Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/5f1-IBNOjW779NamWREt2b2xTzw.roa
File: 5f1-IBNOjW779NamWREt2b2xTzw.roa (raw, json)
Hash identifier: VYSWmaFm9fDp8Dx7LNqL6s1EHFITBAQ0+6fmQoQii14=
Subject key identifier: E5:FD:7E:20:13:4E:8D:6E:FB:F4:D6:A6:59:11:2D:D9:BD:B1:4F:3C
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 018CC72768B608E0DDEE999633A3B23F0C4E
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/5f1-IBNOjW779NamWREt2b2xTzw.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12576
IP address blocks: 82.192.96.0/23 maxlen: 23
82.192.104.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:68:b6:08:e0:dd:ee:99:96:33:a3:b2:3f:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5fd7e20134e8d6efbf4d6a659112dd9bdb14f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:78:8a:9f:09:c5:13:17:de:c8:27:a5:19:
39:e8:ca:e9:7b:f7:e7:2e:17:6c:b9:53:55:1c:ae:
62:ac:44:23:a2:b7:50:4f:ac:ec:9e:f9:13:49:02:
fd:31:38:a9:0e:88:94:41:cc:9a:a8:6b:c0:ca:29:
81:f2:d0:9d:34:73:82:c7:9d:31:36:76:ef:90:65:
c5:1c:15:7d:aa:9b:8d:c5:40:11:ca:f8:44:0d:4d:
b5:00:a3:fc:60:c4:db:c8:06:ed:4f:c5:db:a3:88:
84:61:fb:d6:1b:e5:6e:a1:c5:5b:4f:00:89:28:0c:
4f:e8:d1:eb:f0:68:2a:ac:66:b9:6c:cf:69:13:0e:
aa:50:57:d0:7f:5c:59:fa:f7:74:41:81:31:46:6a:
5b:92:6f:b4:45:b5:56:7f:31:48:c7:26:5c:bc:f0:
a0:b6:05:02:b4:39:d1:08:3f:3c:f0:00:0f:24:09:
0f:e1:91:84:fb:2a:cc:d1:27:6f:88:64:8d:c2:e6:
f5:52:01:0f:aa:ed:44:de:f5:26:ab:d7:a4:91:50:
cc:be:9c:b3:f7:91:4b:f8:cb:ea:60:14:cd:da:c9:
83:c5:ef:a1:18:db:7c:0f:7c:68:09:bd:d6:88:33:
b0:72:51:77:6c:42:70:bb:e5:9f:87:42:88:cc:62:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:7E:20:13:4E:8D:6E:FB:F4:D6:A6:59:11:2D:D9:BD:B1:4F:3C
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/5f1-IBNOjW779NamWREt2b2xTzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0-82.192.104.255
Signature Algorithm: sha256WithRSAEncryption
26:f5:67:c9:73:bc:7f:1d:d5:77:e9:77:72:d0:9e:ec:e0:42:
ee:9b:f9:fc:fd:29:8d:66:d3:ce:24:e2:49:bf:39:58:b8:09:
10:a0:c7:14:c2:7e:60:98:4c:cb:3e:92:11:d8:eb:a2:b1:b6:
23:b4:fa:a2:e7:6d:17:17:ae:6d:77:76:44:9c:1d:91:d6:56:
2b:1f:36:18:f1:17:25:ae:2d:09:4e:81:1f:18:c0:51:88:ed:
28:a8:0b:70:8f:fa:e9:a5:7a:ff:a4:28:ab:66:c1:e5:9a:c2:
c5:fc:a0:ff:5f:f8:e5:46:2f:cd:5a:44:71:ef:d0:3e:d6:25:
c6:1d:39:35:bc:c2:32:ad:75:fd:60:7e:e7:e3:2f:e4:b9:f9:
d8:fa:4d:3f:0d:4c:14:34:9d:26:77:86:62:4d:5b:f6:3d:8c:
f3:0f:58:8f:9f:3b:c4:32:8f:06:94:bb:5d:f3:f6:46:3d:d2:
f6:c5:21:85:ce:75:44:c1:36:1a:d5:4d:99:c4:ab:08:dc:8f:
94:8a:5b:d4:c4:53:b0:54:6f:01:a5:f7:c8:1e:bb:85:bc:31:
94:74:1b:02:5f:3b:11:62:73:a9:4e:17:d2:fa:7d:c1:8e:4d:
56:22:34:df:da:19:18:15:00:8e:53:4b:bf:f1:a3:f4:ee:e1:
1b:21:66:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:06:09 2024 by rpki-client on console-fra.rpki-client.org