Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/5GnMROvtMvHnENMDFdy5vdoMOOA.roa
File: 5GnMROvtMvHnENMDFdy5vdoMOOA.roa (raw, json)
Hash identifier: 4zi3FW233oTxgLBl8GGG602SX8yOG5u+ii2Pv/um0eg=
Subject key identifier: E4:69:CC:44:EB:ED:32:F1:E7:10:D3:03:15:DC:B9:BD:DA:0C:38:E0
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 018CC6B77985648CBA08BB2BB9348FF37E26
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/5GnMROvtMvHnENMDFdy5vdoMOOA.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197914
IP address blocks: 195.66.112.0/24 maxlen: 24
130.0.192.0/21 maxlen: 24
194.50.60.0/24 maxlen: 24
2a03:a580::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:85:64:8c:ba:08:bb:2b:b9:34:8f:f3:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e469cc44ebed32f1e710d30315dcb9bdda0c38e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:6a:18:ee:75:6d:93:7c:e4:2b:c7:d2:26:
94:82:06:7f:b9:38:aa:49:04:8e:48:e5:da:52:0b:
25:8c:19:03:63:11:7b:1a:52:db:6f:32:f6:57:f7:
ce:9b:f0:48:ec:e6:f0:7e:60:8c:0b:9f:12:05:37:
20:50:48:b3:5f:d3:66:24:14:a6:a7:da:41:04:c3:
b5:4e:8c:3a:69:47:bd:7d:97:d0:86:20:ff:49:db:
bc:8f:55:86:14:d9:43:e6:02:61:19:85:29:f9:bc:
77:29:14:b3:73:20:a6:77:b1:dc:9d:b1:1e:d4:80:
d5:77:f6:2b:a6:fd:61:8e:db:ed:0f:7d:64:fb:f8:
5d:48:6e:10:3e:be:25:3c:ae:68:de:a7:af:49:9f:
79:6f:9d:9f:42:b3:13:a9:7b:60:50:83:46:37:da:
f7:2f:63:50:b4:c2:a1:24:3e:6b:93:b1:2b:20:fd:
fc:dc:5f:b8:00:d8:39:60:00:e8:0f:96:71:53:c9:
f2:1a:8f:11:43:50:a9:56:99:79:a3:b5:04:30:77:
4b:95:75:7c:42:f7:6e:4f:b8:e5:b0:2d:f0:60:99:
d0:a6:a1:b7:c9:17:f3:ad:db:33:52:98:5a:51:cc:
26:1d:48:df:e0:9f:17:28:9d:a7:53:46:8a:18:77:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:CC:44:EB:ED:32:F1:E7:10:D3:03:15:DC:B9:BD:DA:0C:38:E0
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/5GnMROvtMvHnENMDFdy5vdoMOOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.192.0/21
194.50.60.0/24
195.66.112.0/24
IPv6:
2a03:a580::/32
Signature Algorithm: sha256WithRSAEncryption
0d:dc:c2:02:26:c4:84:e6:fc:63:fc:53:a5:97:e3:e4:df:3f:
94:6f:be:46:56:24:aa:40:34:33:8f:fa:c2:d7:32:51:57:01:
37:40:9b:87:fb:9f:4f:77:57:5e:9b:22:cd:fb:68:5e:2d:60:
d8:b4:ff:ef:fa:1d:a7:a2:2b:3c:e9:b3:81:e4:83:20:03:91:
37:bc:fd:56:ee:6a:50:3d:d7:5a:ab:c7:7b:45:cc:8b:11:f2:
d5:c6:88:7c:b7:89:8a:a6:6f:09:c6:33:7a:e5:7a:da:9a:36:
8c:6b:37:29:1d:35:45:6e:4b:87:27:09:00:e7:48:8d:e6:32:
db:9e:85:64:18:8b:56:bf:b5:c9:f6:0d:9b:43:15:e0:d0:b8:
4e:78:8b:eb:6f:77:bf:91:f9:a2:3d:97:11:57:7c:5a:0f:52:
9a:ac:ce:9d:e0:b8:44:d9:bd:38:c2:ff:b2:1f:85:6b:3f:40:
53:62:ff:81:86:6d:43:41:e3:33:d2:21:31:09:ba:7f:67:10:
04:ee:4b:ff:1d:aa:cb:0b:47:bb:78:b3:94:51:f6:e5:71:8f:
e7:f5:a1:3a:b8:50:da:82:da:7c:cb:83:6e:cb:d6:45:b1:b4:
0e:48:4b:33:7f:b9:62:10:cd:5b:76:f2:21:fb:8b:d3:d7:ed:
48:a4:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:00:25 2024 by rpki-client on console-fra.rpki-client.org