Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/g12LXOVbANatJ3iQl3bDX_O2qOs.roa
File: g12LXOVbANatJ3iQl3bDX_O2qOs.roa (raw, json)
Hash identifier: DwMjhqUEjsCYexAtwud4d5zcFSTGmvQeG/CMsVbol6E=
Subject key identifier: 83:5D:8B:5C:E5:5B:00:D6:AD:27:78:90:97:76:C3:5F:F3:B6:A8:EB
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018CC871312AF6D3BDA25456FD8FDDBD942B
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/g12LXOVbANatJ3iQl3bDX_O2qOs.roa
Signing time: Tue 02 Jan 2024 04:31:50 +0000
ROA not before: Tue 02 Jan 2024 04:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56844
IP address blocks: 5.133.70.0/24 maxlen: 24
5.133.68.0/23 maxlen: 23
5.133.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:31:2a:f6:d3:bd:a2:54:56:fd:8f:dd:bd:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 04:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=835d8b5ce55b00d6ad2778909776c35ff3b6a8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:35:ec:e9:cb:6a:65:39:1d:46:97:b9:8c:
d1:bf:3f:e5:c5:f7:85:f5:6d:ad:79:8f:9c:44:9b:
f3:08:de:af:07:dc:98:0d:ad:a7:97:ce:b9:8c:e9:
e0:97:aa:9c:81:02:29:24:3f:48:a5:a8:29:e5:83:
86:12:97:38:a5:da:51:4e:7d:55:c6:9d:5d:ad:6c:
82:9e:2e:5e:a3:83:5d:44:34:85:7a:15:e9:ba:ce:
fa:02:58:42:2e:82:ee:86:e1:9c:3b:fb:9b:24:77:
b7:57:f9:39:2c:5f:e3:5f:e9:8a:a5:86:da:ab:f0:
34:b6:59:ce:74:a2:ae:9b:c7:6b:c6:02:9b:f2:d5:
a5:fa:4b:f7:ca:1b:41:00:75:ae:cc:7f:10:04:4a:
8e:85:d6:fd:f9:4e:47:6b:31:69:54:5e:39:0b:80:
2e:6c:4e:ed:94:89:1f:f1:03:56:4e:3d:46:e5:73:
6e:ae:3e:59:bd:b4:ef:fa:3c:af:45:d1:7d:22:54:
36:43:07:0f:0e:9d:ec:f4:7e:0a:4f:38:f9:66:92:
05:e2:cb:2c:09:4f:84:15:2d:5f:49:fe:d8:bc:df:
76:bc:60:4c:04:69:cf:59:ee:77:1e:9c:f0:72:ed:
1e:e8:50:ff:c5:17:dc:03:5c:21:d2:2e:e0:60:90:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:8B:5C:E5:5B:00:D6:AD:27:78:90:97:76:C3:5F:F3:B6:A8:EB
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/g12LXOVbANatJ3iQl3bDX_O2qOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.68.0-5.133.70.255
Signature Algorithm: sha256WithRSAEncryption
6e:1f:81:a3:8e:d5:be:9f:a2:96:da:26:fc:05:7f:84:72:8c:
4c:f3:01:6b:66:19:58:9b:20:fb:4d:2b:d8:d1:71:a0:04:9b:
1f:15:d9:65:2d:1f:2b:ba:83:1e:cc:33:c7:ee:7e:04:89:43:
bb:dc:69:5a:07:62:f2:a7:e3:d8:35:c2:ea:b6:4c:d1:b3:27:
18:88:0c:9d:48:ee:25:60:ff:1e:0c:1e:a7:58:1d:b8:f7:4e:
5c:bd:d9:7d:83:a3:1a:71:cd:49:47:fa:3a:ed:6d:66:5f:bb:
b1:15:ea:10:56:4c:a7:fd:ea:b7:05:c6:95:44:0b:3f:bf:20:
29:b1:37:2d:60:32:ce:27:a0:01:c5:8b:d9:71:a3:55:50:6b:
f5:7d:57:f7:5c:3c:92:c5:d7:b2:ef:d2:c8:71:cc:fb:91:c2:
99:76:bd:c6:b1:ba:09:42:07:f3:ea:cd:06:bf:4b:62:95:e1:
e9:a6:ed:f2:8d:4a:d9:91:a9:46:8c:b0:84:39:80:3e:d2:06:
81:c5:0c:f0:b7:27:86:54:07:3a:1c:4d:33:80:9e:e0:2c:a3:
17:b9:9e:21:38:0a:2d:63:8a:80:43:49:d8:d8:4e:a7:f3:c3:
28:8e:21:65:2c:0b:42:a9:ea:bc:28:be:16:b9:17:b3:be:8c:
a7:16:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:25:12 2024 by rpki-client on console-fra.rpki-client.org