Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/RWP5Auo_4SbRegnvpkBtzJe774M.roa
File: RWP5Auo_4SbRegnvpkBtzJe774M.roa (raw, json)
Hash identifier: BhQ1Tn0szR0IB/IqYEi1fU2HL77UZ14g1p0tGt1K198=
Subject key identifier: 45:63:F9:02:EA:3F:E1:26:D1:7A:09:EF:A6:40:6D:CC:97:BB:EF:83
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018CC4931E4C91532995DF303B54B3794EC4
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/RWP5Auo_4SbRegnvpkBtzJe774M.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211670
IP address blocks: 5.190.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1e:4c:91:53:29:95:df:30:3b:54:b3:79:4e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4563f902ea3fe126d17a09efa6406dcc97bbef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:cf:c8:47:fc:a2:a1:b1:e0:3a:33:ba:d9:
f4:5d:9b:13:ac:5e:8f:a9:78:e8:d7:cc:e9:cd:87:
6a:33:dd:a8:46:73:e5:8f:18:3c:5e:13:95:d3:31:
3f:4f:e1:f6:34:4e:04:93:3e:34:5c:d6:e5:64:42:
9f:b0:57:67:b0:b9:ec:85:fa:d9:e9:4f:af:64:02:
b7:70:9d:5a:a2:5a:66:f3:df:91:bf:56:9c:e7:ac:
10:29:6b:ab:14:86:67:2e:b5:a2:07:5b:11:f8:b0:
9a:f6:31:ee:da:7d:0d:a5:31:b1:97:99:d2:cb:ed:
f5:70:40:13:d3:4c:aa:b7:77:4f:25:7d:19:12:91:
1a:d9:19:1f:55:48:6c:f8:bb:28:0e:0c:42:e2:b8:
a5:86:21:20:21:a5:17:93:91:b5:32:21:6d:f5:b7:
e0:ab:0f:05:eb:29:51:b4:74:a7:d8:c7:45:59:dc:
bb:77:69:83:ab:05:ac:db:44:fa:eb:ee:87:2f:c6:
65:e1:25:ba:21:54:cc:7a:98:02:27:2d:3b:59:f6:
cf:4c:c3:21:94:c3:dd:0c:bf:65:fa:e5:1e:fc:fa:
2a:13:f7:cd:35:d4:2c:94:62:3a:2a:54:94:77:bc:
94:c4:80:b0:44:07:1e:c6:1b:40:cb:11:2d:89:fc:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:F9:02:EA:3F:E1:26:D1:7A:09:EF:A6:40:6D:CC:97:BB:EF:83
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/RWP5Auo_4SbRegnvpkBtzJe774M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.190.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3b:69:ff:bd:11:4e:38:34:0f:9e:7e:6e:e4:40:64:71:d7:
91:5e:02:61:e1:27:7b:d1:0c:84:71:a7:65:e8:9c:43:ac:9a:
f3:4c:1a:74:5f:b7:80:ca:c8:4e:a0:2b:00:53:5c:e4:f4:d8:
9e:3d:8e:80:87:23:cf:25:60:a0:56:ca:a7:05:2a:96:0c:17:
e8:3e:7a:0b:f0:a3:d3:e7:d0:da:b6:51:e6:16:2c:65:12:f0:
9f:99:df:16:e3:02:6a:cf:c5:6a:c6:37:d9:87:df:16:2d:2e:
a4:0e:35:d0:99:89:20:37:f7:91:15:fa:b3:d4:91:b4:d8:79:
95:96:e7:af:42:84:f5:32:db:b7:f9:65:de:f5:86:4b:4f:76:
af:07:33:6b:31:e3:79:af:49:85:b1:95:10:a2:2b:ec:a4:03:
9c:4f:bf:b2:9a:a0:b0:21:fb:a0:3b:80:4e:90:31:e0:ba:41:
0c:d6:5b:f7:6a:47:5a:b5:87:b8:c4:47:60:8c:c8:de:6a:91:
d8:79:71:6e:a6:4b:15:ce:a9:a5:b6:6d:25:54:f1:9b:46:f0:
be:74:d1:21:84:b5:03:eb:74:5f:73:9f:8b:2f:05:fe:d3:f2:
b6:30:7f:2c:05:3b:b3:ab:6d:a1:8e:12:c3:13:cd:5b:c2:24:
5f:c8:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:19:41 2024 by rpki-client on console-fra.rpki-client.org