Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/N3pN_uFg2H4dDlRphgNZhQI1xlo.roa
File: N3pN_uFg2H4dDlRphgNZhQI1xlo.roa (raw, json)
Hash identifier: SBbDdiUDiekX6U4DljER1TpBwkpl8poq8kqr0w7bx08=
Subject key identifier: 37:7A:4D:FE:E1:60:D8:7E:1D:0E:54:69:86:03:59:85:02:35:C6:5A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AEB8E477D250C3B3150C165FB1924
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/N3pN_uFg2H4dDlRphgNZhQI1xlo.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209771
IP address blocks: 5.1.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:8e:47:7d:25:0c:3b:31:50:c1:65:fb:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=377a4dfee160d87e1d0e5469860359850235c65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:fb:74:3c:25:e0:39:25:84:7f:8f:ef:08:
1a:d0:71:be:7c:ed:3a:78:3e:bf:25:87:27:4f:79:
aa:ad:26:9e:43:a3:d3:3a:a5:30:c5:cd:ba:33:c0:
2f:0f:a6:63:2c:35:2a:26:14:ec:ce:25:f2:a8:78:
51:06:af:ec:07:5e:1d:4b:49:80:d8:62:04:c3:1b:
a3:5e:98:af:8d:85:9e:11:8f:ae:c0:0b:cf:20:ed:
c4:e6:dd:dc:5f:ed:1a:4d:58:35:9d:37:e7:bf:ff:
4e:7a:20:1d:4c:d0:1e:8f:5d:fb:61:a0:95:7b:71:
25:35:de:36:a1:ba:88:a9:03:49:ee:16:f4:f4:9a:
2c:72:8e:4b:d6:5a:ae:58:ac:ff:91:b7:26:66:23:
38:01:78:c5:ac:7c:1b:2c:4e:cf:7b:a3:99:72:1e:
7f:6c:af:31:a7:89:cf:f3:93:07:0a:c2:62:20:ef:
b9:c3:2d:f4:6a:a6:28:0b:eb:d5:6b:6c:b1:f6:01:
a5:d8:70:82:ad:4a:39:cb:05:5a:99:90:f3:75:02:
4e:df:cc:99:74:03:31:b5:52:62:20:47:99:0f:9e:
00:ac:36:00:ce:f7:a5:ff:09:35:dd:26:06:31:cf:
82:c3:30:f1:70:fc:51:61:9f:d8:44:e4:2c:2c:3b:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:4D:FE:E1:60:D8:7E:1D:0E:54:69:86:03:59:85:02:35:C6:5A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/N3pN_uFg2H4dDlRphgNZhQI1xlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:96:95:d4:bc:31:64:85:28:25:2b:66:5f:c3:1b:fd:7b:42:
df:b0:44:d7:33:d5:e9:79:35:50:3d:8a:e2:9a:69:f8:0d:6f:
18:9c:e1:a6:c1:88:5e:1f:e4:f8:0b:10:a8:5a:da:8a:57:de:
7d:8e:1c:a9:6f:21:94:e4:b9:14:74:92:c6:a6:96:56:63:35:
74:51:20:31:93:47:00:10:96:5d:c0:c3:4f:36:8f:ee:9c:26:
b8:06:ca:f1:4d:3b:2f:d3:8e:e1:9e:86:bb:5f:7d:c8:65:7f:
e4:5c:17:64:c2:28:78:47:9c:6a:59:83:2d:37:45:c6:aa:ab:
a3:b3:90:fb:d5:5b:45:0a:6d:e3:19:11:bb:ad:b2:a4:ef:c6:
7a:25:37:78:9e:0d:59:e8:9c:7d:f2:17:b6:7a:1b:a4:6d:9d:
0d:d4:88:36:e9:57:38:37:e0:1b:fe:51:3a:a3:05:b4:6a:49:
4f:d8:52:9e:66:b3:ca:66:bf:53:4b:06:1d:49:da:9c:df:f9:
d7:87:2d:eb:ba:46:91:1f:01:ee:0d:ba:91:e8:4d:73:7d:08:
89:ef:eb:13:6a:f9:3c:16:fd:40:f6:d9:a9:f2:80:b3:71:08:
68:63:54:0b:97:bf:4f:e2:79:57:fd:b3:52:32:83:e4:a0:b5:
29:8b:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:23:36 2024 by rpki-client on console-ams.rpki-client.org