Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oqawLEFFJaiowe1iTKwHYuOqNlE.roa
File: oqawLEFFJaiowe1iTKwHYuOqNlE.roa (raw, json)
Hash identifier: LPpE55zvZDWHl/Hxwb77r2CzUIfckaSuynmPy9W5XDc=
Subject key identifier: A2:A6:B0:2C:41:45:25:A8:A8:C1:ED:62:4C:AC:07:62:E3:AA:36:51
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6B7A453C0E06B1504ED2AEBB0DCC8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oqawLEFFJaiowe1iTKwHYuOqNlE.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 5.182.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b7:a4:53:c0:e0:6b:15:04:ed:2a:eb:b0:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2a6b02c414525a8a8c1ed624cac0762e3aa3651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:11:83:04:f3:e4:e1:75:2e:ee:0d:f3:9f:
6a:89:46:ea:5a:f8:b6:c3:a8:10:11:13:f8:91:5c:
92:72:19:c8:d2:d4:81:b6:eb:76:e9:b1:05:de:b8:
29:6e:1c:60:1e:b7:ad:80:ef:a6:88:f2:55:f5:93:
f4:ac:38:3f:55:9f:87:79:73:91:44:44:54:07:a6:
62:e9:1e:4f:20:dc:75:64:38:3a:d8:6d:7d:33:7a:
c3:32:fb:f3:49:dc:d9:ad:fd:d5:ad:2a:1f:4b:a2:
35:f0:1c:9c:69:25:44:ce:c0:f9:f5:54:40:2c:22:
a5:4d:9e:59:45:2e:cf:11:eb:ff:78:79:5c:61:e4:
bf:bb:db:3a:ba:13:1f:96:c6:af:0d:b8:59:33:5d:
d5:f2:3e:fc:47:ad:8d:fd:0e:67:cb:50:e0:aa:c8:
54:5c:b5:22:5a:7d:79:c7:1b:b9:4b:44:1c:5f:e6:
4f:72:19:05:cd:91:8b:d9:7f:94:7a:87:a3:b4:d4:
7b:40:49:67:6a:e3:a0:47:68:13:5e:37:68:5e:93:
3c:0c:fd:f5:8c:06:eb:96:52:ae:8c:5e:13:95:9b:
8f:7f:15:b7:b9:5f:1f:3a:d2:97:f6:eb:53:f3:8c:
b9:c8:0c:52:21:58:01:5b:24:bc:c7:2f:90:69:2f:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:B0:2C:41:45:25:A8:A8:C1:ED:62:4C:AC:07:62:E3:AA:36:51
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/oqawLEFFJaiowe1iTKwHYuOqNlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:97:f5:46:fa:8e:20:0d:f0:d0:8a:ae:f5:97:0f:f2:29:1a:
56:d5:86:24:fa:16:54:2d:4d:4f:06:ba:2c:d0:ed:28:15:73:
ba:b3:f0:7f:ac:98:52:1a:22:0e:c9:73:38:f2:ac:25:3d:94:
2d:fb:0b:0f:b3:5a:50:30:9d:78:2b:3a:f0:61:2f:b9:e1:cd:
a9:5c:82:1f:52:01:db:8e:0b:da:b0:9e:f1:11:0b:be:d4:89:
15:40:a3:61:d3:b8:ed:8c:01:22:ed:e8:76:c1:cb:cf:bc:04:
54:e1:01:93:a4:2b:de:14:c9:3e:68:74:36:a6:75:72:fe:9f:
ad:3d:5f:85:be:5d:3b:cc:10:90:7d:05:de:be:77:38:a7:ec:
9a:7a:30:2b:de:77:76:e9:fe:9b:b5:3c:cd:bd:0a:3c:87:ea:
28:de:43:c1:d2:2d:d3:36:76:f1:9a:a5:19:e0:90:da:ff:dd:
d7:a3:86:4e:ef:8c:06:4a:96:c3:3f:7a:31:d6:41:84:64:21:
68:f2:84:d3:db:d7:a1:eb:44:e5:18:e0:63:07:e4:46:ae:cb:
a1:c9:5b:02:6c:e8:23:5a:cf:fe:7c:5f:d6:de:15:c5:44:b7:
a0:36:86:cb:5f:17:f3:1d:b0:bc:0f:fc:f3:3b:7c:2f:58:1d:
c0:30:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:41:00 2024 by rpki-client on console-fra.rpki-client.org