Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/lK0rCRfz-0vTQT8nvMkmIwy_jA4.roa
File: lK0rCRfz-0vTQT8nvMkmIwy_jA4.roa (raw, json)
Hash identifier: DO+tcqV05FCd4yB7lChtdBzNoROz71VuY7TBElfjmLI=
Subject key identifier: 94:AD:2B:09:17:F3:FB:4B:D3:41:3F:27:BC:C9:26:23:0C:BF:8C:0E
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 018FBFAE9C6983521C6F5706D20637DFE83C
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/lK0rCRfz-0vTQT8nvMkmIwy_jA4.roa
Signing time: Tue 28 May 2024 14:50:42 +0000
ROA not before: Tue 28 May 2024 14:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198471
IP address blocks: 5.133.54.0/23 maxlen: 23
5.133.55.0/24 maxlen: 24
5.133.56.0/22 maxlen: 22
5.133.56.0/23 maxlen: 23
5.133.56.0/24 maxlen: 24
5.133.57.0/24 maxlen: 24
5.133.58.0/23 maxlen: 23
5.133.58.0/24 maxlen: 24
5.133.59.0/24 maxlen: 24
5.133.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:ae:9c:69:83:52:1c:6f:57:06:d2:06:37:df:e8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: May 28 14:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94ad2b0917f3fb4bd3413f27bcc926230cbf8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:c0:99:ba:96:1e:06:70:c9:bd:df:28:ce:
d3:ec:05:3d:48:1e:fc:f7:f4:85:de:6a:20:ad:dc:
47:96:e5:75:d4:2b:c1:77:4b:0c:c0:df:75:db:96:
11:1c:6f:86:e5:27:f4:03:68:97:b6:e5:40:f7:64:
a6:cf:fb:79:00:01:b4:3b:38:cf:a2:50:06:cd:39:
b4:11:f2:7d:9a:f4:69:72:27:7b:55:9d:d5:6c:ec:
a0:19:95:93:61:60:b7:68:c0:48:53:b1:5f:be:f7:
bc:b7:5c:e7:6a:0a:bd:78:03:85:a8:36:46:c9:38:
10:2d:26:ee:67:8e:39:75:41:b5:a8:8f:10:cf:ac:
dd:81:57:f8:24:6d:33:22:6b:9a:b2:cc:2f:b7:60:
2e:e4:fd:09:fb:90:23:af:8a:6b:e5:f5:46:33:95:
2a:0c:72:19:d5:8b:d1:a3:ec:3c:ad:bc:84:bb:be:
45:26:25:77:a6:90:2a:00:66:35:98:62:f5:09:02:
e6:e1:f3:52:95:30:7f:65:b0:30:58:1d:dd:e6:25:
b6:be:5b:e8:54:d2:b0:8a:7e:46:ea:5b:cb:9d:c0:
10:82:dc:0f:92:e2:8f:ad:ee:c1:cd:6d:8b:ce:e6:
c7:21:97:6b:42:96:a4:da:2f:81:a6:d0:c7:d3:9f:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:2B:09:17:F3:FB:4B:D3:41:3F:27:BC:C9:26:23:0C:BF:8C:0E
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/lK0rCRfz-0vTQT8nvMkmIwy_jA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.54.0-5.133.60.255
Signature Algorithm: sha256WithRSAEncryption
74:f4:a4:c2:4d:29:11:c0:38:63:85:d0:3d:05:48:13:39:ee:
39:0e:af:45:26:73:da:10:03:96:da:07:a7:ce:5e:43:22:82:
e9:34:7f:8a:28:89:3a:b6:03:f3:5d:12:26:29:5e:bb:c2:a7:
2e:94:1e:e5:96:3a:be:7c:20:42:bb:b8:b1:20:cb:e4:bf:fc:
73:92:44:8b:25:a6:8b:5b:88:11:57:49:32:ca:a0:8c:8a:ea:
34:d4:d8:a4:4e:f3:64:17:e8:e6:dd:0a:3a:46:b9:c6:da:f4:
a8:2f:61:35:03:c0:de:32:aa:33:10:09:a6:02:e1:6e:89:0d:
08:ed:06:92:53:a6:99:54:01:e2:21:d3:6f:29:08:6b:1e:53:
8a:90:d0:1f:85:d2:da:12:4c:47:e3:4f:0a:c8:f7:5c:3c:03:
07:24:64:0a:74:31:b4:df:51:23:25:86:d2:2d:8d:f7:63:d0:
c3:56:79:5d:5d:a2:17:20:07:84:7e:11:35:85:bf:1d:0f:b1:
c3:a3:5a:9b:ff:df:d6:99:56:d8:f7:67:9c:47:2b:32:0e:02:
49:77:0c:03:75:35:f3:8f:6a:46:fd:f5:46:28:87:71:5f:50:
f2:27:56:a0:99:48:6c:b4:7e:36:2a:32:37:44:0f:53:ab:62:
3c:19:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:48:10 2024 by rpki-client on console-fra.rpki-client.org