Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/dqJoYRzAaywpIj8hgpXnoAPmAEg.roa
File: dqJoYRzAaywpIj8hgpXnoAPmAEg.roa (raw, json)
Hash identifier: hGVJmRBaORAAjFJxXYR9/CFyBQpvzrkAO8C/U0NjQOo=
Subject key identifier: 76:A2:68:61:1C:C0:6B:2C:29:22:3F:21:82:95:E7:A0:03:E6:00:48
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 018CC80179319CEABA324095F230AF8A37AE
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/dqJoYRzAaywpIj8hgpXnoAPmAEg.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211420
IP address blocks: 5.255.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:79:31:9c:ea:ba:32:40:95:f2:30:af:8a:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76a268611cc06b2c29223f218295e7a003e60048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:de:82:47:de:cd:b0:c2:b4:e1:44:ae:62:
52:10:b7:1e:50:94:b3:39:11:62:50:51:55:78:e4:
f9:6f:e6:e8:05:11:11:ec:0c:5b:6e:76:9e:7d:f5:
bf:7d:c8:4f:28:4f:8e:0f:16:b1:69:7d:12:28:4e:
57:af:05:2a:e4:7c:e2:c2:65:9a:36:f7:15:11:81:
21:bb:45:6a:dc:81:eb:12:89:29:68:10:c1:b9:d7:
3c:82:4a:90:71:0f:1e:a2:26:d2:b8:61:d3:13:17:
29:0c:04:6a:bf:56:ba:06:26:a8:31:30:f1:fb:ac:
b2:65:86:6e:33:85:78:7b:8d:14:3c:bc:75:83:07:
4a:83:2d:cf:a5:d3:84:85:f5:19:45:9a:64:ca:36:
2b:c1:f2:2d:b7:40:e1:a1:40:ea:92:ac:d3:bf:10:
48:19:4c:d3:b9:cf:6f:f5:d9:5a:7e:d4:64:e2:81:
ce:e3:a9:ca:d3:09:ec:2a:15:88:9e:ab:57:d1:77:
1b:a7:04:f5:40:b7:0c:00:5b:3e:d6:60:7a:c6:30:
4e:09:cc:5b:ed:8b:0f:0d:19:01:d1:1f:26:42:f0:
6d:05:5c:bf:c4:f4:28:7d:d7:a9:33:b5:d2:c9:fa:
23:f4:84:6c:a0:22:69:28:59:48:67:6a:99:0a:41:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:68:61:1C:C0:6B:2C:29:22:3F:21:82:95:E7:A0:03:E6:00:48
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/dqJoYRzAaywpIj8hgpXnoAPmAEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
Signature Algorithm: sha256WithRSAEncryption
19:19:36:35:cf:0a:0d:c5:e5:4b:8e:5d:67:c6:47:f0:f1:d9:
0f:8a:1c:59:39:84:8d:af:75:01:b6:e6:3f:cb:ef:63:3a:32:
4f:7f:58:d4:bc:31:09:81:03:38:2f:64:d5:15:2a:44:27:b9:
30:0e:67:cd:89:71:08:a9:09:f3:37:c8:23:0c:21:2c:a4:91:
9d:b8:8e:1d:d0:f0:00:b5:31:fd:9c:15:be:df:e7:13:3f:d9:
b7:9c:c9:11:7d:2f:d0:36:d8:bb:67:12:28:e2:d3:54:f8:55:
06:a4:54:f1:15:f3:8e:bb:f8:a4:82:7a:bd:71:cc:24:cc:24:
00:ec:e1:10:75:0a:80:96:bd:35:42:ba:10:14:79:70:6f:87:
c0:0b:c7:2b:48:e2:ae:21:20:bc:2b:e4:80:a4:6f:5a:81:65:
d5:54:94:01:10:ff:e2:65:73:ab:55:40:1f:fc:83:b9:a7:ff:
00:b0:1a:3b:2d:13:9e:04:a4:b3:56:c2:eb:3a:38:9a:36:e3:
2a:13:7b:ee:7c:26:0e:fe:d3:36:24:b4:76:9b:6d:39:7c:5f:
19:2e:3b:24:17:be:27:b2:f4:70:13:cf:d1:8c:cf:bd:75:58:
c2:f5:5f:8b:d7:a9:5e:b9:a3:74:23:c8:9c:6b:48:d4:26:23:
11:47:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:28:18 2024 by rpki-client on console-ams.rpki-client.org