Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/w9nNjlstVsC2easfi-yJSqR8Hqk.roa
File: w9nNjlstVsC2easfi-yJSqR8Hqk.roa (raw, json)
Hash identifier: Ilx4RzNpIrW3N1lfuiN7f4DfoAV0jz5trwi95qgRD4k=
Subject key identifier: C3:D9:CD:8E:5B:2D:56:C0:B6:79:AB:1F:8B:EC:89:4A:A4:7C:1E:A9
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 018CC26D277C456170EB585239CCA9B9E196
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/w9nNjlstVsC2easfi-yJSqR8Hqk.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208424
IP address blocks: 5.102.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:7c:45:61:70:eb:58:52:39:cc:a9:b9:e1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3d9cd8e5b2d56c0b679ab1f8bec894aa47c1ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:c5:0d:a5:5e:31:34:9d:22:1d:ee:45:9c:
b9:42:3c:e7:df:cb:c7:83:5e:33:07:06:40:83:38:
63:48:78:36:98:af:bb:15:44:8e:e0:a9:d8:eb:10:
a5:f8:61:d3:ef:94:50:7c:d3:82:13:69:dd:a2:a4:
b2:9f:a6:8d:fe:c7:9f:7e:1f:fc:37:29:d1:b3:75:
d3:55:54:d1:08:2a:46:a1:b1:d0:69:f0:bf:a0:d5:
3e:b5:0b:ea:7d:2c:0e:26:a0:62:59:f9:77:fe:08:
04:b9:5e:d9:8c:ad:8e:9d:67:44:4e:fb:ef:8d:1f:
bb:e2:2e:f2:70:d8:df:c6:fb:1f:0c:78:ad:0a:dc:
c7:87:bb:e7:6c:ce:35:92:f4:76:03:14:63:eb:0b:
01:8a:b2:21:74:47:4f:b8:70:0d:1e:f7:4c:f9:69:
56:e3:0b:6f:9c:11:e2:f2:26:31:a6:c2:4e:90:8d:
ac:bd:04:d7:9b:57:28:31:c0:0b:01:3e:db:bf:c8:
ca:21:97:31:30:1c:36:7f:9f:0e:96:8c:36:e8:4b:
1d:49:27:9a:e2:c2:11:1a:cb:93:8a:13:24:9b:3f:
42:3a:4b:93:76:c5:69:96:eb:4c:2d:be:31:98:31:
ba:6c:97:64:0d:13:d8:43:42:cd:88:ce:e8:20:f3:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:CD:8E:5B:2D:56:C0:B6:79:AB:1F:8B:EC:89:4A:A4:7C:1E:A9
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/w9nNjlstVsC2easfi-yJSqR8Hqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.47.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fd:4a:d6:66:40:5c:f4:36:38:e6:2e:9e:6c:92:73:b6:8b:
09:08:50:db:3b:ec:f8:7a:ba:04:fc:56:30:b5:30:2f:1f:83:
e1:28:a6:5d:8f:bf:d0:2e:ab:41:85:e8:53:56:3a:5c:25:db:
7e:86:cc:5b:d7:39:e0:8c:a0:58:0d:d5:ec:f6:71:bb:b4:57:
bc:d3:12:d9:0f:06:ec:d5:95:4e:10:cd:48:02:b9:8c:eb:b1:
4b:d1:b3:13:78:a7:58:92:04:ff:59:73:ad:6a:31:5c:8b:e1:
9b:bd:52:f3:2e:f7:08:b6:f9:b3:c7:7c:d0:b7:93:5b:ed:d6:
0b:b7:90:9f:0c:83:f6:52:c5:a7:7a:06:e1:9c:b5:1d:3d:6b:
5a:db:95:c7:98:46:ec:f2:83:48:b6:ad:e7:c5:97:8b:74:77:
72:c6:4e:4c:f2:69:06:d8:be:89:f7:09:74:dd:b0:7c:43:ef:
dd:b8:56:58:fc:62:32:d9:c4:4a:39:11:a9:ab:29:3f:ba:f0:
67:bd:ce:b5:31:b1:de:f0:9c:5c:61:4f:ae:6d:1c:53:2a:3c:
41:57:36:44:b3:73:52:3b:40:85:92:06:77:cb:a3:48:0f:e6:
26:80:b2:96:1f:40:eb:d8:e3:72:98:ee:92:77:97:d1:a3:18:
ff:aa:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:26 2024 by rpki-client on console-fra.rpki-client.org