Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5TGqEtYcLlsuaRnFJmm1FEwf3tg.roa
File: 5TGqEtYcLlsuaRnFJmm1FEwf3tg.roa (raw, json)
Hash identifier: +amXpXAIkQhvJqFEJfTXrs7yvRw+YmvpS0ow1KOtCvU=
Subject key identifier: E5:31:AA:12:D6:1C:2E:5B:2E:69:19:C5:26:69:B5:14:4C:1F:DE:D8
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018FDF1DDF9A74B446EF9F1AB7588D617576
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5TGqEtYcLlsuaRnFJmm1FEwf3tg.roa
Signing time: Mon 03 Jun 2024 17:20:27 +0000
ROA not before: Mon 03 Jun 2024 17:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39326
IP address blocks: 37.235.54.0/24 maxlen: 24
37.235.55.0/24 maxlen: 24
151.236.19.0/24 maxlen: 24
2a03:f80:44::/48 maxlen: 48
2a03:f80:441::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:1d:df:9a:74:b4:46:ef:9f:1a:b7:58:8d:61:75:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 3 17:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e531aa12d61c2e5b2e6919c52669b5144c1fded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:e8:f3:bb:29:0e:24:b0:b4:68:9c:3f:7c:
7f:a1:f3:c5:cc:2b:1f:a4:50:06:86:c9:bb:12:c4:
7e:eb:5e:1e:c1:88:f6:08:d9:0c:72:d0:59:79:24:
bf:45:15:f4:be:85:b5:63:c9:7c:f1:7c:20:08:53:
43:10:16:c7:09:2e:e9:31:97:95:67:bf:23:f3:9e:
5c:2f:1c:85:8b:1b:86:30:b2:4a:6c:d4:67:96:33:
69:80:09:8f:75:2e:3b:ee:ee:19:87:26:84:f3:7d:
76:63:1f:de:e5:1e:f7:40:78:3b:71:12:cb:43:af:
ee:e0:95:57:37:f7:54:84:64:c5:40:84:a7:5d:39:
75:fe:de:a7:dc:fd:4b:94:f3:ad:05:50:db:46:f1:
53:ff:b1:c0:e7:3c:80:d1:11:45:63:71:a4:aa:8c:
76:dc:a6:0f:92:9f:27:27:94:50:36:40:77:ef:42:
98:d4:9f:09:a1:cf:6f:92:e6:d8:90:0f:4d:8f:17:
fc:5b:00:dd:9b:7f:87:d0:63:dc:1f:6f:ab:90:71:
25:8f:73:4e:a6:48:9e:1f:65:d1:12:10:36:c3:5e:
66:9d:95:ab:c1:bb:58:88:bd:cb:3c:0f:50:c0:38:
cf:62:aa:4e:ab:3b:5d:ef:e4:3b:54:c0:f0:1c:e8:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:AA:12:D6:1C:2E:5B:2E:69:19:C5:26:69:B5:14:4C:1F:DE:D8
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5TGqEtYcLlsuaRnFJmm1FEwf3tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.54.0/23
151.236.19.0/24
IPv6:
2a03:f80:44::/48
2a03:f80:441::/48
Signature Algorithm: sha256WithRSAEncryption
30:49:56:50:7c:62:0b:f9:73:2f:b7:be:85:4e:17:a6:45:6a:
e3:52:d7:49:e0:9a:9e:1c:41:a2:b8:c8:7d:c0:ac:35:b8:f8:
44:cc:cb:1b:04:03:f4:c7:30:6b:45:6f:bb:88:a1:c4:34:46:
44:a4:a7:8e:9b:6d:bf:c0:08:ad:16:5d:86:59:ee:8f:10:79:
c8:83:9a:a1:9f:6c:e6:0c:9c:6c:17:61:d9:7e:6b:c1:d6:96:
13:97:de:1d:7f:01:c5:9a:46:2c:64:2f:d2:30:aa:70:d0:30:
51:f2:44:bd:f3:b1:a3:40:74:91:bf:60:d8:a9:8a:ab:bf:29:
9b:7a:95:8c:89:b5:aa:0d:0e:d2:9e:d3:78:99:f1:d2:5f:c8:
18:3f:f4:2e:32:76:50:ab:c1:75:56:d1:aa:8c:d7:cd:28:85:
60:a5:92:51:95:28:69:51:83:de:c7:fd:c4:ac:1e:e9:b6:53:
a3:cf:bb:27:27:fa:82:8a:a7:a6:7e:57:97:fc:83:f0:ce:08:
3a:5b:bf:12:b2:60:dc:62:fb:bf:90:35:1a:d1:80:59:74:1a:
26:03:61:ea:40:66:8a:23:57:07:0a:51:8e:f2:b0:fc:9e:1b:
0b:62:00:57:06:18:fe:62:d6:f5:ab:cb:fa:29:8a:a5:89:98:
41:ae:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:58:39 2024 by rpki-client on console-fra.rpki-client.org