Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/xCYs6tAkA5DW9OUvoklvVqWM8UI.roa
File: xCYs6tAkA5DW9OUvoklvVqWM8UI.roa (raw, json)
Hash identifier: m2OJVKMXolBt2I9QJfwNl9t1b0bpI7PHyKi6eX1nwVo=
Subject key identifier: C4:26:2C:EA:D0:24:03:90:D6:F4:E5:2F:A2:49:6F:56:A5:8C:F1:42
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 018CC26D27342052F71BD8049B68ED794CFE
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/xCYs6tAkA5DW9OUvoklvVqWM8UI.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208423
IP address blocks: 5.102.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:34:20:52:f7:1b:d8:04:9b:68:ed:79:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4262cead0240390d6f4e52fa2496f56a58cf142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:6b:da:81:e8:c6:5e:15:3e:4a:11:2c:bd:
e5:d5:85:34:15:8a:9f:bb:9f:34:49:64:07:f5:b3:
ba:32:08:59:86:a7:77:4e:bd:b8:dd:1d:0a:67:c7:
05:83:b1:fd:d9:d2:2b:29:ee:9a:84:01:f7:63:0d:
39:37:d9:9e:90:2d:07:91:3c:f4:e0:5e:d3:3d:16:
af:f1:37:3d:59:36:0e:63:6e:6b:06:2d:6f:3b:1c:
db:aa:9a:b0:10:87:74:ef:e1:bd:69:e7:0d:a6:2b:
52:6a:ea:8c:f5:7c:3b:49:1d:17:5f:e9:a5:5e:96:
75:db:1a:e8:c5:87:d6:e5:0c:52:d3:1b:d8:ba:43:
ee:f9:d4:dc:b3:7d:f5:93:7f:e3:93:7c:c0:32:7a:
c3:65:65:c4:7d:ff:ae:64:00:3f:4a:0d:ae:f9:69:
be:aa:80:0b:59:dc:3f:ff:fd:fc:8c:4a:53:cf:9c:
8c:03:c9:c6:35:dc:79:f3:b6:d5:f6:c6:d6:87:1c:
c8:bf:27:98:f4:32:66:2c:c5:2b:87:34:d6:fd:94:
a2:95:3d:b8:26:1a:cd:6f:ac:2c:04:8b:6f:77:16:
6a:9d:da:08:ec:ff:2d:d1:fe:87:3c:e7:96:2a:85:
d7:18:79:0a:c4:f1:a4:b9:e3:88:72:35:17:26:8e:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:2C:EA:D0:24:03:90:D6:F4:E5:2F:A2:49:6F:56:A5:8C:F1:42
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/xCYs6tAkA5DW9OUvoklvVqWM8UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4a:41:23:b9:5d:08:38:03:ee:be:0f:9f:2b:b9:4b:63:0b:
17:1e:2c:fe:3e:c5:a5:87:b6:2a:ef:9c:e2:7e:dc:7a:44:22:
9c:29:8a:fb:72:af:32:9e:f4:71:0f:8f:55:1b:f2:5f:ca:3e:
1f:81:ce:74:90:70:56:d3:26:86:0a:37:fa:8b:32:71:1c:ab:
fc:a2:bd:1f:20:92:18:fd:02:ef:2e:8f:66:16:71:ab:c9:4e:
fa:22:a9:a6:13:fd:f7:24:a9:f0:5c:d6:30:67:87:91:8b:92:
c6:e2:a6:23:41:26:ac:b6:ff:84:23:35:25:a9:13:f9:a6:6a:
0c:68:7a:db:c7:a3:a1:e7:62:46:e3:6b:a5:b4:48:36:b3:72:
76:54:c5:fb:38:c7:53:fc:7d:83:b7:2f:18:ad:80:16:0d:71:
bc:26:a7:9c:39:d8:84:b1:77:86:dc:d0:ea:88:96:74:ad:7f:
35:fd:c3:c3:83:2b:fd:1d:70:6d:d1:eb:df:db:f5:49:35:45:
93:af:47:11:6c:02:a4:cb:1f:67:63:db:49:4e:ac:aa:63:11:
e8:7c:47:81:1e:a5:61:33:d8:39:60:27:41:d9:9d:8a:65:ff:
a0:92:3d:7d:3c:cc:b1:00:0a:50:2e:ff:5d:48:28:88:c3:33:
42:da:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:43 2024 by rpki-client on console-ams.rpki-client.org