Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5SKhKMleRuhIzcl59ladxxLV0Dg.roa
File: 5SKhKMleRuhIzcl59ladxxLV0Dg.roa (raw, json)
Hash identifier: 6h1EPo55Wc99DgQ5vWLTN7UeuiwktYYVTYE+x33rRA8=
Subject key identifier: E5:22:A1:28:C9:5E:46:E8:48:CD:C9:79:F6:56:9D:C7:12:D5:D0:38
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8561D7CE54D14A213AF4A4717749
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5SKhKMleRuhIzcl59ladxxLV0Dg.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3457
IP address blocks: 83.125.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:85:61:d7:ce:54:d1:4a:21:3a:f4:a4:71:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e522a128c95e46e848cdc979f6569dc712d5d038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:83:77:b4:99:1c:6b:68:d9:d2:42:74:e7:
c1:7d:db:b9:7b:00:14:7f:cd:5c:83:13:91:3b:b6:
98:83:d2:18:3b:f4:7d:48:34:83:93:62:f0:06:f1:
fb:55:b9:e7:e6:8b:9b:d0:01:51:48:bc:50:cc:7d:
ec:37:5c:0a:ac:46:1a:d4:e6:a9:ab:84:9d:3c:1a:
23:18:b9:5b:81:77:f2:6c:3d:0e:56:a7:f7:93:95:
57:23:09:78:dc:90:b3:cc:a0:70:a8:22:b9:8d:17:
18:8a:ba:82:75:5b:85:fc:f3:e9:62:43:09:f6:0a:
4f:d3:f0:02:1c:9f:49:ef:7a:32:91:fe:f8:09:75:
e9:59:a8:03:f3:84:71:ef:9e:42:5d:4a:ef:7d:03:
48:5b:0c:78:16:5f:b6:c3:b7:59:b0:6d:b6:f9:3a:
65:2c:67:a0:8f:06:85:24:a1:88:b1:57:c9:ff:61:
71:ba:62:e3:03:18:83:41:e9:60:9b:e0:08:78:78:
6c:43:e2:29:b0:ae:6f:3b:ab:26:e0:eb:dc:63:7f:
db:b1:84:d1:00:37:64:d7:90:93:7c:32:76:f1:4e:
ac:56:b6:37:8b:86:72:43:06:0f:ee:1e:3b:35:ba:
3c:04:09:48:26:e9:72:98:e6:7f:8b:c3:1c:e6:03:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:A1:28:C9:5E:46:E8:48:CD:C9:79:F6:56:9D:C7:12:D5:D0:38
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/5SKhKMleRuhIzcl59ladxxLV0Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.26.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4e:fd:1f:28:30:13:40:9c:cb:e2:f3:4a:61:99:7e:54:93:
9f:9f:08:82:b7:ed:2e:1e:8b:96:fd:7d:84:ea:7f:9d:8a:0c:
5b:17:78:c1:fe:40:22:3e:62:dc:68:1e:77:3b:83:7e:b6:26:
c1:e0:b6:22:ca:2a:66:26:11:93:d6:30:51:f5:49:54:c8:54:
bc:bd:0a:84:91:9b:44:f3:9b:69:b8:3e:1f:c9:04:05:57:4a:
77:e1:7f:a5:b0:c4:7b:5a:b0:e7:7b:bd:17:61:ae:4f:e6:54:
b2:87:bf:1d:32:15:94:2c:b3:a3:bd:f2:82:84:45:4a:19:96:
59:00:98:a8:84:77:35:c7:56:99:84:f5:de:66:ed:c7:a1:2c:
b7:9c:f9:ec:62:e4:cb:2c:03:f5:9d:a2:3e:46:00:fe:77:f7:
da:44:c7:0c:8d:53:7e:22:2b:a4:09:61:41:cb:25:e3:70:f4:
e3:12:aa:3a:70:dd:78:13:b0:45:21:5f:da:e9:9e:a2:3d:34:
c1:df:45:05:c5:ae:f3:d9:c2:17:af:18:ba:16:76:02:3d:f4:
09:07:93:9b:88:d9:1c:a1:08:be:59:86:0a:25:43:84:81:68:
64:ac:8d:54:31:55:b0:7f:0b:c1:bd:82:a2:5e:e2:a2:de:7c:
17:69:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:47:55 2024 by rpki-client on console-ams.rpki-client.org