Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/32QWwY-eI9mrC-ylcuwIo7hNdGc.roa
File: 32QWwY-eI9mrC-ylcuwIo7hNdGc.roa (raw, json)
Hash identifier: yFTlLYF5K8BgkEWj9tmzgdSC9dzsu6Jn6PGZY08xOZw=
Subject key identifier: DF:64:16:C1:8F:9E:23:D9:AB:0B:EC:A5:72:EC:08:A3:B8:4D:74:67
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE357887FEAED20573DDB119FFED913D1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/32QWwY-eI9mrC-ylcuwIo7hNdGc.roa
Signing time: Mon 15 Apr 2024 19:59:08 +0000
ROA not before: Mon 15 Apr 2024 19:59:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 5.182.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:88:7f:ea:ed:20:57:3d:db:11:9f:fe:d9:13:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df6416c18f9e23d9ab0beca572ec08a3b84d7467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:f6:22:32:29:15:07:31:a7:63:9f:b9:3f:
6c:af:3a:19:d9:7f:f8:06:aa:88:e8:3e:3d:91:1c:
6a:4f:bc:32:c3:e9:b0:05:49:f9:c7:a8:e6:db:af:
d4:a9:58:29:c5:93:d0:53:9e:ea:76:72:da:9b:56:
3d:5c:c7:f5:6d:05:28:27:f1:0c:55:0d:53:35:09:
f4:9b:8c:d5:d2:ff:1b:b8:27:39:84:f1:3d:e6:c3:
96:53:84:6c:f4:3b:76:e1:5b:43:01:11:5c:60:ed:
19:48:1c:a6:6a:fa:b0:9c:d1:cb:41:da:34:c8:b0:
0c:56:15:45:3a:8a:cb:0e:0d:fd:e7:d0:cb:b6:ee:
7c:9e:a4:5f:db:1f:c3:1c:c9:dd:bd:89:5a:a3:69:
4f:9c:63:c9:d8:1b:75:1b:73:89:e8:90:22:ab:93:
87:c1:4e:7e:3c:a5:07:cf:94:a9:49:d4:68:9d:21:
94:9a:13:f6:f0:9e:70:08:3c:b2:1e:c9:98:ce:49:
59:02:62:1c:27:f5:fe:f6:5a:80:95:70:c6:9e:da:
49:6d:4e:10:ce:77:e3:60:36:e2:41:b2:d9:3c:86:
46:50:44:53:ea:ec:97:c6:50:de:60:32:28:20:36:
9e:07:74:66:dc:eb:86:a1:48:33:f3:00:dd:1f:f2:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:16:C1:8F:9E:23:D9:AB:0B:EC:A5:72:EC:08:A3:B8:4D:74:67
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/32QWwY-eI9mrC-ylcuwIo7hNdGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.118.0/23
Signature Algorithm: sha256WithRSAEncryption
74:f4:14:a2:83:8c:2a:ef:7d:cc:82:a9:9c:92:d3:a2:a3:86:
b1:4f:b8:8d:0e:1e:f9:a1:d8:12:10:0c:6b:43:fa:74:13:ff:
ef:0d:06:69:b6:81:f6:47:e0:21:94:3a:24:70:ac:ef:f7:59:
d8:d5:c0:74:c3:1c:a6:cc:f3:16:0d:68:68:d4:6c:2a:0d:e6:
35:63:4d:20:a6:6c:de:89:4e:1a:7e:08:78:b9:86:fe:de:00:
06:5a:d8:7b:da:fe:e9:17:a7:1c:60:dc:60:f8:5d:2e:b8:4c:
42:3f:a8:7d:48:62:3d:a1:b8:97:41:ab:77:07:a4:c0:03:27:
ec:5d:14:06:a7:09:0c:c1:17:4f:2b:51:ab:34:58:36:b1:97:
ab:6d:37:ac:0b:18:69:3f:06:9a:96:68:33:9d:5a:c0:a7:2c:
8a:a8:93:21:16:65:d9:4a:ed:05:6e:1b:db:22:f5:ab:6b:37:
c3:6d:b4:c0:f8:9d:7a:6c:e1:8c:63:45:2c:91:92:ab:ac:df:
92:0a:88:2d:4c:4d:65:d8:e4:14:72:86:3e:27:b9:27:31:78:
74:6a:14:70:1d:15:79:12:fc:e2:c7:e3:88:6a:a4:cd:72:eb:
55:ed:42:a5:6d:62:63:83:fd:05:af:6c:56:9f:20:e6:a6:5f:
c5:80:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:35 2024 by rpki-client on console-fra.rpki-client.org