Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/5jspvKShOwsdtbECS6a0xbzszew.roa
File: 5jspvKShOwsdtbECS6a0xbzszew.roa (raw, json)
Hash identifier: 554zPy5ZLU/sOjhjrEHk/6M3RPjgsZZUBEOalaoPXGM=
Subject key identifier: E6:3B:29:BC:A4:A1:3B:0B:1D:B5:B1:02:4B:A6:B4:C5:BC:EC:CD:EC
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 018CC50025474C611B380227BC2595DFC401
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/5jspvKShOwsdtbECS6a0xbzszew.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 185.79.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:25:47:4c:61:1b:38:02:27:bc:25:95:df:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e63b29bca4a13b0b1db5b1024ba6b4c5bceccdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:a8:d5:78:a0:7b:1e:da:e8:b8:37:6d:93:
28:61:03:cf:72:51:a4:e3:ae:f9:05:9b:37:fb:12:
09:6f:4e:40:a5:39:3f:b3:47:2d:3f:7d:f1:1b:e8:
50:d8:76:9e:fd:d9:4c:82:32:40:4d:cc:86:fe:26:
e2:43:b9:3e:19:70:13:ad:1a:6d:43:27:1d:7e:d5:
a8:25:30:a9:c1:1d:39:00:af:83:47:3a:2a:62:5a:
1e:60:05:4b:44:f2:70:7b:a6:ad:0b:df:61:ce:c8:
25:f8:51:fb:a5:43:d5:77:73:2f:8d:3f:f9:24:bf:
43:94:7a:7f:75:4b:0d:5b:88:e4:9e:25:62:c7:23:
09:0b:e2:e3:ee:c8:30:df:ad:00:be:14:b3:e1:b6:
60:5b:46:03:b4:7b:4f:fe:3d:fb:5d:c8:a8:96:49:
0f:7c:84:02:04:a1:59:68:ac:dd:7e:b2:4e:69:c2:
f1:57:77:6f:70:a8:23:bd:6e:07:bc:54:24:21:b2:
c3:07:72:7f:9a:5d:85:71:10:01:99:f2:8c:bc:67:
ba:37:91:ba:79:1a:d6:e6:65:43:b8:9a:fa:bc:fc:
4f:21:65:89:ee:a6:28:da:54:ad:ef:19:23:1d:0e:
1a:02:2a:17:20:2a:87:7c:91:1b:a6:87:d2:2e:a6:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:29:BC:A4:A1:3B:0B:1D:B5:B1:02:4B:A6:B4:C5:BC:EC:CD:EC
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/5jspvKShOwsdtbECS6a0xbzszew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.202.0/23
Signature Algorithm: sha256WithRSAEncryption
81:1b:ee:20:ef:08:c2:01:a3:a0:65:80:f0:32:f9:0e:97:b0:
43:f7:03:f1:f6:f4:e9:cd:e4:f3:20:de:ff:d0:cb:94:7b:6c:
77:d4:2c:bb:5d:de:57:f7:88:da:64:e2:a4:3d:52:15:08:d3:
92:bc:08:5e:fe:c1:1e:23:68:9d:6d:78:e9:6e:3a:d6:77:1e:
c3:48:c2:79:10:59:27:96:a0:ba:6a:61:d6:6c:64:b4:ca:92:
95:91:3c:f7:0e:bb:66:f9:3c:bb:23:8e:13:9a:17:5c:d7:0d:
49:d2:9c:93:f2:03:bf:be:83:7b:25:26:96:d4:9b:d4:8d:18:
80:b7:14:b2:2e:b1:1c:19:3e:0b:1b:f8:9f:32:65:34:72:92:
98:77:66:10:c9:b2:83:79:93:c2:6b:20:7a:dd:44:9c:c9:28:
b9:8b:89:42:80:0d:ed:ed:40:a4:4f:a2:a5:83:e6:fb:91:6a:
6c:44:25:e2:61:a3:61:fe:19:19:27:5c:d6:5d:21:da:b3:2e:
a7:e2:2d:41:7c:5c:8d:71:18:0d:7b:0f:0f:06:d9:87:3b:61:
5e:1f:49:da:04:32:c9:a6:3d:02:82:b9:31:22:79:97:99:f7:
cb:96:11:d5:9c:9c:d5:d6:c2:2f:be:ce:e4:3c:f8:f7:6e:90:
57:68:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:14 2024 by rpki-client on console-fra.rpki-client.org