Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a1DaSXJBK5Tcj6rt-nlUgpKIvUo.roa
File: a1DaSXJBK5Tcj6rt-nlUgpKIvUo.roa (raw, json)
Hash identifier: V+7S3uUSFGHgUc1fV0hO0wSUo6vDEG6Blxl52HwYIuA=
Subject key identifier: 6B:50:DA:49:72:41:2B:94:DC:8F:AA:ED:FA:79:54:82:92:88:BD:4A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6A3A28BFA798AB5BCB153A405B7A685
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a1DaSXJBK5Tcj6rt-nlUgpKIvUo.roa
Signing time: Tue 16 Apr 2024 11:21:07 +0000
ROA not before: Tue 16 Apr 2024 11:21:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203492
IP address blocks: 217.14.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:a3:a2:8b:fa:79:8a:b5:bc:b1:53:a4:05:b7:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:21:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b50da4972412b94dc8faaedfa7954829288bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:91:d4:15:fe:68:39:05:0a:9c:13:94:27:
a4:3b:3f:4c:b2:d5:1f:d9:58:8e:3b:59:9e:7b:3a:
a7:6f:4c:98:8b:90:4a:a3:2b:6a:6c:25:5d:c6:55:
92:0e:9a:34:c1:1f:22:64:e7:71:ae:31:30:7a:7f:
6f:4d:67:3c:68:05:ab:84:8b:10:35:58:9a:69:ac:
1c:ca:22:ae:08:9e:da:41:76:42:51:b0:0b:d1:b0:
8e:76:cc:69:8c:fc:f8:48:fe:55:1e:a7:36:4c:8c:
1a:cf:27:ce:cf:36:b9:16:0f:a1:b1:68:1c:d4:c6:
5d:68:6e:8d:5e:cc:a5:2d:4f:17:e9:4a:8d:43:0d:
d6:6a:6b:70:8e:7c:f0:47:e6:99:74:b2:37:e8:fe:
1a:14:ad:e5:db:dd:75:24:f7:10:5d:5f:6f:d0:44:
f7:9f:42:ee:6a:03:30:28:c3:d6:60:5a:dd:90:ee:
18:2d:d1:9b:1c:16:0a:e8:ef:05:a4:62:52:d8:5d:
63:9f:f4:9a:7e:cb:c5:e9:d5:1d:bd:93:51:21:3e:
84:f8:1e:8e:53:d3:88:1b:60:ae:42:62:b7:a0:6c:
46:7a:d3:c0:05:11:cc:c0:3d:b0:4c:6e:82:6f:c3:
d2:bd:40:81:5a:dc:c3:57:9d:3e:25:54:fb:46:25:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:DA:49:72:41:2B:94:DC:8F:AA:ED:FA:79:54:82:92:88:BD:4A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/a1DaSXJBK5Tcj6rt-nlUgpKIvUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.14.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:67:1e:cc:cc:f1:27:17:02:03:84:7d:12:a2:7f:19:d2:35:
76:cb:ec:ea:16:25:27:fa:da:43:73:77:df:c4:10:6f:b4:9e:
d2:24:be:fe:5c:21:1e:2d:14:a5:85:d4:09:5b:16:29:74:01:
ef:b9:a1:5f:f1:a5:9b:1c:da:3e:55:68:d0:ac:2f:63:ff:e0:
f4:3a:93:a9:96:f0:35:0d:d6:55:62:63:9d:a7:6a:78:19:9b:
35:34:5c:3b:93:49:ce:ea:dd:c9:1d:94:86:e0:c3:1e:9b:6a:
73:d7:bf:e7:d9:0a:92:68:1c:02:04:40:a0:1e:5a:12:73:54:
1c:72:8c:f0:e0:b5:71:83:bb:9e:90:32:fd:f5:46:ce:3c:45:
3f:3c:b4:06:52:77:02:3b:41:71:ce:3a:c9:48:41:88:6d:3b:
6c:33:dc:a2:d5:d2:b4:4f:6a:30:e5:74:7a:ad:57:89:9d:2f:
21:ae:de:6b:0c:46:6d:6d:71:55:6f:a2:27:44:d2:49:4b:9d:
06:1c:b5:93:f9:9e:e6:8f:05:37:d0:38:fe:7d:41:2a:8d:ae:
dc:a3:6f:33:71:17:63:d3:7f:ac:75:5f:1d:6d:8d:28:2b:30:
ca:c3:e8:78:c1:61:ae:ab:f6:4a:c9:d1:ff:7b:e8:61:1c:15:
4f:e3:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:53 2024 by rpki-client on console-ams.rpki-client.org