Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/6R5Whty4ojHhS6YwQ00XBeb8zAI.roa
File: 6R5Whty4ojHhS6YwQ00XBeb8zAI.roa (raw, json)
Hash identifier: kTb4HgVnmxEaYnPMc68MWvUIH8LtwjqEFxv87ez4nlE=
Subject key identifier: E9:1E:56:86:DC:B8:A2:31:E1:4B:A6:30:43:4D:17:05:E6:FC:CC:02
Certificate issuer: /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial: 018CC2DADD6BD57C11B5B6CE7CED8CCC18E5
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/6R5Whty4ojHhS6YwQ00XBeb8zAI.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 144.2.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dd:6b:d5:7c:11:b5:b6:ce:7c:ed:8c:cc:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e91e5686dcb8a231e14ba630434d1705e6fccc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:53:0a:a3:44:17:a0:34:80:c6:ee:81:65:
f2:7d:21:46:c9:63:76:ae:ab:7a:bb:7b:92:0e:6b:
8a:62:2f:bb:f6:77:61:bf:d2:e4:1e:4a:d4:61:5f:
36:70:c0:55:39:75:0b:6c:d9:42:69:d8:33:18:3e:
d9:3b:c1:0e:ad:85:1e:00:54:0b:4f:56:fe:2e:5e:
63:ee:f1:18:e0:66:c1:46:21:02:1e:00:c2:bb:cc:
f6:59:f4:8a:bd:4f:f2:1d:d0:04:dc:96:70:48:59:
39:59:e0:bf:d3:66:95:53:59:84:cf:e6:b3:9d:48:
ca:46:8f:84:f5:ed:bb:df:39:92:64:7d:23:15:69:
95:2a:03:b5:d1:5c:0f:24:04:93:64:ec:5f:02:e6:
3d:7c:69:6d:1c:8e:f7:77:7c:39:2d:db:f3:f7:b3:
a0:30:b6:e4:ae:45:56:6e:6b:1a:58:f0:2a:27:7c:
80:4a:d4:90:90:92:56:80:09:4d:81:35:95:05:ff:
3a:a9:5c:0d:5f:73:7d:b4:39:7a:b6:78:2b:b0:8c:
db:f1:7e:fc:7b:45:56:7a:3f:17:3e:18:07:f1:00:
c6:91:a0:27:b2:4a:4a:ed:87:14:dd:04:79:d0:69:
8b:a2:67:a7:48:a2:c0:27:b0:68:da:fe:41:fe:30:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:56:86:DC:B8:A2:31:E1:4B:A6:30:43:4D:17:05:E6:FC:CC:02
X509v3 Authority Key Identifier:
keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/6R5Whty4ojHhS6YwQ00XBeb8zAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b2:d1:15:14:72:7a:96:b4:ab:cb:09:7f:94:37:e0:5a:bb:
d1:90:b7:bf:ec:2d:d0:a3:f8:75:95:06:28:66:86:5d:70:64:
5a:e3:d6:6b:1c:01:99:3e:ba:c4:3d:bb:c6:46:90:a7:5f:f9:
ca:c7:be:c5:91:c3:84:df:9a:b5:3e:85:63:4c:ac:43:0b:8c:
21:25:ae:51:da:21:77:0e:34:61:3b:39:75:21:a7:9e:49:44:
88:47:e7:4f:3d:01:1d:f0:94:87:db:4c:0d:a1:7b:94:c9:be:
03:28:62:ea:c2:73:a6:6e:65:be:f7:40:a3:c9:dc:01:8e:84:
51:a6:4e:51:22:a6:c9:0d:2d:b7:27:51:4c:5b:0d:47:df:60:
b7:94:2e:15:2d:66:9b:6e:74:84:e1:ce:ea:4f:96:0e:b5:74:
8a:1f:fa:9d:09:45:02:a7:fb:11:68:41:a5:ae:76:dc:5d:8f:
81:d7:25:fc:2b:f6:46:1e:cc:ae:a0:fb:c9:51:63:47:64:cf:
35:9f:7c:7a:4c:fd:09:04:15:78:c5:8a:53:53:37:16:8c:4f:
1d:ca:94:14:00:76:82:c8:8a:22:62:b3:5c:f7:ad:0b:e0:10:
90:bf:60:81:fa:56:6f:51:ad:a1:0a:6c:90:18:fa:80:86:6b:
26:41:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:20:06 2024 by rpki-client on console-fra.rpki-client.org