Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/pfX3QlIMcld6YRNlyN-eNWphXao.roa
File: pfX3QlIMcld6YRNlyN-eNWphXao.roa (raw, json)
Hash identifier: fZv3MoIHOPTKWumxNGrFPuysyQTnAsN0sb51zaWM2y4=
Subject key identifier: A5:F5:F7:42:52:0C:72:57:7A:61:13:65:C8:DF:9E:35:6A:61:5D:AA
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 018CC348CB12D20D56045990D8AE16F6060D
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/pfX3QlIMcld6YRNlyN-eNWphXao.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207642
IP address blocks: 83.138.58.0/24 maxlen: 24
2a0f:fe40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cb:12:d2:0d:56:04:59:90:d8:ae:16:f6:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5f5f742520c72577a611365c8df9e356a615daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:74:54:4d:3c:84:78:59:39:80:29:53:3f:
a7:10:1a:55:dd:8a:46:a5:ef:02:da:d3:ee:88:2d:
e0:b6:59:47:af:62:9f:05:77:1f:01:98:1f:80:6d:
a5:12:d4:a4:9f:f0:3b:49:c4:6e:a3:a9:e1:7f:cb:
23:68:e0:cb:40:e9:9d:43:93:38:3b:e5:a4:49:e4:
3b:14:1d:72:1e:29:96:96:c9:91:84:5f:e3:f6:3f:
68:47:84:58:64:9f:31:7c:0e:77:6e:00:31:c6:3c:
66:c2:ee:f2:bb:c7:b2:9e:a2:21:e7:46:19:0f:9c:
63:70:c7:ac:1d:3d:e9:57:d4:56:7e:8c:a1:44:7a:
51:90:7a:0e:45:46:10:ad:42:40:d3:8b:59:c1:78:
1d:d5:9c:32:ec:bf:f9:ec:19:b8:9c:93:a2:71:91:
10:b3:54:42:9e:5e:cf:3a:f4:82:cb:11:a4:88:35:
11:d7:37:3b:be:9f:6c:fb:9d:a4:6b:28:7d:68:81:
70:86:a4:f5:a7:bd:32:fb:d6:6c:b9:fe:84:47:11:
44:9e:1a:50:07:39:5e:27:54:b0:39:6f:8b:f9:44:
1c:fd:3e:40:b6:3e:f7:f7:3e:a2:f7:28:97:a8:8c:
fd:77:2d:6d:0b:ec:68:9e:b4:9f:3f:01:42:b5:2f:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:F7:42:52:0C:72:57:7A:61:13:65:C8:DF:9E:35:6A:61:5D:AA
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/pfX3QlIMcld6YRNlyN-eNWphXao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.58.0/24
IPv6:
2a0f:fe40::/48
Signature Algorithm: sha256WithRSAEncryption
89:86:fa:69:2d:0b:3c:ff:f0:74:8c:2c:16:0b:81:0a:3f:ac:
17:53:8b:db:98:06:d9:8c:2f:f4:8e:37:dd:69:db:ba:48:62:
69:b1:a2:ea:2e:5e:b9:93:8b:b2:ac:29:5b:de:5b:aa:ef:3b:
c6:c3:57:52:e0:7c:33:9d:d4:72:48:90:c2:b0:ff:af:96:f4:
13:a5:5f:65:92:b0:54:22:0f:59:2d:8b:61:ea:3d:d6:8a:c1:
cb:c0:b7:0a:c2:4e:50:e5:8d:7a:0c:38:96:d2:dd:be:7a:ba:
59:ec:75:88:c8:54:dc:1a:17:2b:1c:0f:78:64:01:d7:32:cf:
f0:66:21:0a:2a:47:a9:44:66:b1:ee:24:cc:8d:91:4a:a2:1d:
8c:ec:3e:47:46:df:a5:bf:3a:70:9a:05:bc:bc:4d:6d:2f:a6:
ed:c2:ee:0c:80:63:33:eb:b0:b8:20:40:68:93:bb:23:02:87:
0c:ba:6a:bd:04:ac:c8:92:f4:ec:c5:86:97:ea:05:95:88:6f:
0a:72:46:4a:d6:ef:b3:d0:11:4c:54:78:fe:79:dd:03:60:93:
6b:bb:03:21:9f:ff:86:38:ab:17:28:7a:c5:0c:be:e1:74:e7:
02:1b:1f:ff:de:d5:c2:de:4c:28:41:92:0b:88:20:fb:a3:70:
22:c8:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:14 2024 by rpki-client on console-fra.rpki-client.org