Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/SKKdcT2DKbR9sMb9jljfbISQb9Y.roa
File: SKKdcT2DKbR9sMb9jljfbISQb9Y.roa (raw, json)
Hash identifier: yCxr+6k/q9BnMUzwhVY48xlSgYzzIodnpWspX6Pk3C4=
Subject key identifier: 48:A2:9D:71:3D:83:29:B4:7D:B0:C6:FD:8E:58:DF:6C:84:90:6F:D6
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B686C8FE3132430C420D6D8292959D
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/SKKdcT2DKbR9sMb9jljfbISQb9Y.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47787
IP address blocks: 5.154.174.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:86:c8:fe:31:32:43:0c:42:0d:6d:82:92:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a29d713d8329b47db0c6fd8e58df6c84906fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:a3:9b:51:4b:0b:60:99:34:e2:b5:83:f7:
ba:84:6d:7f:6e:d5:09:93:9b:63:69:db:c5:e6:5f:
b7:4d:b9:a9:51:08:e3:9c:3e:f9:39:3f:28:e2:42:
75:2a:8f:de:65:3e:a7:e7:34:6b:53:10:24:57:b5:
45:7f:93:d4:cd:35:a1:f8:4e:06:e7:78:95:86:48:
13:ff:aa:c5:a7:0a:7b:e8:4e:eb:40:ce:5b:a6:09:
a9:6f:54:83:cb:ae:39:ae:40:ad:88:9d:22:34:2b:
f7:02:80:36:a1:44:96:67:08:dc:14:9a:02:77:2b:
1a:7d:6e:c1:22:10:8d:19:e0:df:95:9a:6e:f6:20:
45:da:2d:d2:0b:84:de:5b:c3:53:8c:c1:18:42:2f:
8a:4c:3e:bc:31:ec:02:f4:f9:51:f8:7e:52:9e:19:
74:00:97:d3:73:6c:e4:61:22:a7:ad:49:5f:ba:7d:
d2:38:2e:05:99:63:a3:7d:d6:7b:67:3c:cf:50:44:
78:05:1c:89:56:1e:df:2c:89:1b:4f:94:e8:79:01:
7f:5c:e5:00:aa:76:52:c0:1a:2e:0a:52:3c:5d:83:
38:ca:f3:93:ce:dd:50:8f:0c:31:88:3b:e8:1b:59:
ca:b3:5f:05:28:22:28:a4:d4:b9:fd:43:bb:6e:33:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:9D:71:3D:83:29:B4:7D:B0:C6:FD:8E:58:DF:6C:84:90:6F:D6
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/SKKdcT2DKbR9sMb9jljfbISQb9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ee:ea:8f:ee:bd:aa:03:f2:a2:d4:91:9c:a4:b2:bd:db:9f:
13:54:74:27:7c:03:2e:d0:be:f5:72:39:a6:b8:04:a8:8f:84:
de:ad:cc:75:b8:7a:e2:c4:0e:74:d5:fa:c3:26:cb:5c:fd:39:
53:61:c5:15:97:c6:54:23:da:ee:9d:c6:37:97:a7:99:0b:c7:
ab:f8:5e:64:41:50:d4:c5:d5:09:61:d3:5d:d4:77:58:32:7e:
ea:c0:36:1b:8e:ea:a9:fa:7f:96:59:3c:dc:75:1b:f2:ce:0f:
22:18:49:7d:6c:8a:00:a8:da:85:c2:a0:e8:4c:f7:6b:b8:76:
b7:a9:36:7a:71:33:b7:13:a2:00:8e:68:df:96:50:76:1b:e8:
0f:dd:86:9f:1a:97:60:9e:d0:7b:47:54:35:e7:23:d0:9c:07:
ef:a6:71:78:45:b0:38:8e:d4:56:dd:57:03:6e:ca:63:e2:60:
0c:b5:cd:9e:98:0c:d3:39:44:2a:ec:ba:e9:41:b2:4e:7b:c4:
f8:a0:76:02:2e:b2:bf:12:f7:bf:23:4c:c7:ae:c0:ef:58:d6:
4b:4f:a2:a8:77:db:12:d9:23:19:07:5c:03:b6:32:4a:33:f9:
30:d6:d7:9a:f8:8c:9d:14:e7:af:1c:ec:16:55:50:21:66:62:
9e:0b:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:27 2024 by rpki-client on console-fra.rpki-client.org