Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5PEKR9pLMcmTc-ncxigygBnbJRk.roa
File: 5PEKR9pLMcmTc-ncxigygBnbJRk.roa (raw, json)
Hash identifier: +v6xjlsDn/zKLDemkQazAMOHXo3Te8jTTF4siPAWhRo=
Subject key identifier: E4:F1:0A:47:DA:4B:31:C9:93:73:E9:DC:C6:28:32:80:19:DB:25:19
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC50119472BB1BBB12DD72A6E44D0986D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5PEKR9pLMcmTc-ncxigygBnbJRk.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 45.154.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:47:2b:b1:bb:b1:2d:d7:2a:6e:44:d0:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f10a47da4b31c99373e9dcc628328019db2519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:dc:04:a2:fd:dc:e7:31:42:84:64:ba:df:
22:63:b4:56:50:d4:1f:71:f9:89:7b:24:46:fe:47:
96:42:82:f2:67:64:e7:8d:f5:7a:f6:a3:8c:92:70:
e4:04:9a:46:99:76:ae:f4:55:d6:7b:f4:48:d8:6b:
4b:e5:a9:5a:3a:ae:bd:0b:51:7b:e3:f1:a0:ab:5b:
8d:89:e9:c4:d6:d7:8d:10:e3:c5:63:08:23:8f:ae:
9e:a9:2e:6b:96:34:e0:6b:87:03:d8:e4:05:1c:88:
3a:4c:1d:88:16:d2:52:9d:3f:fb:12:d4:e2:ed:91:
f1:87:8f:c8:43:e1:77:08:9a:ad:05:86:c4:0a:9f:
e7:7a:49:76:8e:ce:7c:77:73:cc:2e:1e:a0:d4:bd:
df:d9:af:84:bd:26:56:52:d9:c3:c2:e8:4b:74:e6:
61:14:62:4c:43:55:69:dc:71:8a:fb:93:f4:06:63:
cb:b4:8d:b9:96:fd:0c:86:29:cc:28:b3:79:b0:48:
8e:92:83:5c:6b:33:d3:52:0a:1f:1b:42:5b:ec:82:
78:f4:26:07:ef:27:54:ab:e9:b9:6b:e6:f5:de:c2:
3f:ee:64:31:ef:e1:41:c6:7d:da:37:7f:5b:5e:9a:
3b:29:48:8f:0d:5d:a1:10:b8:09:68:48:f0:28:67:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:0A:47:DA:4B:31:C9:93:73:E9:DC:C6:28:32:80:19:DB:25:19
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5PEKR9pLMcmTc-ncxigygBnbJRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.236.0/24
Signature Algorithm: sha256WithRSAEncryption
50:80:ee:12:fc:6c:fd:46:8f:ac:c0:52:57:c8:ef:77:b3:d0:
29:43:54:22:0a:f6:7a:d7:9e:7a:c9:8f:58:aa:17:34:1e:7c:
d6:8f:8e:66:52:0e:93:58:21:09:e1:81:dc:de:c6:1d:62:23:
ab:98:84:88:4c:12:7c:40:f1:68:ce:6e:02:61:66:3b:42:60:
74:59:bf:bc:80:2e:32:ac:d8:e7:a1:25:fa:13:3a:af:41:86:
e1:f9:ea:e6:3c:62:97:94:18:b1:da:8e:fa:ff:99:50:d4:ba:
65:66:c2:44:ca:fc:91:1c:8a:a7:cf:06:d1:1d:f5:b6:ab:05:
69:ce:73:cc:a8:21:f8:55:81:17:9e:79:af:dc:6c:b3:2d:87:
d7:bd:45:85:b7:e1:25:b7:6a:43:95:9e:7f:e2:1f:e1:1b:3f:
8a:e2:d4:84:2c:4f:b0:49:99:94:9c:cf:6b:27:87:bc:ef:da:
a1:0e:55:09:86:8d:00:1d:8e:f0:38:42:8e:ab:a1:db:1c:05:
ff:44:49:55:72:9d:1a:a1:30:db:aa:00:57:88:f5:6b:62:95:
5f:d3:be:98:58:5d:db:74:16:57:20:92:0a:3c:bb:71:9b:c8:
cd:17:ca:5c:07:11:38:9d:ce:10:73:ad:bc:82:c0:a9:22:60:
60:ab:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:36:49 2024 by rpki-client on console-ams.rpki-client.org