Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/5EoHOeyRT61i8GAnZ7_65grURf0.roa
File: 5EoHOeyRT61i8GAnZ7_65grURf0.roa (raw, json)
Hash identifier: 24Tt7OXU7peXJmbB47uB6Abe7tMC6cflTT/n6WQNSNk=
Subject key identifier: E4:4A:07:39:EC:91:4F:AD:62:F0:60:27:67:BF:FA:E6:0A:D4:45:FD
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019053B7D3BFEE606FE0F8C7625B1D817C3B
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/5EoHOeyRT61i8GAnZ7_65grURf0.roa
Signing time: Wed 26 Jun 2024 08:44:34 +0000
ROA not before: Wed 26 Jun 2024 08:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204666
IP address blocks: 45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
185.188.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:b7:d3:bf:ee:60:6f:e0:f8:c7:62:5b:1d:81:7c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jun 26 08:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e44a0739ec914fad62f0602767bffae60ad445fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:5f:ea:1b:dc:36:bb:83:06:f9:c3:92:59:
87:c7:17:13:dd:35:13:f5:8c:c9:bc:b9:26:75:59:
5a:94:5d:c3:b6:07:32:8e:5b:fa:1b:4f:43:a7:74:
e2:24:63:1e:69:bc:02:45:e9:28:36:a4:58:81:55:
c5:a3:d9:b8:a4:0a:a7:26:2e:4a:15:11:6f:c8:15:
3c:6e:88:c5:ea:3e:13:0a:bc:96:ac:de:9c:92:f9:
f7:ea:f4:33:15:c5:27:87:cc:68:ed:eb:f1:9c:a4:
a1:54:56:7a:63:2e:f8:10:e6:36:36:20:6c:16:11:
1a:5b:a5:e7:b8:f5:46:42:f3:d8:fc:6a:3e:a0:f0:
31:bb:d2:b4:07:96:59:21:80:37:c3:10:5a:39:5f:
6b:6a:30:4e:0e:54:c0:5a:14:64:f7:6d:24:7c:6d:
d3:b7:29:74:99:26:43:b0:a7:c5:b3:c3:99:96:b5:
2f:4e:f4:4f:d2:53:49:e2:3f:98:95:28:bb:97:a8:
27:77:bb:d9:ea:19:8c:36:b2:74:b0:f1:8f:33:17:
8d:29:31:8c:8c:cf:d0:38:fc:31:e4:32:5d:bc:34:
e6:f8:48:13:db:27:c4:72:2d:68:70:f0:6f:16:c0:
90:19:fc:5b:fb:e7:07:fe:d5:59:08:0d:0e:30:b0:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:07:39:EC:91:4F:AD:62:F0:60:27:67:BF:FA:E6:0A:D4:45:FD
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/5EoHOeyRT61i8GAnZ7_65grURf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.192.0/22
185.188.101.0/24
Signature Algorithm: sha256WithRSAEncryption
14:57:ae:20:be:14:e3:04:31:c8:86:22:63:4e:35:3e:5f:61:
35:5e:68:12:1e:45:86:e3:66:0f:c2:a9:56:27:65:09:00:ce:
a5:80:81:b1:0d:35:f8:17:af:f6:6a:3e:02:d6:92:4e:16:c7:
69:0f:a4:ff:90:d5:ee:d8:e9:43:b6:c5:e1:9c:4d:a5:03:31:
2d:e3:66:30:73:95:e1:5b:38:23:dd:fe:05:2f:0d:fa:5f:60:
57:92:45:8b:2c:7b:5d:e5:bc:e0:be:13:84:e5:64:26:0b:60:
68:ba:39:ea:74:f8:49:b5:a6:60:6b:7b:02:10:da:28:95:7c:
58:2b:db:a7:56:e9:fe:75:d1:e4:bf:35:c6:ee:31:86:a6:9f:
c4:16:ca:21:4e:cc:01:ba:e2:41:f5:b4:d5:eb:2d:a2:e4:7e:
16:3f:ac:1b:a4:7f:0c:db:ad:f0:73:e9:ff:7e:f5:29:cc:71:
8f:f0:56:02:a4:19:20:04:c5:56:88:41:2c:9a:c7:c1:e9:3d:
91:96:12:ef:5d:0d:37:7d:04:7a:36:b9:b3:7e:99:a1:b7:12:
d1:4d:e6:e2:ae:0d:cb:87:eb:91:36:7a:ce:7f:e8:9a:43:6f:
0b:e7:61:cc:61:3a:8c:a9:a5:e8:ee:f2:2f:f5:57:12:fc:13:
06:2d:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:16:42 2024 by rpki-client on console-fra.rpki-client.org