Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/5GytBfL9Rzs5dSGcARGUZhGXF64.roa
File: 5GytBfL9Rzs5dSGcARGUZhGXF64.roa (raw, json)
Hash identifier: ZXTx5/fcgVIxoRnIGaO9oXmWQ4xuDTIfC5IvL5WbI2w=
Subject key identifier: E4:6C:AD:05:F2:FD:47:3B:39:75:21:9C:01:11:94:66:11:97:17:AE
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 018CC3B6CAE278BA318E03FB8D84053BB795
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/5GytBfL9Rzs5dSGcARGUZhGXF64.roa
Signing time: Mon 01 Jan 2024 06:29:45 +0000
ROA not before: Mon 01 Jan 2024 06:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203089
IP address blocks: 185.136.124.0/24 maxlen: 24
185.136.125.0/24 maxlen: 24
185.136.126.0/24 maxlen: 24
185.136.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ca:e2:78:ba:31:8e:03:fb:8d:84:05:3b:b7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e46cad05f2fd473b3975219c01119466119717ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:df:16:5b:e6:f6:b8:7f:65:e2:a2:a0:46:
7d:8b:1d:76:d0:51:d3:6a:c4:d7:d3:28:a1:71:32:
b3:8e:b3:e0:49:65:9e:4a:43:69:f7:ec:67:f4:d1:
de:fc:74:ab:11:c4:38:ac:d0:2f:0e:37:b2:9d:94:
f9:56:9b:dd:10:7e:d6:4b:60:88:58:af:3d:00:b5:
bd:6c:28:31:8e:ce:c9:c6:b3:62:ad:7c:cc:22:d8:
f9:d1:29:6a:7b:97:63:ac:5f:a5:aa:b5:0c:1e:04:
7c:1c:46:5d:b9:6d:09:e1:9b:c0:50:18:a9:fc:15:
61:7e:ef:f1:7c:cd:92:73:6f:81:68:b1:21:f9:71:
10:e2:c7:07:46:d7:2c:42:b2:89:bc:b3:1a:c6:17:
7b:21:ca:c9:dc:6c:1a:42:88:7f:cb:2c:cd:ff:89:
25:86:90:e3:68:ba:05:92:9b:b2:bf:0a:14:25:8d:
13:a8:7a:1e:e6:ee:ed:b5:29:7c:6b:a6:38:af:40:
2c:a8:65:16:a7:16:13:19:7d:db:68:15:3c:e1:a0:
29:b4:76:ae:6b:6c:42:c5:a2:5e:5d:94:35:92:5b:
74:33:1f:fc:74:7b:17:f0:11:0e:79:81:75:82:ae:
2b:25:56:85:c3:a4:4d:31:cf:70:ba:e3:93:79:5c:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:AD:05:F2:FD:47:3B:39:75:21:9C:01:11:94:66:11:97:17:AE
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/5GytBfL9Rzs5dSGcARGUZhGXF64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.124.0/22
Signature Algorithm: sha256WithRSAEncryption
36:4e:63:2d:d6:aa:47:ed:4b:64:9a:61:5f:dd:ae:ab:ca:7a:
2d:d9:e8:b9:06:52:04:f2:07:e1:2d:0a:89:0f:8e:f4:f4:47:
6e:f9:4e:e7:8f:25:6b:f4:17:b6:e3:33:d3:b8:e1:2b:b0:a4:
3c:5f:c0:78:f0:7f:1b:bf:84:fb:00:6e:cf:cf:49:a1:61:1e:
c2:73:a1:ca:7c:b7:67:7b:92:a4:4f:20:3b:6f:8e:15:db:2b:
92:68:db:98:c4:88:38:89:0b:3d:05:11:95:91:4f:cd:37:a1:
9c:5d:b8:6d:07:15:7e:b7:86:db:51:51:c7:c1:67:63:48:13:
27:09:35:c2:1e:52:60:d3:b4:66:dd:03:fd:7e:eb:ba:cb:7a:
f1:73:df:6d:de:3a:f4:14:90:c2:86:ab:9b:4d:f9:3b:33:ab:
32:25:cb:51:0b:89:aa:94:52:9b:bb:c2:81:a2:09:55:60:f9:
34:0d:4a:df:b0:5b:69:63:7f:19:17:f0:52:21:2f:6b:95:d6:
65:db:ce:5f:a8:cf:7f:75:cb:82:83:8c:21:9c:c0:c4:48:9b:
b0:1f:ba:8d:e4:34:9b:bb:41:84:a4:88:4d:8f:a5:e7:90:16:
a4:eb:12:de:d8:2a:55:f6:8a:fe:bb:26:f2:9e:42:b2:9c:96:
2a:2c:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:44:35 2024 by rpki-client on console-ams.rpki-client.org