Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/5msCx75Q97E5QS4dEsP0whJjm84.roa
File: 5msCx75Q97E5QS4dEsP0whJjm84.roa (raw, json)
Hash identifier: yXs0xZDNe2SbitYiys0ieBIsMo2vonWcSYMG7tK1NnA=
Subject key identifier: E6:6B:02:C7:BE:50:F7:B1:39:41:2E:1D:12:C3:F4:C2:12:63:9B:CE
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018EBE9D6F8F3C1AF4D17091C237468EE0BA
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/5msCx75Q97E5QS4dEsP0whJjm84.roa
Signing time: Mon 08 Apr 2024 16:49:32 +0000
ROA not before: Mon 08 Apr 2024 16:49:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39877
IP address blocks: 188.214.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:9d:6f:8f:3c:1a:f4:d1:70:91:c2:37:46:8e:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Apr 8 16:49:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e66b02c7be50f7b139412e1d12c3f4c212639bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:63:bc:f9:6c:4c:69:0f:1b:06:4e:72:42:
2e:87:a0:e9:2c:d5:09:0d:90:50:7b:15:55:38:7c:
29:83:01:e1:b2:97:bf:d1:93:7e:46:71:61:a2:7a:
63:9b:9c:82:c2:cc:b8:f5:42:f3:e2:f2:66:5c:5b:
5a:70:f9:e7:8b:d6:c4:a6:8a:0d:57:d1:c8:78:c7:
6e:28:6c:a8:d3:43:f0:d4:83:9d:9c:86:b7:03:6f:
c8:37:0c:dc:7d:7d:9b:af:69:20:4a:54:d4:ea:e9:
9e:e2:23:01:5a:d0:53:76:99:95:d4:9c:ee:f2:bd:
bf:fd:be:9b:12:6d:33:6a:04:23:b5:b7:7f:a5:1d:
5a:42:3c:34:eb:23:f8:30:d8:e4:ec:32:69:ce:35:
5f:74:bd:6a:0c:b9:55:b7:7c:dc:ef:77:78:07:62:
1b:1a:22:2c:0e:9c:2f:6f:a7:97:5a:bd:fc:44:fb:
de:02:e1:13:6c:41:8d:5a:d8:21:94:88:7b:33:0a:
2d:91:0f:57:3e:49:08:81:5e:04:f2:ad:aa:15:d2:
6b:80:6b:7a:23:f3:07:5d:71:39:ac:54:b2:4f:24:
1c:f3:5e:2b:5d:3b:5d:a5:64:09:d8:43:4b:69:50:
6c:6b:9d:eb:07:bb:18:e2:df:32:7e:52:ab:0e:d8:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:02:C7:BE:50:F7:B1:39:41:2E:1D:12:C3:F4:C2:12:63:9B:CE
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/5msCx75Q97E5QS4dEsP0whJjm84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e4:ca:22:51:4e:96:88:73:e0:c6:cb:b5:6e:1d:30:ad:68:
43:0c:0d:c2:b0:d5:a2:3a:a7:17:de:0f:28:71:90:3b:75:bc:
37:bb:7a:0e:68:57:32:6b:a9:4e:d1:b7:33:14:9d:bb:21:80:
e0:20:f7:84:81:25:30:7e:27:ca:3e:ed:f2:77:5e:71:ab:7d:
c6:a0:9c:66:c2:bc:be:09:73:e2:31:26:f9:50:7e:dc:1b:85:
8b:e4:54:a2:b1:70:bf:fd:e8:d4:64:14:ad:6a:e2:4a:15:6f:
c0:5c:f9:9a:03:99:f7:4f:ef:c5:0a:60:c2:1a:9c:61:64:c6:
a1:e6:8d:7a:2e:70:7d:a6:9a:1e:bf:bb:d5:73:69:dd:99:e2:
aa:c3:b3:93:96:9b:fa:7e:37:64:ee:e5:7b:6b:2d:0e:7e:88:
22:58:6b:a7:f4:87:15:0e:cc:3b:9a:36:56:d5:e6:21:3a:df:
1e:81:68:72:b3:7e:84:c3:fd:d3:8a:ac:53:9e:cd:e4:dd:7e:
78:62:77:de:0d:49:20:62:fa:f0:81:4d:37:dc:6d:14:47:63:
b0:08:8e:7e:88:5b:41:19:fa:60:ab:f2:b5:ae:69:5e:da:f9:
06:6d:d9:32:2d:b1:b4:2d:5a:a2:b1:d1:1b:0b:67:05:0f:63:
df:4c:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:24:05 2024 by rpki-client on console-fra.rpki-client.org