Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/u5-dZRfNj1t9NdfA2g7G0C5pykQ.roa
File: u5-dZRfNj1t9NdfA2g7G0C5pykQ.roa (raw, json)
Hash identifier: 5y+wGuxXTd2Wpf6picyk+nfb2Gp9fmflqWSVNuHtBAs=
Subject key identifier: BB:9F:9D:65:17:CD:8F:5B:7D:35:D7:C0:DA:0E:C6:D0:2E:69:CA:44
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 0191E5E0028B6FD357C8B22B37E862E2A048
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/u5-dZRfNj1t9NdfA2g7G0C5pykQ.roa
Signing time: Thu 12 Sep 2024 10:55:48 +0000
ROA not before: Thu 12 Sep 2024 10:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214940
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:e0:02:8b:6f:d3:57:c8:b2:2b:37:e8:62:e2:a0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Sep 12 10:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb9f9d6517cd8f5b7d35d7c0da0ec6d02e69ca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:cf:81:eb:fd:9b:32:1f:a1:ba:83:f7:df:
1f:e6:03:b3:54:51:b1:89:08:36:dc:3a:3b:71:4a:
d4:95:0a:df:a6:a0:fe:55:73:98:6b:74:9d:bb:7a:
41:90:60:1b:cf:c1:1a:2d:93:3d:95:6b:52:0a:90:
7e:3b:78:1e:8b:d3:ca:4c:33:2d:f4:67:1b:47:ab:
d1:cb:9b:0a:98:74:f7:f0:a7:c8:2f:aa:a5:9e:5a:
80:c9:cd:4b:1a:f3:f6:66:d9:b6:ee:84:38:fa:de:
24:f1:b4:39:db:19:61:e0:0f:37:ea:2b:e0:cd:65:
6f:72:32:4f:18:4e:6c:01:87:01:37:3d:3a:57:80:
d0:f2:fa:b6:d6:53:eb:2b:d4:e1:15:af:ed:13:f1:
2e:7a:32:d8:2f:87:ba:6f:e4:f6:e0:78:6f:53:aa:
2c:eb:cd:e4:58:1e:f6:62:7f:de:c1:09:36:2c:5c:
51:8b:a7:9d:a7:16:1f:11:21:f2:ab:ca:25:be:78:
01:c0:51:50:0f:5e:8f:29:23:2e:fe:97:e5:f8:9a:
e6:87:cc:7a:0f:8c:36:4d:f0:5d:6a:2e:57:5e:f6:
0e:c9:1b:5f:ec:dc:ca:77:a2:d3:c8:bf:51:df:de:
b3:97:bb:c5:07:78:37:e7:58:20:e4:ed:61:42:39:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:9D:65:17:CD:8F:5B:7D:35:D7:C0:DA:0E:C6:D0:2E:69:CA:44
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/u5-dZRfNj1t9NdfA2g7G0C5pykQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4c:42:a3:6b:51:cc:5d:13:89:5a:8d:ed:4d:f0:6c:3e:e3:
46:a6:54:ac:81:10:a8:28:d2:26:dc:aa:d7:ff:54:0c:c9:90:
07:68:e0:26:0b:12:98:5e:76:cd:1a:48:f7:1d:ea:1d:c2:db:
d4:2a:7c:65:c2:e8:86:a2:f6:c5:3e:0a:64:b4:3e:6d:cc:fe:
37:7e:36:3c:6d:90:1f:a6:42:77:a5:8e:ed:6c:47:9a:8a:7f:
7c:0b:34:a8:84:77:a1:60:24:73:43:c5:82:d0:32:93:21:a0:
75:5b:ed:74:5f:de:11:f6:47:d0:0c:78:1c:14:77:dd:97:19:
36:38:f6:2e:78:d5:97:59:10:c0:ab:60:38:de:74:58:39:10:
05:de:ae:1e:d6:79:9f:19:e2:93:25:c8:f1:23:80:a8:73:de:
36:a1:d1:fb:86:38:c8:75:56:b9:bc:f8:e2:77:e3:9c:49:22:
fc:97:97:e6:8d:60:50:bf:1f:9e:3c:46:b4:99:06:b6:ce:0b:
44:6a:15:c0:9c:a1:41:43:ff:2f:e1:ab:b8:ce:d9:c0:bc:0e:
0a:54:b1:9f:82:3f:35:98:77:84:5d:08:0e:1e:f5:1e:91:d3:
fc:8f:79:aa:12:72:99:85:73:2d:e8:f1:18:0b:0c:e4:34:8c:
1c:e5:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:02 2024 by rpki-client on console-ams.rpki-client.org