Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExF5dySDaN4U0uZgQ-f95ak1rSI.roa
File: ExF5dySDaN4U0uZgQ-f95ak1rSI.roa (raw, json)
Hash identifier: wEsUwT9PBvAgXWffg7ZfqT3ZN83lDktx8J+e6DZsyZc=
Subject key identifier: 13:11:79:77:24:83:68:DE:14:D2:E6:60:43:E7:FD:E5:A9:35:AD:22
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018FA9D029932FA8C20D25ACE4B8A4B32D59
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExF5dySDaN4U0uZgQ-f95ak1rSI.roa
Signing time: Fri 24 May 2024 08:55:42 +0000
ROA not before: Fri 24 May 2024 08:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 5.178.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:d0:29:93:2f:a8:c2:0d:25:ac:e4:b8:a4:b3:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 24 08:55:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13117977248368de14d2e66043e7fde5a935ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:43:bf:68:19:2e:80:b4:10:5e:ad:de:e5:
3e:26:db:19:46:cf:fb:b2:0b:61:d4:60:79:ee:26:
a6:ab:11:e0:a4:27:47:28:01:af:3a:d9:5b:9d:7a:
67:f4:4d:b7:5e:b4:5d:0c:70:72:43:be:f8:63:b1:
0b:ae:37:3e:f3:ef:40:ca:29:87:e4:c3:48:f2:4b:
4f:e7:cf:a6:04:66:ce:88:7b:bd:be:7c:d9:4f:16:
68:89:d7:6b:68:ef:5e:56:17:36:80:20:d9:86:ac:
67:74:2b:b4:58:48:e8:64:9e:0b:71:21:c4:df:90:
76:e4:ef:19:39:f9:40:d8:a1:e6:80:60:16:a6:3c:
63:2b:d8:77:1a:03:79:c1:d1:8b:f4:92:08:5c:94:
fc:13:88:0e:72:2f:80:14:e2:9d:b7:21:f9:e7:b5:
f5:bb:eb:31:24:01:4a:ad:47:99:3e:1a:53:ee:dd:
23:53:90:09:98:ad:29:4a:b7:1c:b0:18:4b:47:25:
de:d0:a7:12:4e:0c:84:fb:8c:ae:38:26:91:10:07:
c3:c1:a1:82:5b:a7:48:59:03:01:da:dd:c5:4a:bf:
9b:b0:a0:6c:35:12:59:39:d1:64:6c:e1:de:de:99:
f3:7e:fc:46:b2:09:75:cc:dc:92:6b:5a:df:31:6e:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:79:77:24:83:68:DE:14:D2:E6:60:43:E7:FD:E5:A9:35:AD:22
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExF5dySDaN4U0uZgQ-f95ak1rSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.109.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:bd:f2:4c:09:4b:9b:ab:5e:2e:6c:e2:b5:c7:e9:6d:d7:0e:
7e:5e:97:99:2b:4e:30:05:62:3e:fc:10:1b:a9:75:a8:45:24:
f3:b6:98:cd:bc:62:89:6f:29:7b:24:9a:ed:19:19:84:dc:89:
e5:08:af:eb:51:97:38:c4:ab:c6:81:06:2a:25:ba:d2:6b:de:
2a:cf:50:92:50:a7:1d:8b:f6:b8:c3:38:94:c6:d1:c5:62:a8:
39:5d:53:35:3d:4a:63:4c:00:9f:15:96:63:c9:84:5b:f8:a0:
34:16:bc:62:4f:4b:fd:44:25:ac:9f:06:ac:00:e9:5a:c2:ed:
66:47:9a:94:ad:28:ea:df:5c:45:eb:c5:8e:ad:f9:bf:50:92:
82:cc:5e:26:3c:36:be:3c:23:a4:1d:f8:dc:d5:89:d3:58:52:
0e:ea:99:59:0c:78:54:24:aa:fc:9a:7a:1a:6e:af:ec:7e:d5:
cc:09:04:d2:cf:15:97:05:fa:5e:e4:3d:92:08:76:d6:30:fb:
d3:2a:80:47:ad:2b:75:58:37:40:05:a9:6c:f3:57:25:ad:41:
7c:aa:71:84:df:99:3a:e1:07:47:fc:0b:8a:74:95:11:3e:bf:
d2:fc:84:e1:ec:aa:0c:df:6f:fc:75:12:58:3b:ad:80:3e:2b:
4f:79:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:02 2024 by rpki-client on console-ams.rpki-client.org