Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/A5koqhUzR29ZC6P2TVJc98EW0tw.roa
File: A5koqhUzR29ZC6P2TVJc98EW0tw.roa (raw, json)
Hash identifier: lngzSIFkfWoMQ5qdyzzDdZhOfv+pSp9UEIU2tQYCtQw=
Subject key identifier: 03:99:28:AA:15:33:47:6F:59:0B:A3:F6:4D:52:5C:F7:C1:16:D2:DC
Certificate issuer: /CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Certificate serial: 018CC79428E3EC376EADB7B31307FA9EBFA9
Authority key identifier: 34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/A5koqhUzR29ZC6P2TVJc98EW0tw.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 83.243.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:28:e3:ec:37:6e:ad:b7:b3:13:07:fa:9e:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=039928aa1533476f590ba3f64d525cf7c116d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:bb:1d:26:86:5e:33:40:1d:0d:96:a3:a8:
50:00:0c:29:23:3c:33:35:b9:24:94:5a:f2:12:08:
f3:1f:ef:61:3c:c5:20:24:fb:12:77:53:8c:51:57:
6c:3a:7d:3b:aa:b8:ae:2c:db:cd:bb:a6:1a:9e:cc:
74:66:7c:82:79:1e:23:b1:c7:34:4f:72:7b:1c:6a:
3e:4c:9e:59:f5:9d:94:b4:fa:46:dc:46:c4:27:66:
3f:eb:bd:50:54:3a:04:7a:91:0c:cb:c0:df:4e:e7:
e1:98:2f:49:e8:54:bb:e9:f1:99:f8:10:b9:b3:03:
f1:ed:df:62:89:49:45:c2:ee:ff:f2:5f:77:89:6a:
43:07:2c:1d:57:e7:a3:58:9b:8e:80:df:20:7e:7f:
42:07:aa:07:87:8c:ac:41:a5:15:d7:1d:be:e4:ff:
77:51:51:84:c6:89:59:2c:c7:98:34:d2:e2:96:5b:
a5:f5:20:26:dd:1b:41:67:52:d4:0e:68:b7:4f:00:
0c:d1:4b:b7:e1:11:6b:df:d7:be:a8:9a:10:d4:73:
a7:10:dd:45:5f:7d:14:b0:83:69:d2:0e:94:a3:30:
7e:26:82:a3:38:ef:46:3a:6d:dd:d0:1d:3f:8e:ca:
52:92:23:8d:20:0d:27:f8:61:f9:06:fe:d6:17:58:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:28:AA:15:33:47:6F:59:0B:A3:F6:4D:52:5C:F7:C1:16:D2:DC
X509v3 Authority Key Identifier:
keyid:34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/A5koqhUzR29ZC6P2TVJc98EW0tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.124.0/22
Signature Algorithm: sha256WithRSAEncryption
81:e3:08:c6:fc:cb:35:dd:83:4d:fa:a4:92:07:88:4c:b4:f3:
e9:4a:34:88:1c:e1:9f:29:79:0a:9d:66:ce:42:1b:e8:5e:39:
39:be:98:2e:5b:34:6f:46:c1:c9:15:eb:e2:9e:5a:7a:50:ee:
c3:83:74:9c:2c:3a:c2:45:c8:f2:19:bd:5a:cd:03:4b:e8:e3:
63:08:db:3d:0d:a8:d8:15:91:51:e9:e6:41:cf:c6:e7:8d:97:
fe:f0:e2:49:12:31:17:53:40:a2:ce:4c:1b:52:7e:1c:c4:1b:
ab:23:a4:32:81:9f:99:82:21:10:b8:84:c8:21:4c:37:ce:a8:
bc:4e:52:25:78:36:bc:52:38:8f:44:ff:cf:8f:10:a4:2f:91:
96:2e:46:ef:5e:21:76:0b:5d:3f:fd:fc:b9:a0:6f:a7:c0:17:
be:40:d6:21:d8:30:3d:31:2c:fa:a5:9a:cf:ca:9a:8a:e1:a0:
58:20:7a:87:9c:20:56:8a:c6:a1:1f:3e:92:31:01:18:f1:9a:
e8:a5:8a:0c:86:b2:b2:d2:39:b3:f3:8d:f9:39:53:b5:dc:18:
1c:30:99:a5:a2:41:0f:89:fb:aa:bd:c3:f6:44:09:12:2a:da:
a6:ff:76:85:52:19:9f:a6:4d:c5:44:d6:80:c4:df:01:4a:84:
a3:47:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:19:55 2024 by rpki-client on console-fra.rpki-client.org