Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/5moilq68YyhVvpINDafhO1iNgjI.roa
File: 5moilq68YyhVvpINDafhO1iNgjI.roa (raw, json)
Hash identifier: hgBpUc3X2nXbJWuS/4CCTU48SggS4X4jrGcYNxqiqac=
Subject key identifier: E6:6A:22:96:AE:BC:63:28:55:BE:92:0D:0D:A7:E1:3B:58:8D:82:32
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 018CC348B24359AEA7050BAAF37C573C13E6
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/5moilq68YyhVvpINDafhO1iNgjI.roa
Signing time: Mon 01 Jan 2024 04:29:30 +0000
ROA not before: Mon 01 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 5.183.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b2:43:59:ae:a7:05:0b:aa:f3:7c:57:3c:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jan 1 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e66a2296aebc632855be920d0da7e13b588d8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:e9:47:8a:f4:d4:1d:10:a4:49:99:31:df:
ca:00:2b:9d:25:c0:9e:03:16:b2:ee:4e:4f:60:b6:
9a:fb:a2:ad:1a:fa:61:fd:6f:57:6e:7a:5b:25:5d:
49:31:10:33:ae:44:b1:7d:af:95:c2:70:f5:23:e6:
bd:32:68:68:87:00:80:7f:fe:14:b9:2e:19:2a:55:
c2:13:ba:8c:da:2f:c2:c0:29:35:6f:19:f0:bd:bf:
99:65:bf:a0:79:c3:1f:e7:80:28:1f:b9:1b:25:a4:
c5:a5:7a:f8:79:19:54:19:bf:ca:c9:2b:d0:d5:47:
ea:0d:41:a0:e9:e1:b7:c7:d4:4e:14:f8:a6:3c:c6:
33:25:b7:ca:bd:c0:1e:1f:12:fd:52:68:a0:40:6c:
f3:94:0d:fa:05:d5:58:90:f0:d4:bb:14:2b:fa:7c:
67:80:cd:7b:49:3f:dc:32:95:6a:bf:83:48:13:e1:
76:d6:f2:12:fd:38:c4:cb:90:37:fe:2c:60:82:28:
bb:d5:4e:82:c2:6f:9d:10:32:52:04:fd:f7:43:83:
95:34:94:ad:c7:82:12:5d:8a:29:ba:52:fa:42:0d:
73:dd:c9:a5:8d:39:f2:30:25:b9:75:20:23:44:8a:
a6:ca:2b:a0:44:32:2d:b1:0f:56:d6:94:98:cd:ef:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:22:96:AE:BC:63:28:55:BE:92:0D:0D:A7:E1:3B:58:8D:82:32
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/5moilq68YyhVvpINDafhO1iNgjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.172.0/24
Signature Algorithm: sha256WithRSAEncryption
08:36:69:0f:2b:24:e6:59:bc:de:65:4f:cf:7e:4b:7e:ca:b9:
fd:fe:00:4f:7d:df:fd:0b:57:92:78:45:91:70:c8:77:88:9c:
ca:ab:e5:c3:29:4e:99:5e:0b:19:86:80:d8:61:49:e5:97:be:
a3:ad:69:3f:df:4a:51:72:2f:b9:4e:2d:8d:02:f5:e3:eb:8e:
d3:de:6e:b6:f8:15:fe:ab:c5:4e:65:33:04:42:76:81:ce:0e:
3d:7b:06:91:df:1c:a5:5d:b6:ba:43:c4:15:e6:5e:ed:bf:1d:
1f:71:50:d4:17:f0:57:d3:c7:2a:d8:8b:a5:a3:75:9d:08:ec:
d0:6f:86:26:a1:42:4e:47:29:1b:03:5d:07:d4:ee:85:4a:3d:
1c:61:f5:69:46:53:f6:cf:6e:5f:03:08:77:c6:8e:8f:a9:a2:
b6:25:b5:1d:a6:9e:25:4b:f9:cb:0a:14:a2:3b:bb:3b:c0:75:
b4:b3:52:1b:db:ce:41:c6:e2:02:0e:b3:ad:7f:3f:73:e7:e8:
71:a4:47:77:fb:ba:23:1b:72:04:3d:aa:2d:b9:87:22:e7:8e:
3e:fe:66:5a:e0:41:4e:ff:37:c1:57:08:67:bd:fa:a4:fc:e4:
01:bc:2f:67:1b:3b:b8:06:69:4e:18:d4:27:10:db:21:a4:2b:
cd:13:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:39:48 2024 by rpki-client on console-ams.rpki-client.org