Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/p5DpbdEwmLTsbGAmknM31K01eDM.roa
File: p5DpbdEwmLTsbGAmknM31K01eDM.roa (raw, json)
Hash identifier: XTWfzMRLYqUhWYWyAGznrWx8cf51uEWOwB3V78rpBGY=
Subject key identifier: A7:90:E9:6D:D1:30:98:B4:EC:6C:60:26:92:73:37:D4:AD:35:78:33
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 018CC8DEE16BDDCC243F790CF6775E215AFE
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/p5DpbdEwmLTsbGAmknM31K01eDM.roa
Signing time: Tue 02 Jan 2024 06:31:38 +0000
ROA not before: Tue 02 Jan 2024 06:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47721
IP address blocks: 91.247.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e1:6b:dd:cc:24:3f:79:0c:f6:77:5e:21:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Jan 2 06:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a790e96dd13098b4ec6c6026927337d4ad357833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:a3:b1:2b:b0:9b:be:91:c9:67:6e:53:10:
c1:f5:d6:98:65:74:ca:0a:99:78:fd:0a:11:e8:8e:
0f:a1:12:3a:5d:ce:c2:86:2b:43:f0:e3:75:1c:4a:
80:06:ac:00:7c:ef:f5:17:19:54:db:cc:ef:4a:b8:
b9:2b:0c:28:60:c5:89:ff:19:5b:dc:4b:31:07:9e:
6c:20:ce:0f:a7:62:b9:d2:ad:a4:29:06:48:c0:d9:
7b:c8:42:1d:c8:8e:13:a7:c5:5d:08:eb:10:0a:e2:
d6:f2:a9:37:e7:da:67:66:b6:3a:45:1e:1d:a5:43:
b9:22:cf:67:f7:80:dc:ff:68:3c:55:1a:fa:b9:4e:
43:e2:65:e8:d9:89:38:d3:7c:c2:1e:a3:75:2c:93:
c4:e4:aa:4c:1d:30:61:0a:10:d5:2b:d5:b9:ea:bc:
b4:b1:67:56:4f:58:f5:ce:c4:b9:a0:50:da:9c:2b:
bc:81:08:fe:9e:80:36:30:16:7d:d8:55:5a:77:07:
c2:62:fd:cb:8c:fc:92:c9:15:a1:6e:c5:e1:42:d6:
18:7d:21:08:37:25:25:1d:04:fa:a9:1c:46:69:65:
f2:81:de:78:87:28:2d:68:57:ab:a9:47:76:05:3d:
0f:77:e5:f8:ca:cf:ca:9d:94:c5:b6:60:ab:41:94:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:E9:6D:D1:30:98:B4:EC:6C:60:26:92:73:37:D4:AD:35:78:33
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/p5DpbdEwmLTsbGAmknM31K01eDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:59:cd:6b:4f:8b:e8:75:d7:bf:99:9e:5d:23:09:62:bd:
57:f7:2d:75:df:90:99:e4:f8:26:6d:b2:bf:f8:d8:1e:72:3e:
52:14:61:4c:50:e9:8e:1c:34:9e:54:86:f4:32:c3:ce:75:0b:
0a:7c:41:c1:0c:44:67:ec:df:17:45:80:35:9d:19:aa:b3:41:
ab:17:74:c8:cb:b7:7c:4a:b4:d7:c8:4c:5c:3e:96:ac:dc:8e:
bd:9b:f9:1a:2d:aa:31:46:93:51:22:08:33:3d:c0:9f:08:ce:
dc:ec:32:ca:7b:c2:6a:a5:71:25:4f:eb:ec:3f:a6:d3:a1:c6:
41:c5:99:23:a3:8a:20:e6:22:01:ad:e0:cc:d0:63:e8:13:0d:
bc:cf:c7:82:03:95:49:15:dc:06:eb:94:8f:36:bb:62:4c:11:
93:6a:39:6e:02:70:7d:ef:7c:b8:54:84:3b:1a:9b:d1:89:9e:
8c:b3:57:46:1a:0b:65:e6:b6:68:6c:c2:9f:04:0d:07:49:f6:
16:7a:07:88:ed:ae:1a:7a:0c:83:74:42:0c:1c:68:51:35:d2:
aa:b5:ec:d1:18:9b:6f:1f:d3:6b:c5:eb:15:45:60:24:c9:42:
81:7c:a2:15:ca:ca:24:01:dd:c8:c1:85:f0:64:57:59:6a:66:
c1:f5:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:24 2024 by rpki-client on console-fra.rpki-client.org