Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5_nL8M2Wg7xr3ppG_LZgU1-TZ_A.roa
File: 5_nL8M2Wg7xr3ppG_LZgU1-TZ_A.roa (raw, json)
Hash identifier: YJdb8km/i3GGoFyhp2XiGnBv/v5IZGl7NjkmTyE9CfQ=
Subject key identifier: E7:F9:CB:F0:CD:96:83:BC:6B:DE:9A:46:FC:B6:60:53:5F:93:67:F0
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018F5AD4F5554F5B8C303CF120A7980D8636
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5_nL8M2Wg7xr3ppG_LZgU1-TZ_A.roa
Signing time: Thu 09 May 2024 00:50:56 +0000
ROA not before: Thu 09 May 2024 00:50:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152586
IP address blocks: 178.239.174.0/24 maxlen: 24
193.176.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5a:d4:f5:55:4f:5b:8c:30:3c:f1:20:a7:98:0d:86:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: May 9 00:50:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f9cbf0cd9683bc6bde9a46fcb660535f9367f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b1:1e:90:48:1d:1b:3f:ed:bd:f1:6e:13:da:
45:df:42:19:85:b1:a9:b0:a5:1f:3e:92:cf:a9:34:
e8:bf:42:30:35:e4:c7:54:a3:f9:6c:fe:91:3e:8d:
36:d5:8e:5d:2f:96:9f:3a:15:a8:44:39:15:6a:81:
be:81:be:73:42:16:67:d5:c9:92:18:da:93:c5:d4:
be:00:d6:d9:c2:dd:bf:e6:b2:63:23:a3:3a:41:b4:
fe:91:40:98:ae:9d:9f:ac:c5:81:dc:c5:c9:a5:13:
24:32:eb:2b:66:48:1f:5c:14:8c:72:dc:bc:c2:fb:
f4:06:b7:3e:9c:5c:d6:14:46:20:69:fc:db:8b:3b:
61:da:d2:f9:b3:d8:8d:24:c5:c7:69:fa:c7:d5:2b:
fa:b3:21:2a:7f:c7:ef:e7:b6:0b:e5:ca:fa:1c:fe:
b0:70:6c:81:5a:a7:13:8d:f4:e1:ca:1f:aa:80:bd:
aa:5d:17:cc:ca:a9:f2:b4:57:1a:ec:89:7a:3d:fc:
1c:c2:69:a0:6d:c2:e5:47:02:ff:69:b8:6d:ec:36:
80:23:e1:c3:c4:fe:ff:10:70:54:1b:ff:a4:46:a2:
d3:bf:77:7f:47:52:a3:7e:d5:15:8e:62:62:39:d7:
10:36:49:2d:b1:9f:08:e0:03:6d:32:ed:dc:86:05:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F9:CB:F0:CD:96:83:BC:6B:DE:9A:46:FC:B6:60:53:5F:93:67:F0
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/5_nL8M2Wg7xr3ppG_LZgU1-TZ_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.174.0/24
193.176.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:79:8b:75:c9:22:08:13:1d:26:02:a2:2a:4b:71:b8:68:61:
f2:8d:1f:86:bd:8b:b7:5c:72:1c:1c:3e:7d:90:ae:72:3b:6e:
fd:18:4b:32:19:cc:25:32:0f:3e:1e:72:e2:7e:32:94:b9:c3:
80:80:68:f9:c8:31:55:97:bc:c9:09:5d:cf:0b:a1:08:1c:74:
e0:e1:23:8d:3d:36:52:21:3e:a8:fc:b4:68:f9:87:46:86:2c:
e3:71:2b:0b:5e:d3:58:48:10:b9:bd:32:1d:9f:ff:e1:04:a1:
b3:7f:81:4e:1a:21:87:3f:ea:cc:f9:ce:52:86:8d:b1:67:e6:
8b:29:18:66:3e:9f:1b:5a:b6:e1:cb:56:ce:91:c7:10:3b:ad:
17:43:0f:35:a0:98:fd:06:45:e1:76:1e:53:be:af:95:d1:15:
35:d3:f5:97:8b:f1:d5:5a:db:ae:f7:81:65:90:6b:f0:1a:5d:
31:14:07:76:4c:93:66:c1:71:ec:47:65:b4:e8:f2:72:ec:0c:
4a:06:41:6c:58:45:71:63:1d:59:b1:8a:3e:61:9f:66:79:dc:
d6:b8:71:3d:ff:d0:b5:60:9a:b2:85:14:ac:92:b8:17:8a:df:
54:71:25:03:08:2d:e2:a4:c8:ba:89:cc:4a:49:04:4e:9e:f4:
d2:ff:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:08:43 2024 by rpki-client on console-fra.rpki-client.org