Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/Px5bXSlaxiD3cQde2paBkXTe_Wg.roa
File: Px5bXSlaxiD3cQde2paBkXTe_Wg.roa (raw, json)
Hash identifier: dHA6Pb8NOnrWCvgcQLz1MwjyY2egQuec5fxHSShGLOk=
Subject key identifier: 3F:1E:5B:5D:29:5A:C6:20:F7:71:07:5E:DA:96:81:91:74:DE:FD:68
Certificate issuer: /CN=5b93376c79a97344640e7a00a455be92468e8b53
Certificate serial: 018CC64B8A7282FD65FDCFB31F4863E8A4E9
Authority key identifier: 5B:93:37:6C:79:A9:73:44:64:0E:7A:00:A4:55:BE:92:46:8E:8B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5M3bHmpc0RkDnoApFW-kkaOi1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/Px5bXSlaxiD3cQde2paBkXTe_Wg.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21040
IP address blocks: 109.94.162.0/24 maxlen: 24
2a11:2780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/W5M3bHmpc0RkDnoApFW-kkaOi1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/W5M3bHmpc0RkDnoApFW-kkaOi1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5M3bHmpc0RkDnoApFW-kkaOi1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8a:72:82:fd:65:fd:cf:b3:1f:48:63:e8:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b93376c79a97344640e7a00a455be92468e8b53
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f1e5b5d295ac620f771075eda96819174defd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:0a:44:85:66:b1:1d:db:e6:a8:c6:e6:0b:
74:36:5d:70:5a:86:30:1a:36:ce:60:66:1d:0b:d6:
f4:4b:71:2a:39:e7:bc:0f:ae:b5:25:4d:7f:73:55:
ec:77:ed:a7:e5:b2:aa:c2:58:81:84:a9:a4:23:4e:
d7:ed:fa:94:1e:2f:67:54:37:28:81:69:93:77:ad:
20:56:7e:a5:c3:07:6f:d4:b1:65:3f:72:3c:77:0b:
48:9d:23:34:52:5f:95:cc:c8:ab:36:d4:78:91:d3:
ce:35:44:3e:0e:e6:dd:c8:eb:bc:1a:41:11:45:25:
4f:fc:ab:ee:dd:4a:f7:d5:3c:30:5c:53:4c:e3:f7:
c5:35:fd:88:48:ee:39:7f:aa:da:ab:bc:95:08:24:
71:12:74:65:95:c3:39:bd:bb:44:02:f3:77:57:72:
09:3c:08:69:f3:a0:c7:f4:59:42:ae:6b:a1:f2:c8:
7e:55:9b:2c:4b:ae:d7:07:a5:bb:43:ec:2d:e4:ba:
c2:0c:ce:52:26:c4:a9:b3:21:69:97:17:c5:8a:f3:
26:24:b6:75:1c:2b:96:2d:d0:44:13:f7:57:98:98:
64:5f:82:a6:31:ee:c8:22:50:ed:14:e4:6e:0b:08:
77:07:40:eb:f1:2b:8c:3a:54:36:fa:c3:ca:6e:71:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:5B:5D:29:5A:C6:20:F7:71:07:5E:DA:96:81:91:74:DE:FD:68
X509v3 Authority Key Identifier:
keyid:5B:93:37:6C:79:A9:73:44:64:0E:7A:00:A4:55:BE:92:46:8E:8B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5M3bHmpc0RkDnoApFW-kkaOi1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/Px5bXSlaxiD3cQde2paBkXTe_Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/79c8b1-51e7-45c7-8878-be0e2dc89ae6/1/W5M3bHmpc0RkDnoApFW-kkaOi1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.162.0/24
IPv6:
2a11:2780::/29
Signature Algorithm: sha256WithRSAEncryption
a5:6b:44:ab:74:98:d8:d3:6e:c9:41:d8:21:2c:17:72:7b:3c:
34:7f:27:6e:be:5a:6d:d8:db:78:f4:02:b2:ef:92:34:6d:98:
82:72:3c:cc:1b:50:6a:85:d7:b8:98:e2:95:25:f3:a8:3e:3e:
2f:6f:3e:57:fb:f7:e8:76:92:51:67:90:69:30:e2:1f:72:fe:
60:90:de:2f:21:23:7d:2a:eb:b0:e2:6d:83:aa:26:e9:16:a5:
07:70:a5:e3:05:5a:63:4d:db:bf:80:05:31:f4:a7:41:d7:d8:
78:20:4e:ee:90:8f:c6:94:37:46:74:58:74:56:82:aa:36:de:
44:ef:2a:dc:c2:fe:35:b7:99:d6:fb:fb:1f:9a:f7:8b:fc:45:
eb:2a:42:30:04:05:e2:33:bd:c9:a7:72:1f:96:f9:0f:0e:35:
e0:6d:cc:aa:9c:b9:30:d6:80:cb:54:aa:ff:dd:cd:d7:b3:aa:
84:4c:f0:e1:b9:8e:32:15:4f:0b:ff:51:11:50:87:eb:a2:a9:
58:8a:09:98:1a:bb:79:d6:a5:16:0d:6a:c0:b6:55:c0:d5:98:
40:ba:d5:f0:26:46:9b:99:c8:9e:cc:b1:3a:cb:01:a7:7e:9e:
4a:3b:46:df:d4:cf:6c:09:b9:4f:ed:f0:2f:2e:4f:87:0b:52:
1e:07:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:55:56 2024 by rpki-client on console-fra.rpki-client.org