Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-MNxj0d1XbqfwWpU7KzVup-C33Y.roa
File: 1-MNxj0d1XbqfwWpU7KzVup-C33Y.roa (raw, json)
Hash identifier: DoX2OjRmD2GhpffyyMvNv8KYaE2E0XcbZ+DdtPIEQRs=
Subject key identifier: F8:C3:71:8F:47:75:5D:BA:9F:C1:6A:54:EC:AC:D5:BA:9F:82:DF:76
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018DF9FEE6EA8CDFF4EEBB61E28B0F1A3DA9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-MNxj0d1XbqfwWpU7KzVup-C33Y.roa
Signing time: Fri 01 Mar 2024 12:30:48 +0000
ROA not before: Fri 01 Mar 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 5.180.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:fe:e6:ea:8c:df:f4:ee:bb:61:e2:8b:0f:1a:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c3718f47755dba9fc16a54ecacd5ba9f82df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:83:1b:90:6c:13:27:f2:31:90:0b:0d:c4:
3f:bf:a7:b7:48:65:c4:97:c7:7d:a9:d4:d1:cf:53:
a1:89:f5:3c:a4:51:22:b0:97:6c:08:f1:56:84:d4:
a0:9b:2f:08:eb:46:78:12:1b:91:81:20:a7:d8:94:
25:f5:b2:e9:21:b7:d4:e3:a3:f0:be:86:c7:c4:48:
0c:50:16:cb:85:3e:40:45:9f:01:3c:76:01:5c:96:
c4:9f:2d:7b:95:4b:e5:5c:30:20:7e:44:2f:5b:20:
04:ba:b5:e8:62:2d:64:cb:58:9d:9f:91:b5:ad:da:
f0:2f:36:80:82:72:ee:06:38:1b:70:26:f6:2b:a2:
74:ad:86:b4:19:2b:2b:1d:b9:e9:c5:a7:1f:9d:0f:
c1:dd:5c:8b:82:9a:66:d4:dc:3a:48:1d:2a:2e:d9:
51:09:54:86:d2:b4:c0:05:ea:27:88:1c:5f:f9:21:
3c:b5:86:ce:f1:4f:d7:33:31:8b:a9:d0:cd:d1:5b:
4d:1b:4b:1a:7c:8d:7c:9b:46:34:af:ff:05:37:5e:
1d:60:e3:6b:ba:a9:f9:7d:cb:25:94:91:e9:52:73:
3e:71:b2:22:b3:42:4c:ac:17:03:6d:64:97:86:51:
97:96:15:20:70:35:7f:24:53:99:d5:32:a1:57:40:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:71:8F:47:75:5D:BA:9F:C1:6A:54:EC:AC:D5:BA:9F:82:DF:76
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-MNxj0d1XbqfwWpU7KzVup-C33Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.235.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:aa:ab:8b:53:fe:18:70:e1:79:6e:8b:bb:a3:cf:7c:60:2c:
4b:a8:c6:75:bb:60:ed:94:e5:27:ca:41:99:8a:2e:da:c5:8b:
72:22:4c:fd:3e:08:b3:74:4d:bc:35:c8:5e:27:c7:6e:fe:ee:
41:dc:80:00:1a:88:aa:15:9b:3e:e1:7e:c6:cc:ac:5d:5e:19:
9b:d5:0d:a7:62:7a:0b:a2:5a:b3:20:da:4f:1f:51:c5:93:b9:
5e:bd:6b:41:b9:35:04:f8:43:9c:0f:e0:23:3a:10:65:74:4a:
26:e3:b7:d8:5c:63:33:97:93:94:08:b4:bd:28:16:25:56:83:
46:05:f1:69:19:2b:8d:15:d7:3b:fe:af:eb:19:8c:01:6c:1c:
84:d3:fc:9c:cc:5f:04:f3:bd:40:9b:a1:be:46:11:d4:11:80:
ba:44:63:0f:39:90:16:8c:72:05:5a:43:f0:9d:50:e2:77:ca:
75:97:e5:9d:d6:3a:79:ec:62:9b:9b:da:8f:9c:e1:b5:b9:42:
d0:2c:59:0e:c6:63:aa:41:04:4c:72:db:76:b1:2a:d2:9a:00:
db:10:92:3d:34:e0:15:c6:23:2c:a8:17:95:c5:ae:64:bf:13:
8c:b7:03:7f:41:b6:5c:d7:c0:52:bb:18:ec:ed:fc:8f:0f:24:
20:af:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:51:43 2024 by rpki-client on console-fra.rpki-client.org