Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/9vVA2cE_3xp8HDpBUA6uIxOxOQ0.roa
File: 9vVA2cE_3xp8HDpBUA6uIxOxOQ0.roa (raw, json)
Hash identifier: ENGrBT7rDhsfmnUyh0bvE3AUzO4vFOiuJYY7JA1aNRc=
Subject key identifier: F6:F5:40:D9:C1:3F:DF:1A:7C:1C:3A:41:50:0E:AE:23:13:B1:39:0D
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018E1476EA3B0A9AEF4B165B5482BE0E2465
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/9vVA2cE_3xp8HDpBUA6uIxOxOQ0.roa
Signing time: Wed 06 Mar 2024 15:52:01 +0000
ROA not before: Wed 06 Mar 2024 15:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
79.135.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:76:ea:3b:0a:9a:ef:4b:16:5b:54:82:be:0e:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Mar 6 15:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6f540d9c13fdf1a7c1c3a41500eae2313b1390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:bb:fa:9e:07:c1:41:74:43:b8:68:c3:9e:
38:95:82:1d:b0:74:79:87:b0:f7:84:cd:73:b4:8b:
d8:d6:f4:41:c6:48:0a:e9:6b:50:e7:2a:a8:d0:1a:
58:b1:fc:36:33:80:b0:4d:c5:25:cb:e5:97:bd:85:
8e:61:4c:31:fd:15:6d:02:c4:96:bb:8a:c1:fa:87:
29:d5:0c:9e:6c:6d:f6:57:6e:b4:42:ae:c3:e4:a1:
81:0f:b6:96:e1:8e:be:09:90:93:5b:3c:77:d9:5e:
0d:2b:aa:de:97:57:2a:bc:2a:47:c9:db:3f:8c:df:
dc:25:6d:ed:e3:7e:c2:80:ce:88:22:b0:51:7f:0e:
30:b0:8a:c6:29:9c:b5:07:3d:8d:25:a2:12:3e:c9:
2e:11:4c:4f:85:ab:cc:d8:34:b7:e7:93:c8:72:53:
3a:08:ad:11:24:c3:a3:6f:73:e7:30:5b:bf:84:fa:
20:56:37:3c:4d:33:0e:24:a7:5b:69:fb:ed:02:c1:
10:4a:d7:24:65:f2:eb:15:45:37:4a:9c:c1:25:ec:
7a:af:90:b1:1d:90:cc:85:d9:e6:a6:a9:df:61:11:
c4:d2:c1:31:55:e5:ff:37:c1:9f:b8:1d:17:1d:81:
4f:34:06:15:c6:90:c4:26:2b:34:7a:e2:65:47:2f:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:40:D9:C1:3F:DF:1A:7C:1C:3A:41:50:0E:AE:23:13:B1:39:0D
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/9vVA2cE_3xp8HDpBUA6uIxOxOQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
79.135.102.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b3:df:06:58:80:49:9f:71:26:16:29:ab:a6:76:29:3d:6e:
54:47:55:81:06:b4:13:33:ca:d1:a2:27:99:78:3f:f7:af:bf:
c7:64:a3:71:f7:36:8c:bd:62:b1:0d:3d:86:74:f2:f7:d5:a9:
5f:b3:06:24:f0:4c:9a:21:ae:a0:3c:58:59:b1:d5:b7:49:f7:
ff:c6:66:22:9f:1c:dd:3c:e0:c9:86:d7:49:c8:9d:90:43:cf:
18:0e:7e:20:56:a7:7e:88:32:18:2b:00:1d:69:4c:50:c4:07:
3d:5f:77:01:b2:d6:85:c3:f3:e9:14:47:17:4c:06:e8:82:9f:
5b:2c:16:61:2b:41:7e:4b:8e:ac:eb:02:96:cb:27:d6:a2:e4:
77:e9:d6:1f:da:3d:c7:69:21:73:51:1e:44:8f:a1:4b:f5:79:
95:63:ca:cc:3f:c1:85:f3:d4:b4:8a:d5:cb:cd:f3:5a:3a:93:
42:ed:30:40:e1:1f:7d:ec:40:1a:5d:b0:bd:1a:d1:37:1f:96:
59:61:ce:bc:25:f3:b0:e8:07:19:52:02:3a:83:0c:3f:ea:f3:
c8:03:34:84:41:7f:69:c5:9f:9a:b8:c3:b3:a5:89:27:89:ea:
3d:0a:b4:d1:5b:dc:f3:af:5a:e6:c3:10:5c:43:48:4a:61:39:
58:02:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:09:03 2024 by rpki-client on console-fra.rpki-client.org