Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/5onkI_FTgFI-xCtdG2qaHWygYTU.roa
File: 5onkI_FTgFI-xCtdG2qaHWygYTU.roa (raw, json)
Hash identifier: LDEAYx3QJizv7oRBCAR7df9sA0yXPbR4/nnnRb2y+gs=
Subject key identifier: E6:89:E4:23:F1:53:80:52:3E:C4:2B:5D:1B:6A:9A:1D:6C:A0:61:35
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 018CC42554E36C3D597D15304B2AFEDD1B68
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/5onkI_FTgFI-xCtdG2qaHWygYTU.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56652
IP address blocks: 31.41.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 20:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:54:e3:6c:3d:59:7d:15:30:4b:2a:fe:dd:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e689e423f15380523ec42b5d1b6a9a1d6ca06135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:06:90:93:fe:28:23:04:4c:df:a9:ee:95:
da:62:6b:5a:cf:71:28:6b:c0:eb:29:ed:6e:d3:ea:
e4:fe:87:ec:ef:84:8c:c2:e2:f9:64:ba:fc:cb:61:
50:a6:fa:dc:09:3e:7e:0f:ce:54:aa:6c:8b:71:1e:
ef:f3:c3:a4:03:d3:a6:2c:2a:80:1b:4f:e9:06:5f:
65:15:a2:a5:ce:fb:d2:e0:bc:c0:61:35:e9:7c:f7:
94:61:14:bb:9f:b9:ee:21:04:7b:23:1c:af:8d:73:
a8:7b:33:0f:37:e5:2d:f9:e0:ea:b7:67:fe:4e:da:
42:06:d0:e5:f5:d5:69:c9:95:eb:f4:86:73:01:16:
f4:14:ba:cd:91:2a:74:90:33:ca:fd:40:14:2a:db:
1d:cd:a5:5b:87:39:4e:c9:6a:4c:1d:4c:1d:26:2a:
89:5d:1d:de:81:0b:f6:61:3d:39:99:86:85:44:9f:
4a:59:c8:c0:ae:fd:92:79:08:0a:81:45:e0:e4:53:
ab:c3:3e:a7:6e:53:44:ae:36:0e:68:fb:ea:60:b1:
10:9c:92:3e:64:c5:57:8e:2d:45:62:28:04:a4:01:
0f:63:6e:28:86:bc:93:aa:86:15:ed:30:6e:45:1b:
03:ba:3c:d4:77:69:c0:10:e8:6b:ac:13:48:23:37:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:E4:23:F1:53:80:52:3E:C4:2B:5D:1B:6A:9A:1D:6C:A0:61:35
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/5onkI_FTgFI-xCtdG2qaHWygYTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:7c:f1:15:a1:52:0f:6e:d2:3d:fb:ff:9a:b4:9f:30:39:b7:
9e:3c:9c:97:c1:d6:d0:9d:1a:a2:4b:4b:3e:30:ce:56:df:b1:
f7:75:39:59:1b:1a:00:ec:15:da:08:e5:7e:72:19:ba:8c:66:
50:38:1a:c7:ac:74:a6:fc:a1:bb:30:34:d3:b7:d9:fd:34:e5:
7b:1d:2e:9a:30:9f:3e:63:64:0b:ed:3f:90:59:3c:dd:7a:e0:
60:cc:e2:8e:de:ef:b5:61:4d:55:f3:f2:37:87:ed:c4:c2:c1:
99:c5:a7:e7:49:04:6a:04:cf:7c:5f:55:6a:21:39:20:db:c2:
e3:71:17:e7:8f:7b:14:8a:f4:a7:d5:8d:23:bc:6e:97:9b:1b:
94:17:53:53:cb:74:e2:e0:c6:5f:9d:c3:96:31:09:ea:10:a7:
4e:f0:17:ba:68:a7:cf:3c:30:a4:9c:cf:eb:96:5b:a7:94:39:
5b:56:b5:cc:e8:ba:80:60:c3:40:45:dc:01:4b:42:93:8d:24:
db:e7:00:cd:1c:17:ec:ca:4c:5f:78:29:27:8d:b5:e1:51:d7:
de:f6:29:e9:1f:fa:7e:10:6e:e7:59:e8:49:f1:f6:46:2c:67:
8c:48:2f:d2:31:19:e5:2b:d2:4c:3d:1d:59:97:e0:9e:9f:c4:
fd:88:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 05:04:58 2024 by rpki-client on console-ams.rpki-client.org