Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/ssxWdheyIGBlE4lgksY7bHLiaCY.roa
File: ssxWdheyIGBlE4lgksY7bHLiaCY.roa (raw, json)
Hash identifier: CvzUigDHZ6QCdq1FoE2nIYQUe7rX+Vb+sAQkwbauSsk=
Subject key identifier: B2:CC:56:76:17:B2:20:60:65:13:89:60:92:C6:3B:6C:72:E2:68:26
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 018CC5DCA33FFE5EA3E6E9A7C2A9BB82DB2F
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/ssxWdheyIGBlE4lgksY7bHLiaCY.roa
Signing time: Mon 01 Jan 2024 16:30:20 +0000
ROA not before: Mon 01 Jan 2024 16:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31400
IP address blocks: 5.132.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a3:3f:fe:5e:a3:e6:e9:a7:c2:a9:bb:82:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Jan 1 16:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2cc567617b220606513896092c63b6c72e26826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:31:b3:cc:ee:cb:50:62:4a:12:56:b2:02:
7f:ef:89:94:0b:a4:89:89:cf:80:c8:e7:13:a3:0c:
bf:21:f6:65:bd:e9:08:ee:ba:99:5c:16:3e:06:86:
df:5f:b9:59:82:7b:ff:9f:c9:ac:1b:f3:0e:9c:9f:
3f:0d:66:9d:38:3f:6a:3f:ed:9f:67:a6:c0:22:27:
ed:6f:fd:df:c7:04:9f:d1:dc:4a:10:16:2a:53:7f:
4c:dc:d4:2f:38:5c:16:06:7b:73:24:36:c8:9c:8b:
46:27:32:ea:b1:86:3d:c5:ac:92:bb:87:c7:bc:e7:
15:79:27:8c:9c:dd:3b:08:ea:b6:8e:22:21:a0:3b:
d5:45:74:1f:0d:de:0f:bd:ee:c4:0e:4a:20:68:58:
d2:d8:af:dc:be:ba:02:a3:5c:83:94:bf:d0:a1:62:
a0:e0:e5:bf:e7:b0:b2:b4:18:55:b7:7e:35:a3:b0:
11:c0:cb:17:5a:29:82:75:82:f4:a3:eb:3c:20:9f:
d3:24:3b:00:59:23:15:10:65:0e:57:29:47:2b:e3:
1b:d7:ed:3c:d3:38:36:59:59:b4:b9:2a:6a:6d:18:
d3:9c:d4:bc:22:e8:ca:d5:ec:04:53:66:0d:42:a8:
cf:fa:04:3f:d7:73:03:94:c1:85:d3:d0:40:ad:85:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:56:76:17:B2:20:60:65:13:89:60:92:C6:3B:6C:72:E2:68:26
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/ssxWdheyIGBlE4lgksY7bHLiaCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.132.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bf:b7:6b:67:c9:0b:bd:1f:e2:27:7e:88:7a:23:ba:db:1a:
1c:26:74:4a:a0:03:b3:53:f7:b9:cf:16:11:02:2c:81:28:17:
af:0b:85:43:e8:8e:af:f9:12:7f:43:0e:1f:fb:ab:0d:32:db:
6a:0b:9a:13:52:96:bd:5d:5a:be:68:48:88:18:ea:b4:9e:f0:
93:32:53:1b:8f:7f:dd:5f:12:bb:54:56:43:40:99:5d:75:8c:
b2:2d:2c:be:8d:8b:25:05:bc:95:3a:dc:44:6c:92:c1:9d:b1:
e6:3a:f4:df:65:6d:f5:06:58:4a:2d:e4:d9:11:46:e4:cc:0f:
f8:64:ae:db:42:af:89:36:86:5d:d9:a9:e2:7d:1f:7a:49:bb:
8a:70:68:b5:70:80:10:86:a1:e2:8c:93:17:b5:cb:3e:b5:25:
dd:aa:f1:d9:14:03:b4:2b:6a:f6:40:53:f2:61:ed:48:3f:3f:
a0:62:9c:44:5e:7b:33:38:c6:cf:51:19:da:93:59:27:e3:d0:
59:20:62:bc:35:8a:51:29:db:6b:4d:91:2b:32:95:e1:1c:3d:
f8:a8:29:6b:08:fe:b3:fe:12:2c:65:4b:c2:a0:1d:a5:f0:f9:
52:a8:10:f9:98:15:84:25:8e:98:f4:0d:22:7c:4b:35:d7:c5:
a4:7d:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:31:37 2024 by rpki-client on console-fra.rpki-client.org