Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/W-Y2grS-B5ODpSaDIdfXUWE8gMA.roa
File: W-Y2grS-B5ODpSaDIdfXUWE8gMA.roa (raw, json)
Hash identifier: iHnuZQJkI+y6tY8wOXoyGxpDVC8XZeLR8cEATzyZLRQ=
Subject key identifier: 5B:E6:36:82:B4:BE:07:93:83:A5:26:83:21:D7:D7:51:61:3C:80:C0
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADE108D456177E84BD2BB7C024A47
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/W-Y2grS-B5ODpSaDIdfXUWE8gMA.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47536
IP address blocks: 5.1.67.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:de:10:8d:45:61:77:e8:4b:d2:bb:7c:02:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5be63682b4be079383a5268321d7d751613c80c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:ab:96:8c:1a:72:98:99:91:db:5b:15:bb:
87:c3:21:de:1d:09:0c:16:e1:b1:23:d2:f7:79:fa:
55:2d:37:7a:79:b3:6f:6b:05:fe:2f:6e:2e:6d:9c:
0a:32:cf:8c:b1:fa:7b:5d:4a:0a:64:82:af:06:61:
c4:27:7f:c5:94:5e:8c:be:7c:49:be:69:8f:82:0f:
74:79:22:85:6c:db:e1:6c:4c:ce:7b:c6:12:c6:58:
ea:22:2d:8a:7c:3f:6a:6f:97:5f:c1:c4:23:e9:58:
f7:0f:a3:e6:9d:07:ca:01:13:34:3f:1d:89:d3:9b:
62:f3:1f:6d:f2:a9:e2:3d:d6:e9:6f:38:a0:18:71:
86:44:ce:97:0f:4b:f1:09:1e:1a:24:cc:ac:bd:d4:
1c:51:8b:3b:c0:23:8b:d7:9d:98:20:8b:ad:a1:cc:
bb:98:50:c1:80:66:ae:bb:d1:29:5b:78:e2:82:a1:
6e:55:d0:80:e0:74:5d:38:1c:ac:bd:a0:84:27:aa:
36:93:a9:11:7e:1f:2d:dd:9a:99:d0:ab:c1:e3:21:
08:43:aa:65:f4:cc:f1:aa:f8:26:f9:dd:ae:75:c8:
d7:2d:4a:24:01:0d:b9:55:dd:58:66:08:bd:1d:f1:
cd:f6:9b:5f:4a:62:f2:ee:f1:29:4f:12:87:0b:c5:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:36:82:B4:BE:07:93:83:A5:26:83:21:D7:D7:51:61:3C:80:C0
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/W-Y2grS-B5ODpSaDIdfXUWE8gMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.67.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ec:26:5f:79:e7:ac:a7:57:dd:50:9c:44:fe:be:9c:f2:67:
59:a3:08:a3:b7:55:92:70:80:bb:1f:e3:50:84:48:5d:f7:32:
d0:ac:bc:4d:70:75:aa:63:71:2c:7d:82:e6:76:96:8b:8a:ec:
a9:d1:43:7c:ee:41:fd:3b:e8:f2:d9:f3:bc:1d:9a:61:1d:80:
1c:46:8c:78:f9:be:be:b1:04:c2:63:1d:79:ec:e0:48:1f:85:
bc:fd:d4:9e:87:2e:b8:69:23:76:36:a0:4f:47:09:7a:21:c9:
18:f3:c4:c3:c8:fb:3c:03:40:d4:8f:9f:e5:63:e5:50:46:d1:
37:c3:e7:31:6a:79:59:e3:14:d0:e5:21:3b:12:49:53:94:6c:
d2:19:b7:46:e3:87:dd:da:fe:6e:af:e1:61:1d:eb:64:72:ae:
c4:db:d7:ca:9c:e0:16:0e:40:8a:37:09:1c:10:3c:1f:df:3c:
f6:da:1e:25:b4:07:2f:ae:ab:5c:5a:12:47:b2:bb:25:3a:02:
9a:07:65:79:f9:d7:ac:e3:11:60:ca:a3:ad:ac:3a:b3:45:14:
a9:00:d7:79:4a:5c:97:a8:73:d9:23:c2:41:0e:43:1e:42:02:
70:59:9e:06:3d:30:12:00:5c:98:ae:40:ab:e6:b0:a2:85:f1:
d0:da:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:30:48 2024 by rpki-client on console-fra.rpki-client.org