Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/aTBSTpnIvyfw-SjU56VPjz9w6Xk.roa
File: aTBSTpnIvyfw-SjU56VPjz9w6Xk.roa (raw, json)
Hash identifier: rLMWfOv5zXfEZnSonvVZl5vpQLQMCgQnT+vJ9vzTWUI=
Subject key identifier: 69:30:52:4E:99:C8:BF:27:F0:F9:28:D4:E7:A5:4F:8F:3F:70:E9:79
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 018CC86EFD5D978C62F894BEC968B0DE3FE8
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/aTBSTpnIvyfw-SjU56VPjz9w6Xk.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 194.0.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:5d:97:8c:62:f8:94:be:c9:68:b0:de:3f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6930524e99c8bf27f0f928d4e7a54f8f3f70e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:4d:45:ce:11:50:99:cd:14:1b:ee:5a:91:
9f:36:b9:e5:6b:13:ec:6a:3d:14:5a:82:01:6e:d7:
b9:e6:23:3a:44:bc:b4:50:3a:c4:d3:f0:58:f9:1b:
db:ec:c2:df:7d:fb:47:10:2c:bc:8b:30:c0:3d:b7:
79:ad:ba:43:24:36:79:d6:ab:5e:85:a2:4a:64:7d:
63:00:7e:a8:aa:b5:50:f3:60:df:ee:95:7b:92:f7:
14:4e:d1:0f:df:83:e1:eb:be:c8:3a:4f:91:3a:2b:
ee:45:c7:5c:8e:62:e8:45:3f:7d:74:0e:04:00:fe:
99:ce:50:37:31:6c:5e:77:c6:b6:cc:25:8f:fd:bb:
80:d9:43:a5:cb:80:f9:ce:0c:b8:ae:ee:2c:69:6e:
d2:93:a0:f8:6e:57:9f:1f:79:c6:67:86:70:34:19:
d9:30:28:2b:08:87:aa:93:b9:3a:66:6c:a0:b2:5d:
ae:9b:a7:40:74:ed:15:d3:4f:ca:e5:3a:11:c5:7b:
f0:6a:77:d0:c2:d0:aa:8a:be:e9:21:2d:ab:ca:8b:
37:58:6c:e5:4c:3e:26:59:83:4c:cd:3e:db:0f:3c:
bb:82:a3:29:27:bf:00:1b:c1:ae:5d:c9:0d:7b:1f:
78:b8:5b:29:3f:8e:9c:4a:c7:34:18:25:0e:1c:44:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:52:4E:99:C8:BF:27:F0:F9:28:D4:E7:A5:4F:8F:3F:70:E9:79
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/aTBSTpnIvyfw-SjU56VPjz9w6Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.153.0/24
Signature Algorithm: sha256WithRSAEncryption
67:70:13:a2:aa:28:1d:53:52:af:68:d6:be:f0:9a:91:96:92:
4a:8d:fa:40:9f:8f:51:fc:a5:75:2d:63:5b:d1:e7:e8:06:d6:
0d:39:d4:ff:6f:e6:2d:ca:f8:dd:7b:67:eb:4b:06:12:54:35:
7d:5f:50:17:c8:4b:0d:47:e7:9b:89:7a:37:c6:a7:49:ba:81:
88:a5:6f:9b:49:50:9d:6f:0a:00:2e:84:3d:b8:5c:c5:af:a9:
e9:9e:13:f8:42:71:f1:29:87:50:cb:21:3d:5c:b4:9a:1b:85:
6b:54:8d:0a:05:0e:2b:43:f6:3c:2a:fc:49:70:2e:da:b6:82:
61:1a:97:09:6c:a4:1a:a5:cf:f5:81:a0:6a:5e:7d:dc:19:43:
82:ca:46:28:79:33:87:4d:67:73:7d:fa:3b:54:65:7c:a1:ce:
72:6c:5a:9d:58:bc:12:00:14:d4:e7:1a:47:14:3f:72:1a:90:
fe:7a:88:dd:e2:3c:45:eb:8a:48:68:60:36:ee:7b:49:bf:71:
36:12:75:79:a5:1e:45:d9:bf:24:4f:2b:2e:25:d9:f3:2c:33:
ec:7d:2c:10:95:03:d1:c9:99:2f:e0:dc:7f:73:e0:20:2a:74:
c9:56:c1:12:3b:1d:64:c9:1a:bd:f1:34:86:db:e2:33:28:73:
13:5d:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:55 2024 by rpki-client on console-fra.rpki-client.org