Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5Xx6SjpCE6RwVtBDbOmKCVrwZf0.roa
File: 5Xx6SjpCE6RwVtBDbOmKCVrwZf0.roa (raw, json)
Hash identifier: d5XFNwv7TcW9ugJOI5W7dPXvwVrNOqKDEs5AnBtseNg=
Subject key identifier: E5:7C:7A:4A:3A:42:13:A4:70:56:D0:43:6C:E9:8A:09:5A:F0:65:FD
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F0FA083B443FA99B355E53F45C5134373
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5Xx6SjpCE6RwVtBDbOmKCVrwZf0.roa
Signing time: Wed 24 Apr 2024 10:22:08 +0000
ROA not before: Wed 24 Apr 2024 10:22:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 95.82.8.0/21 maxlen: 24
95.82.16.0/20 maxlen: 24
109.111.52.0/22 maxlen: 24
109.111.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:a0:83:b4:43:fa:99:b3:55:e5:3f:45:c5:13:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 24 10:22:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e57c7a4a3a4213a47056d0436ce98a095af065fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:39:58:d1:e6:5f:43:d5:5d:cb:da:04:df:
4c:eb:f0:61:90:b4:2b:cb:79:2b:9a:2a:47:c1:26:
19:1f:9d:71:9a:e4:3a:a2:ec:1b:8d:2d:dd:55:dd:
4f:e8:3c:94:00:30:1b:39:18:74:f2:5e:8e:d1:c7:
80:17:2d:ee:0e:0a:99:6d:c1:ed:ab:0f:76:59:51:
58:78:c1:10:f1:8e:2b:d7:40:8b:ce:19:37:ee:af:
f5:a4:5a:c1:f0:6c:57:9d:7a:28:95:4b:33:f1:9c:
8b:55:52:ae:4a:8c:75:b4:00:06:61:91:cd:40:62:
d7:86:6e:3a:8c:41:8d:21:70:8d:15:bf:92:82:30:
12:9c:a4:d5:14:dd:52:c7:2d:be:67:eb:fc:20:01:
9a:77:c7:1d:7e:15:01:7e:08:10:77:1d:4d:52:4c:
63:61:3b:4c:08:99:fe:f8:74:40:09:24:ca:29:8c:
81:8a:a8:1d:f8:46:0d:e4:03:75:6d:f1:e9:cf:36:
90:c8:a3:3c:6a:d9:19:d6:4a:02:a8:27:91:95:19:
b9:7a:0d:40:e0:63:1d:eb:e6:a7:46:91:d7:b7:16:
36:49:7d:a2:b0:ba:0b:1b:86:7c:8c:d2:c9:51:4a:
1a:22:bc:79:c9:17:b6:3e:98:2e:8f:8b:1e:c4:f9:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:7A:4A:3A:42:13:A4:70:56:D0:43:6C:E9:8A:09:5A:F0:65:FD
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5Xx6SjpCE6RwVtBDbOmKCVrwZf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.52.0/22
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
85:cf:54:65:8c:0b:b6:7c:56:32:db:a1:98:1f:ba:f5:cd:15:
2e:76:0f:38:34:ba:7a:b6:ae:aa:a3:8a:fd:51:ad:b3:27:98:
7a:c9:a1:4c:d0:74:00:1f:67:d3:48:35:97:8d:93:1e:b2:46:
5f:ee:1d:1b:86:bd:37:1e:0e:af:56:e7:9e:14:15:cb:96:32:
35:c3:8e:1f:f5:fd:e5:32:dc:30:ea:d1:48:9f:5c:dc:67:ec:
dd:71:9a:ca:97:94:44:a6:8a:fa:35:a8:50:93:ce:b8:e0:cf:
b6:ea:e2:99:25:30:8f:31:e0:65:c8:01:24:67:05:bd:3c:24:
75:be:11:86:a9:74:cd:63:2d:a3:c8:9f:d6:88:ea:a7:44:d7:
a9:b5:57:f2:77:ec:1f:a4:b6:a4:ee:ef:42:60:3b:91:0b:d7:
f9:c2:64:7a:d2:55:ca:69:25:8c:aa:fa:bd:fb:d9:b6:3b:17:
75:10:42:d4:1c:97:63:1a:75:6a:9a:3d:30:be:5c:10:b0:64:
be:55:b8:2a:97:11:20:a3:23:a8:49:4d:2b:36:06:de:1c:6f:
01:bb:ee:11:39:1f:34:5b:0e:d4:5f:87:fc:ba:f4:12:c1:68:
c1:ad:b9:8e:81:a7:fe:4e:cb:b0:c8:e3:67:80:de:8f:e6:79:
62:35:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:23:51 2024 by rpki-client on console-ams.rpki-client.org