34:33:93:b1:
b2:d5:3a:70:67:82:9c:a5:13:37:80:16:80:0f:5d:c6:ec:00:
27:72:44:3d:f8:2a:44:e1:e8:e2:e0:b0:1c:6b:27:14:7c:23:
a7:f5:93:61:bb:ae:f5:16:a1:04:cd:67:c6:29:a5:e6:2b:1d:
38:74:55:77:0c:69:a2:7d:79:64:e9:5d:1b:ee:f6:ad:af:b6:
64:8d:81:92:e9:d6:e7:5a:27:a5:8d:e8:e6:a8:25:30:e3:62:
bb:04:ca:2a:0c:8f:d7:c1:4b:e1:ae:75:72:15:15:9c:48:24:
20:b7:8a:c6:ff:eb:20:5e:e0:bc:3a:8b:80:d3:8f:02:28:84:
d3:95:96:ed:7a:1d:d6:10:5a:ad:02:f8:40:9d:73:f7:34:be:
d2:03:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:52:30 2024 by rpki-client on console-fra.rpki-client.org