Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ueJBktQ4v8jP-pfC1XtwzhvXvww.roa
File: ueJBktQ4v8jP-pfC1XtwzhvXvww.roa (raw, json)
Hash identifier: OTz16uXrUneqQ0QZp8v+Glwx6BeXIVxySFFpuBLqSSg=
Subject key identifier: B9:E2:41:92:D4:38:BF:C8:CF:FA:97:C2:D5:7B:70:CE:1B:D7:BF:0C
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018CC493854E2FF4AE3B5A842B47F5655B15
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ueJBktQ4v8jP-pfC1XtwzhvXvww.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 5.157.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:4e:2f:f4:ae:3b:5a:84:2b:47:f5:65:5b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9e24192d438bfc8cffa97c2d57b70ce1bd7bf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:23:4c:de:34:6b:1f:07:7c:93:3e:4d:a6:
a7:f8:59:d6:32:be:13:37:3e:4c:6a:bc:03:63:0d:
a8:bd:5d:ee:88:e9:14:69:67:c3:f9:a9:b0:2d:5f:
41:c2:e0:69:d5:5b:f6:c0:53:5b:73:46:af:db:52:
2e:9a:18:47:f2:fa:0f:fb:c5:60:3a:22:87:a3:aa:
a1:ab:91:ac:4b:ed:45:cf:a3:6b:6c:9c:68:19:e5:
cd:b3:83:72:9a:93:18:e3:5d:d4:c2:43:e8:ea:c7:
4a:9c:20:1a:c2:23:e4:fe:13:9b:04:ca:ca:88:10:
f9:41:a5:02:37:c1:90:21:71:ec:8c:9c:3b:48:d5:
40:8d:91:52:4c:6c:6e:45:50:29:74:6a:2a:75:1f:
20:6d:7c:6f:cc:67:5c:2f:4a:83:89:5a:06:cd:fd:
31:f9:00:11:bb:5a:54:67:43:93:ef:a8:7d:42:cf:
fc:09:75:35:2d:1a:32:12:2e:ae:ee:f7:71:b8:89:
2e:c2:49:25:0a:d8:9e:45:8b:8c:b3:e1:95:2e:7c:
bc:a8:d3:e3:71:9a:57:e7:24:b6:2a:be:8b:cd:72:
cf:31:fd:0f:c1:52:33:ca:1d:bd:37:17:ab:3f:e2:
5e:75:af:c4:b4:f4:c2:cb:6b:a1:68:ec:a1:01:13:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:41:92:D4:38:BF:C8:CF:FA:97:C2:D5:7B:70:CE:1B:D7:BF:0C
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ueJBktQ4v8jP-pfC1XtwzhvXvww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.128.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:9e:45:7b:1a:ee:af:32:3a:56:cf:a9:27:79:0c:01:31:
fc:58:1e:21:dd:57:4a:33:2b:d1:84:c8:dc:37:51:11:1f:76:
39:ad:6f:9c:63:7f:1e:de:f6:c5:ba:20:ae:f4:43:c9:6e:f3:
2c:6c:ab:46:9f:30:ae:cb:45:5b:cd:a4:ce:bf:15:ae:d6:7a:
bb:45:a2:74:d0:61:6b:37:3f:72:34:fd:14:bd:f2:c3:86:d0:
fa:2e:9f:0a:88:4e:a4:b4:85:17:da:75:64:c1:43:94:0f:8f:
45:73:0a:43:2c:ab:18:1f:83:6d:c5:31:2d:1b:26:a1:13:bc:
62:6b:de:a2:77:7e:90:2d:46:52:ef:3d:0e:90:d5:35:88:f7:
61:7a:c4:c6:71:4a:9c:ca:00:b3:79:dd:65:4d:49:7d:ab:c5:
f0:c6:e3:f6:a5:85:05:61:f2:cf:96:e5:ac:1c:1b:ed:46:3a:
78:c3:15:35:4c:a0:47:4c:58:74:8b:66:13:a4:b9:f8:67:75:
49:76:b3:b6:7d:93:e7:95:c8:a4:5b:36:2e:0a:fd:a2:74:de:
41:21:b2:10:5f:ff:4c:6f:5f:60:0f:44:00:fd:61:46:c6:81:
e4:2d:d8:3f:a7:23:31:ab:65:c9:c7:ef:4e:e8:d3:22:3e:da:
65:f9:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:13 2024 by rpki-client on console-ams.rpki-client.org