Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jiWoYr8bDGLYvh_Le4eCfJa6asw.roa
File: jiWoYr8bDGLYvh_Le4eCfJa6asw.roa (raw, json)
Hash identifier: +MJ+g8xcZfNFwxjywRvrBlvXY5uoOviRoAifze073mg=
Subject key identifier: 8E:25:A8:62:BF:1B:0C:62:D8:BE:1F:CB:7B:87:82:7C:96:BA:6A:CC
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E88940297EF864714DD07FA56F5338713
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jiWoYr8bDGLYvh_Le4eCfJa6asw.roa
Signing time: Fri 29 Mar 2024 04:59:45 +0000
ROA not before: Fri 29 Mar 2024 04:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197571
IP address blocks: 5.143.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:94:02:97:ef:86:47:14:dd:07:fa:56:f5:33:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 29 04:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e25a862bf1b0c62d8be1fcb7b87827c96ba6acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:7e:b2:00:75:6a:29:2a:fa:7e:3c:eb:97:
32:56:03:30:9d:c1:16:b2:7d:e3:de:f2:8b:43:de:
be:8d:4f:8c:8d:ca:e1:59:2f:e0:11:48:e5:64:39:
5b:53:8f:55:ea:42:da:e5:26:8a:72:66:44:5d:b9:
45:d7:7b:7b:97:3d:2c:6c:db:e3:bb:e8:52:10:24:
07:93:67:c8:00:ea:a3:b0:93:dd:83:05:25:99:87:
59:85:f4:c3:a8:67:9c:1c:aa:b4:5c:31:27:57:a3:
9f:8c:c9:ca:7a:f5:25:41:93:0d:70:44:16:dc:a1:
07:23:44:c1:27:a5:c9:04:d9:5a:e3:92:64:73:2f:
a6:00:ce:60:d8:53:fa:f7:c0:99:61:73:86:81:63:
d4:12:82:1e:32:0f:53:07:02:94:40:65:4d:90:7b:
4c:57:f6:29:3a:3a:e2:e2:fe:96:cf:41:10:ac:96:
9f:e2:75:bf:db:31:f9:a2:b1:0b:b0:42:20:1b:ab:
fa:3d:cb:73:0a:a0:4f:f1:10:ca:69:75:12:a0:46:
61:21:e0:6d:41:1f:ad:ac:e2:c0:ad:e0:39:23:54:
af:b2:fb:02:92:ef:02:8b:e3:6f:e5:da:a3:d4:56:
65:bd:d8:c2:0c:d9:70:2c:af:a3:ce:f2:15:b1:63:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:A8:62:BF:1B:0C:62:D8:BE:1F:CB:7B:87:82:7C:96:BA:6A:CC
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jiWoYr8bDGLYvh_Le4eCfJa6asw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:af:57:a1:db:db:bb:5a:14:36:be:eb:ad:2d:93:fa:ce:8c:
0c:57:c7:d1:6c:04:28:d4:b7:a9:82:49:e3:2f:7a:02:b6:2a:
5a:ef:4c:08:76:01:70:85:12:59:48:ce:d6:88:85:3b:e6:a0:
98:92:11:40:55:a5:9e:5c:6f:47:7c:f7:83:1a:86:d9:95:eb:
74:17:3d:d1:4a:f5:dc:7c:73:33:d0:49:a4:af:7d:99:64:5b:
92:c8:84:0c:39:8e:ad:a9:1d:e3:24:c0:09:7e:d9:02:dd:00:
d0:86:7e:55:ad:ef:1a:e0:df:c4:e8:4d:11:db:3f:72:4b:a0:
c1:c9:b6:d3:f0:80:e5:c6:df:a4:0c:f4:a3:b3:1e:9d:67:86:
8d:b9:49:3f:48:16:b2:3f:91:a9:d5:31:bb:28:1c:f6:c4:a6:
76:c1:ce:cf:7a:99:5b:47:43:ce:1e:3f:a4:95:c3:32:4b:3d:
9e:00:5c:99:5e:b1:5b:d4:cd:d8:ab:4c:37:a3:0e:4b:ee:4f:
a2:34:f3:9f:8b:38:1a:03:78:be:16:45:c6:b4:ad:de:8c:ef:
14:85:20:83:e7:ae:29:f7:a4:12:36:51:be:82:a7:a8:98:2f:
78:8d:fd:5a:ed:8b:85:c5:b1:a2:d1:d4:ce:d0:06:3c:53:38:
f8:fe:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:37:16 2024 by rpki-client on console-ams.rpki-client.org