Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/mX2EAqULnh62sNzV_QSOgsxwIlg.roa
File: mX2EAqULnh62sNzV_QSOgsxwIlg.roa (raw, json)
Hash identifier: Z05p0tGeztdpMriN5MI8EeJMUTdrEkEZ2k4isWqa0UI=
Subject key identifier: 99:7D:84:02:A5:0B:9E:1E:B6:B0:DC:D5:FD:04:8E:82:CC:70:22:58
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 0190492670DE9C218C9ECE4C9E003B3F0628
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/mX2EAqULnh62sNzV_QSOgsxwIlg.roa
Signing time: Mon 24 Jun 2024 07:29:34 +0000
ROA not before: Mon 24 Jun 2024 07:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205367
IP address blocks: 81.30.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:26:70:de:9c:21:8c:9e:ce:4c:9e:00:3b:3f:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Jun 24 07:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997d8402a50b9e1eb6b0dcd5fd048e82cc702258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:05:ff:a8:70:17:d5:4d:a2:0f:85:41:e1:
e5:94:91:82:31:bb:1c:d8:bd:ea:ee:bc:0f:c3:d7:
9a:1c:81:fb:58:97:dd:a9:bf:76:10:46:8c:f6:6d:
38:3a:9f:03:38:ee:58:5a:14:50:a2:ea:3a:79:c3:
e9:a2:03:5a:60:7d:47:42:9e:ea:7a:18:28:74:91:
4d:3f:f4:09:6e:fe:c0:fb:a6:d0:fc:13:78:33:13:
f3:ba:b4:88:e5:83:a3:a5:a2:33:6a:db:50:f1:39:
f1:63:8d:e1:65:38:cc:6b:bf:31:15:9c:31:26:f3:
25:db:15:2c:18:2f:5b:3c:5d:1a:25:49:b0:79:fb:
2c:ca:90:6b:f7:36:dd:93:99:10:c4:01:d9:44:9c:
5a:99:ff:3d:6e:6c:22:ea:b8:88:cf:24:7b:ba:fe:
24:85:b2:ab:ea:8a:d3:6a:bb:11:05:f7:4b:89:f1:
fa:41:9e:77:2f:78:86:04:f5:e4:61:cc:a2:e1:37:
1c:5c:63:f7:81:91:3e:18:36:34:76:27:e3:35:36:
0e:46:2c:e8:28:db:a3:26:2c:aa:e0:ec:96:80:eb:
d7:ad:b5:93:79:e5:55:ed:19:64:5e:0e:c6:ce:be:
6e:e2:5f:31:b0:bc:b1:67:3d:1e:47:05:84:88:d5:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:84:02:A5:0B:9E:1E:B6:B0:DC:D5:FD:04:8E:82:CC:70:22:58
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/mX2EAqULnh62sNzV_QSOgsxwIlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.97.0/24
Signature Algorithm: sha256WithRSAEncryption
08:14:1c:d5:1a:0e:3d:52:4d:93:13:31:88:1f:b5:47:ec:ca:
39:26:20:bf:70:aa:55:36:52:83:0d:41:f2:00:fc:98:2b:da:
e6:96:1b:dc:d7:27:40:c6:9f:ec:6a:96:20:05:f0:17:68:b5:
28:4c:f7:23:34:67:dc:0b:26:22:a9:35:1b:80:b2:65:96:66:
e0:47:73:9a:42:c6:24:b9:eb:ee:37:57:d6:96:44:cb:0f:52:
59:90:67:4d:5e:3a:28:ab:f8:c1:7c:b3:7c:08:6a:00:45:b6:
58:3f:79:65:5e:b7:5e:b2:94:04:52:31:b8:35:7f:d6:c5:1f:
a2:d2:f2:7b:fe:2b:04:89:6e:1a:18:0b:ce:2b:ba:30:7f:bb:
52:d8:9b:2c:78:be:60:07:4b:6e:ad:48:47:58:d8:3f:ab:e0:
d4:6c:11:3e:7c:6a:a5:c7:cb:6c:bc:d1:82:f7:41:d6:c2:b6:
a8:3c:da:29:cc:3b:13:ff:b3:77:c0:4a:c7:3b:a9:29:51:31:
99:38:47:7b:04:6f:03:11:77:3e:51:5a:56:fb:61:fd:5d:61:
08:26:af:d0:9e:a4:30:a5:a4:ee:29:ee:1f:60:ec:69:1c:e3:
71:44:98:6e:d9:c5:6f:0f:9f:1e:55:38:7e:40:ec:ec:b2:50:
ad:15:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:24:15 2024 by rpki-client on console-fra.rpki-client.org