Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/5qrKVNDv9vFISk00vWz7UBqo8gI.roa
File: 5qrKVNDv9vFISk00vWz7UBqo8gI.roa (raw, json)
Hash identifier: +R0tmG+gQYry+NIzAWsAwUUjCkt1XoEckjMrR9JiUo0=
Subject key identifier: E6:AA:CA:54:D0:EF:F6:F1:48:4A:4D:34:BD:6C:FB:50:1A:A8:F2:02
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 018CC7261935A5B0146EFB2CA8AA06B622A1
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/5qrKVNDv9vFISk00vWz7UBqo8gI.roa
Signing time: Mon 01 Jan 2024 22:30:11 +0000
ROA not before: Mon 01 Jan 2024 22:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31098
IP address blocks: 194.39.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:19:35:a5:b0:14:6e:fb:2c:a8:aa:06:b6:22:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Jan 1 22:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6aaca54d0eff6f1484a4d34bd6cfb501aa8f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:a5:8a:37:a2:02:5a:05:8b:10:9d:0d:e1:
71:d6:6f:f6:7e:72:63:2d:61:09:3e:86:84:ba:d5:
2d:e5:8e:a6:09:85:cb:09:c4:57:05:b2:d6:e4:f1:
e6:44:73:a7:b4:9c:72:3c:30:31:21:dd:a3:dc:60:
cc:7a:99:f0:ee:07:a2:f5:76:06:34:75:43:12:14:
f3:9f:d8:e7:2a:cf:9a:e8:b1:ba:17:1a:8a:c7:8b:
0e:5c:07:6b:2b:06:68:24:0b:6a:51:6e:3d:be:d1:
4c:09:e1:96:93:94:cb:4b:e0:71:e2:75:d8:cf:29:
20:70:27:8c:d4:ba:3d:d5:80:1b:ea:e9:dc:67:89:
77:02:a5:7b:77:d1:e2:65:ca:f3:cc:a6:65:b0:63:
23:8f:7c:f5:c3:21:ff:9a:e3:e0:a6:80:64:cb:74:
c9:33:3d:c4:47:76:03:bd:f7:8d:d9:f5:09:53:03:
ac:a0:2c:ce:2c:59:5c:ef:06:7c:30:b5:63:1a:4d:
a2:f5:d8:90:fe:37:ae:43:05:cb:9f:7e:e7:c2:8e:
0c:d8:eb:3f:70:db:95:7f:39:18:a9:e7:12:17:fb:
b1:9a:bf:dc:18:f6:fa:6f:f3:96:fe:10:e4:9d:88:
0f:d3:c6:86:a3:f5:52:c6:5e:b2:60:c6:c8:c8:7d:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:CA:54:D0:EF:F6:F1:48:4A:4D:34:BD:6C:FB:50:1A:A8:F2:02
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/5qrKVNDv9vFISk00vWz7UBqo8gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d1:2b:ea:0d:24:ee:78:49:f3:9b:6d:52:3c:26:53:87:77:
89:a2:62:d9:a8:16:bf:9f:0d:57:83:de:8c:f2:4d:4c:29:1c:
98:3c:c3:3b:d4:78:bc:b6:fc:52:d3:ff:d4:03:3f:b8:0d:4b:
0a:83:f2:e7:75:63:3e:a9:1a:b4:b6:24:30:95:f1:46:df:b7:
15:c8:19:d7:86:d8:ee:7e:df:54:40:e2:08:b3:88:0d:3d:be:
86:e2:f9:3e:9a:3a:44:52:49:77:58:aa:f1:9b:62:60:8c:7a:
a6:82:2a:44:63:8a:20:a7:03:f5:db:a2:05:47:d7:55:82:15:
cb:e2:4d:3a:0e:98:7f:1f:ce:72:33:93:0c:86:fb:76:60:a4:
a9:c3:37:d9:fc:85:25:b9:8e:9d:50:f8:c6:6a:11:c9:74:25:
a7:89:44:9e:b7:54:27:11:43:c1:32:2b:2a:28:7b:a7:df:92:
76:10:a1:cd:a0:e0:40:e5:db:50:41:cc:d7:86:b3:5c:7e:ee:
6e:6a:bb:58:fe:67:44:77:15:f2:59:68:b7:8d:30:8a:f4:c7:
07:6d:3c:e8:ea:59:6c:f4:58:d2:43:ca:0f:bb:2a:f3:95:22:
e2:91:b3:1c:69:81:e3:26:c1:41:ab:7e:35:28:1c:85:9c:a7:
8f:d9:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:14:29 2024 by rpki-client on console-ams.rpki-client.org