Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/DEda3ByyegGasGzPskJ4yXroPUw.roa
File: DEda3ByyegGasGzPskJ4yXroPUw.roa (raw, json)
Hash identifier: 5BA54ebfcC5ChaJ8F0vk5Ei/YY3mSqZ4HMVoWLubCyc=
Subject key identifier: 0C:47:5A:DC:1C:B2:7A:01:9A:B0:6C:CF:B2:42:78:C9:7A:E8:3D:4C
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 018CC94ABFA034FCC52D916AAD2DC8C1A2C6
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/DEda3ByyegGasGzPskJ4yXroPUw.roa
Signing time: Tue 02 Jan 2024 08:29:28 +0000
ROA not before: Tue 02 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210172
IP address blocks: 5.183.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bf:a0:34:fc:c5:2d:91:6a:ad:2d:c8:c1:a2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 2 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c475adc1cb27a019ab06ccfb24278c97ae83d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:b0:bf:99:c1:db:d7:f9:81:37:5f:86:5d:
96:40:9f:12:1f:cd:a3:aa:e2:b9:55:d2:11:6e:b1:
1d:d2:48:d4:a3:81:42:10:06:7f:dc:57:ff:1b:32:
0c:5d:bd:40:8d:75:1b:50:68:1e:02:20:5d:12:9a:
05:fd:d6:ec:ef:ef:d7:34:94:43:a5:3d:57:64:db:
ad:23:d4:f9:bd:c5:a4:6c:8b:07:f1:91:c8:65:82:
7d:9d:96:c0:48:5b:74:66:8f:93:0a:7e:d6:9a:f3:
eb:f8:82:0e:80:34:40:4f:79:7c:a7:cf:fb:65:06:
73:f6:b8:06:a9:02:6d:2e:e6:6e:c7:3f:b3:df:a4:
d0:51:8b:4f:f1:9a:fe:7c:27:92:44:66:a7:27:21:
9a:5d:d7:58:a3:55:4b:9d:b2:64:5b:3d:73:21:75:
c2:67:27:1c:d5:db:88:d0:50:11:e3:f9:72:49:a6:
45:92:95:88:92:1c:84:fa:99:02:3d:f7:bc:01:c7:
aa:08:0a:b8:fe:c0:46:5a:64:cd:c6:a9:72:44:5d:
aa:f4:0c:c2:91:f2:0a:57:cc:50:37:2d:eb:4f:87:
08:8f:2b:83:60:5b:f6:ac:0b:6e:8a:fa:a8:cc:ca:
92:ff:d7:d4:ac:e2:e0:b3:c2:b9:3f:fb:89:f8:f2:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:5A:DC:1C:B2:7A:01:9A:B0:6C:CF:B2:42:78:C9:7A:E8:3D:4C
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/DEda3ByyegGasGzPskJ4yXroPUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3b:bf:44:90:d4:b4:15:7a:57:89:48:2f:05:a9:ee:09:0d:
37:ae:72:ae:cc:88:ef:c6:b2:84:48:bf:a4:12:f4:4b:0c:ee:
44:6d:45:90:48:69:03:37:0b:12:54:0b:82:1e:c6:29:81:ca:
67:b3:74:5d:9f:c7:1f:22:d5:d7:1a:0c:b2:25:3a:8f:51:5b:
09:75:bf:cc:9d:33:ee:57:b5:9a:4f:b0:b6:9e:58:a5:34:7b:
54:79:09:ef:36:bd:3a:46:37:b0:be:05:72:6d:4c:59:52:84:
5c:f6:33:80:d1:54:4f:2c:76:e1:52:20:41:04:e1:c8:c3:bd:
63:e3:1f:42:30:5b:e8:c5:16:4e:c2:7a:7c:ae:e6:33:1a:2d:
bf:07:b0:a8:13:8e:64:c3:61:aa:ec:8d:b2:8e:5b:c7:52:ea:
a1:85:28:78:a4:82:47:12:ad:fe:f9:1c:30:48:c2:54:e9:85:
3f:46:77:9d:6e:bd:5d:1a:32:77:e6:3c:ee:fa:20:a3:00:ab:
d5:26:66:e1:76:65:4f:9f:aa:be:56:d4:ca:db:8e:74:5c:3c:
7a:77:21:44:0d:c8:35:0a:08:65:52:7a:22:ca:70:49:96:ec:
52:f5:ab:99:ff:4b:c8:6a:da:dd:ca:aa:03:72:a7:27:ec:20:
1c:47:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:10:43 2024 by rpki-client on console-ams.rpki-client.org