Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/5J4syWzMNYAAvhRky_13h9SCyrU.roa
File: 5J4syWzMNYAAvhRky_13h9SCyrU.roa (raw, json)
Hash identifier: srbJ86XNEf4n3svadFEpEGitxG3+cjt+FTFTCgFB2KQ=
Subject key identifier: E4:9E:2C:C9:6C:CC:35:80:00:BE:14:64:CB:FD:77:87:D4:82:CA:B5
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 018CC2DAB12C8D40D23A5419E21D38E6CF02
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/5J4syWzMNYAAvhRky_13h9SCyrU.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 194.6.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:2c:8d:40:d2:3a:54:19:e2:1d:38:e6:cf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e49e2cc96ccc358000be1464cbfd7787d482cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:82:93:c4:d2:b2:42:fc:65:44:57:cf:8c:
7d:1f:06:89:8b:95:fd:69:57:21:13:37:f1:a4:d9:
5d:86:7e:bb:98:20:2e:d9:e9:2e:26:25:d1:1a:55:
c7:9a:02:3e:8c:bd:68:3b:fb:fe:86:11:89:ea:44:
51:b8:4e:a3:16:91:ce:12:97:eb:05:2f:d9:a3:8b:
f3:5a:8f:57:5a:34:f3:0c:85:5b:d3:4d:28:0f:e1:
e2:82:8b:6e:ea:a0:3d:31:99:af:52:e0:16:ca:bc:
f5:bb:7a:89:34:52:e6:07:fa:ce:d5:a4:41:0f:8a:
b2:03:6c:02:35:02:9d:29:67:30:9d:b5:a3:a9:99:
bb:ec:0b:94:6d:96:ae:4e:94:ab:10:d4:d6:0f:7a:
25:cd:ef:a7:54:48:34:68:36:8a:fd:c5:7e:2f:0f:
5d:c7:dc:f1:5d:56:40:e2:bf:ff:78:d0:99:ef:cd:
34:38:ab:b5:ab:e2:69:ac:65:42:a1:cd:76:fc:59:
4d:97:bb:3c:14:18:81:f8:ec:dd:63:66:fb:fd:cf:
f0:b9:83:81:f9:3d:63:53:da:00:37:0f:46:0c:e9:
af:02:b2:ac:e7:c7:6c:d6:02:d2:d1:a0:d3:0c:22:
c1:41:84:b1:49:a6:f6:99:99:a6:7a:88:e6:5b:50:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:2C:C9:6C:CC:35:80:00:BE:14:64:CB:FD:77:87:D4:82:CA:B5
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/5J4syWzMNYAAvhRky_13h9SCyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.255.0/24
Signature Algorithm: sha256WithRSAEncryption
31:22:c8:7c:e0:95:38:06:c8:77:d9:9a:dd:af:81:de:8e:ee:
a7:4c:16:a2:6d:c9:6f:7e:60:5e:94:ca:7e:93:bb:ad:51:8e:
8b:3b:20:0c:fd:ac:5f:8b:0a:45:ef:b2:83:02:e8:5b:85:0e:
f1:d2:ea:f9:12:a2:6c:fd:84:de:70:45:f9:17:9c:61:99:02:
da:35:6a:d3:bb:8f:dd:be:e9:0a:d7:22:ef:75:11:cd:a3:3a:
b6:f4:49:f7:55:0c:f9:ab:e1:ec:54:b8:2f:b8:62:14:b7:42:
19:76:c9:c0:6c:26:e0:dc:b6:23:6d:99:d5:78:67:83:df:e0:
52:58:a3:7f:9b:b2:2d:10:4d:e4:27:47:49:6f:f4:be:19:1f:
4d:5d:18:fd:1f:21:14:9c:b3:01:a6:87:34:0a:ea:9b:1d:82:
86:f4:ae:5a:05:e5:47:28:ff:ef:74:48:18:79:a2:14:09:4d:
21:04:cb:e6:0f:ca:a8:f6:0b:37:8f:ef:06:d6:37:ce:42:99:
c9:d1:43:5e:2c:08:78:99:43:5d:19:0a:1c:72:89:fb:29:7b:
3f:58:b9:32:f9:38:42:e5:d3:fc:bd:bd:65:a4:2e:3b:74:80:
31:9a:c4:44:f5:09:ff:f0:c9:d5:09:f3:42:d3:79:dd:d1:00:
c1:c4:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:20:46 2024 by rpki-client on console-fra.rpki-client.org