Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/5t56b3Sui8opDor2qpOSpC7lFeA.roa
File: 5t56b3Sui8opDor2qpOSpC7lFeA.roa (raw, json)
Hash identifier: hJ7FUYTVqVwIJYo7T62Rv81+FZ6uzPezO1YHIN8inwg=
Subject key identifier: E6:DE:7A:6F:74:AE:8B:CA:29:0E:8A:F6:AA:93:92:A4:2E:E5:15:E0
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018CC726DE75519BFAD4EC7C7C2FE5C53947
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/5t56b3Sui8opDor2qpOSpC7lFeA.roa
Signing time: Mon 01 Jan 2024 22:31:02 +0000
ROA not before: Mon 01 Jan 2024 22:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35575
IP address blocks: 193.117.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:de:75:51:9b:fa:d4:ec:7c:7c:2f:e5:c5:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 1 22:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6de7a6f74ae8bca290e8af6aa9392a42ee515e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:f7:b9:83:e1:d8:da:20:c0:c2:c1:8d:4c:
b3:b7:f9:78:dd:f9:30:7b:01:41:e4:e1:34:d8:59:
fb:1e:fb:c6:3b:7e:50:c6:f8:3a:5a:d6:5b:39:02:
5b:37:da:ad:c8:83:7e:02:76:f3:b2:99:72:95:95:
18:b6:e6:fa:76:4a:af:d9:10:9c:b6:7b:3c:1d:a0:
29:9f:e1:be:1b:41:f5:a7:38:4f:06:37:fe:b1:79:
77:23:cf:57:ec:52:ce:b3:e3:ed:43:7d:6d:a3:e7:
34:df:6e:6a:b4:aa:74:89:f2:95:96:b6:47:35:48:
38:d5:40:db:87:4e:a3:0f:a7:7a:80:ee:02:8f:3a:
18:ed:97:c7:a4:68:32:01:49:1f:07:0c:0c:47:31:
d2:4b:6c:5d:a1:84:8f:e0:e9:ef:14:f2:d2:63:77:
95:14:bd:74:49:0b:d1:a3:da:00:24:b2:b3:c0:07:
a7:8c:83:41:25:c0:8c:77:be:b9:78:79:4a:03:d0:
a7:8d:6c:f2:41:50:d4:7c:34:1f:4e:b4:04:67:43:
51:81:9c:a2:44:0e:2c:7f:66:bc:93:aa:a5:6d:6b:
4c:a4:06:f6:24:c9:05:8f:bf:79:b8:11:f4:83:4a:
27:0d:c6:1c:9e:5f:b9:b7:c4:98:b4:5a:5a:bc:74:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:7A:6F:74:AE:8B:CA:29:0E:8A:F6:AA:93:92:A4:2E:E5:15:E0
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/5t56b3Sui8opDor2qpOSpC7lFeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.117.56.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cb:4a:1b:56:0d:fc:80:5c:f3:b4:fb:fa:6f:44:52:52:32:
58:f0:55:30:3b:b8:76:56:c7:6d:47:93:9d:95:55:ee:00:7d:
b8:bc:1e:fb:dd:1e:d0:73:f2:c4:f7:4e:80:b9:b2:1f:8a:ba:
a4:08:36:e1:ea:dc:cc:64:dc:e9:6c:df:3c:0a:55:51:dc:6e:
65:87:a8:f3:e0:1e:39:5b:62:9b:dc:96:3f:80:b2:ba:bc:9a:
dd:b6:cc:09:a6:0e:52:1e:9b:33:e3:66:0e:40:a5:2a:fe:e8:
23:dc:9d:44:77:49:ad:ce:9b:b9:21:a4:47:72:82:82:1a:41:
a1:56:7a:68:4e:e2:fd:86:bd:fa:08:da:7a:93:23:77:b9:26:
5b:0b:72:56:7c:b3:4a:ce:49:bc:1e:e8:0f:e4:14:62:4c:9e:
bd:c8:5b:91:e6:11:63:e3:bd:72:03:99:00:88:d0:22:fa:96:
51:8a:77:ca:4e:17:1e:70:10:74:71:ba:e2:60:ad:50:b5:5f:
60:ae:93:68:de:24:2a:79:59:83:7f:4e:79:3f:42:72:14:4e:
7a:63:41:9b:cd:fc:89:32:bb:89:56:35:13:37:73:2d:37:96:
95:51:81:8c:63:1c:de:52:09:4c:23:2a:51:3e:b1:d7:58:47:
9a:1d:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:27:52 2024 by rpki-client on console-ams.rpki-client.org