Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/0suOtXJPQtSFUvb6pHc2yNEq1oQ.roa
File: 0suOtXJPQtSFUvb6pHc2yNEq1oQ.roa (raw, json)
Hash identifier: VvuPHZSeXlx0aKsfLbsiuEPZ1NIzkSuMLRGdpu8Iw7E=
Subject key identifier: D2:CB:8E:B5:72:4F:42:D4:85:52:F6:FA:A4:77:36:C8:D1:2A:D6:84
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018CC8DE8E9160FAF495B2F35D52C3D86D71
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/0suOtXJPQtSFUvb6pHc2yNEq1oQ.roa
Signing time: Tue 02 Jan 2024 06:31:17 +0000
ROA not before: Tue 02 Jan 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60222
IP address blocks: 5.255.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8e:91:60:fa:f4:95:b2:f3:5d:52:c3:d8:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 2 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2cb8eb5724f42d48552f6faa47736c8d12ad684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:79:88:50:24:30:48:8f:b5:3f:cf:2d:e1:
04:79:19:eb:47:00:0f:dd:e9:86:13:82:a9:21:4d:
ce:8b:20:4d:e0:7d:14:54:d9:08:b4:04:57:84:eb:
1d:ec:05:1a:34:8c:50:ac:f3:62:a4:66:f7:f7:98:
6c:9e:b6:09:e9:fe:54:7d:6a:c1:b7:95:15:05:b2:
8d:d5:d6:7c:cb:34:3e:6d:d1:74:81:32:f8:3b:fe:
9b:b5:b8:64:96:9c:88:09:f0:51:53:8d:49:91:d7:
0c:dd:14:86:ef:d7:96:7a:a8:6e:e1:fd:ec:36:41:
be:b4:ce:44:84:9e:b8:34:ae:13:20:78:0b:e5:f6:
e2:18:3e:9e:3a:a2:5d:56:7d:de:4c:72:05:42:3f:
6c:2d:b8:a4:55:56:6c:1d:3c:06:02:02:59:ee:4c:
13:74:37:37:ea:ea:16:6e:3e:54:31:a4:bf:0d:c0:
a2:eb:80:6c:47:81:f7:e8:22:14:d3:49:82:77:cf:
8b:76:b3:93:f0:3c:be:d9:f3:8a:cd:84:11:8b:20:
d3:c0:b2:e4:44:c0:42:c6:73:d5:f1:f5:a4:cb:ba:
0d:4b:48:de:66:7b:5e:0a:42:bc:dd:69:71:f7:fe:
21:1a:21:0f:d3:d0:81:a1:46:e1:02:94:03:42:23:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:8E:B5:72:4F:42:D4:85:52:F6:FA:A4:77:36:C8:D1:2A:D6:84
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/0suOtXJPQtSFUvb6pHc2yNEq1oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:42:98:6c:82:3a:96:cd:0d:12:b1:7c:e1:b6:f7:47:b2:5b:
67:a6:7b:5d:a4:16:9b:00:89:e5:23:9a:e1:05:b8:88:2c:77:
dd:ab:b4:f0:f5:65:50:b5:89:02:e8:c2:e4:64:45:00:f5:27:
4c:e4:15:f0:98:28:dd:4f:9a:85:74:30:34:96:3e:42:08:e4:
78:2a:e6:85:23:ba:0b:db:87:73:24:08:e0:43:73:d1:54:73:
08:6e:bb:09:18:69:f3:79:6a:74:5e:ef:a7:ca:36:6b:8d:fa:
cc:ed:c0:72:26:aa:cb:ae:42:70:c4:ad:af:66:2f:c1:58:1a:
97:39:73:5b:96:56:ef:12:13:a3:0b:b6:6a:d2:8f:36:dd:3c:
25:53:46:47:95:a9:3b:ba:9d:91:14:60:d4:85:73:d4:71:eb:
68:58:18:d3:24:ea:fb:18:0d:9f:ec:8a:d0:c6:ed:ac:f7:fd:
c0:79:c3:99:1f:20:20:b1:b9:e6:be:28:44:ba:af:26:39:1a:
bc:01:d3:c2:64:85:65:74:7b:34:09:44:4e:4a:00:7f:9d:e7:
78:54:93:9d:5e:41:97:c3:8e:9b:44:9a:58:63:a3:55:00:67:
d7:ca:88:9c:b7:2d:a8:b0:96:bc:b1:76:c1:8e:26:85:2c:97:
d1:01:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:46 2024 by rpki-client on console-ams.rpki-client.org