Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/I5UjJWNzL-1F3RPSj3VSh7LUYvg.roa
File: I5UjJWNzL-1F3RPSj3VSh7LUYvg.roa (raw, json)
Hash identifier: 8OocOTUSG7SC3ULn+bhcYwOBi64Mz4b6KgcWOtMnqwA=
Subject key identifier: 23:95:23:25:63:73:2F:ED:45:DD:13:D2:8F:75:52:87:B2:D4:62:F8
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 0190E40310F6C42607A5E171F598D0239292
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/I5UjJWNzL-1F3RPSj3VSh7LUYvg.roa
Signing time: Wed 24 Jul 2024 09:12:04 +0000
ROA not before: Wed 24 Jul 2024 09:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 185.28.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:03:10:f6:c4:26:07:a5:e1:71:f5:98:d0:23:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Jul 24 09:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2395232563732fed45dd13d28f755287b2d462f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:f1:e9:89:49:8a:b7:18:5b:88:3f:22:8a:
d9:2d:02:ec:71:ab:0b:44:c1:6c:f5:4e:0e:a8:da:
6c:79:2f:5e:e2:5b:09:46:86:20:91:e3:16:ac:4b:
74:51:92:81:22:a4:78:1c:c7:4a:2e:b9:7a:27:f6:
bf:c0:80:9d:2f:08:50:d9:21:c7:2b:d6:a8:e9:6a:
7f:c0:d2:b8:69:ad:90:72:5b:5e:cc:e9:89:c3:02:
9c:a7:86:75:0a:2d:ec:7c:b9:81:da:ba:0d:8e:70:
77:ad:4f:d7:92:ad:36:5e:11:70:30:d2:41:51:34:
13:e6:4f:7b:01:5a:d4:c2:de:02:18:c2:2e:0a:91:
cd:7f:13:1b:c0:09:a7:f2:91:80:c1:19:5e:6c:dd:
cf:45:4a:22:0d:3a:86:aa:a6:2f:67:95:85:40:67:
ed:81:7e:67:9d:a2:e9:37:72:68:14:79:72:d6:1f:
ac:0a:cd:10:45:8d:08:c3:dd:28:d3:3c:85:7f:c7:
be:21:67:6c:9f:53:91:e7:f6:a3:8f:08:19:01:03:
20:5a:aa:5b:a2:85:4e:36:05:8f:13:21:97:b2:e5:
bc:85:aa:0c:82:cb:c6:34:14:b3:d5:80:e0:5b:3b:
98:e9:05:fc:1e:c0:ea:8a:7d:6a:50:45:55:57:de:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:23:25:63:73:2F:ED:45:DD:13:D2:8F:75:52:87:B2:D4:62:F8
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/I5UjJWNzL-1F3RPSj3VSh7LUYvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.119.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b9:83:7d:1d:f7:ed:97:a9:e5:f5:fa:0c:b6:45:35:46:f0:
34:6e:ed:8b:72:38:9f:87:8c:1d:e5:9d:77:40:66:36:09:14:
2f:84:d1:29:f3:5e:bc:b3:01:41:84:8d:5c:68:c3:6a:db:e5:
cd:b6:7f:b1:df:fd:7c:bf:45:3f:88:72:92:d2:4d:89:5a:de:
c4:53:c3:6b:78:a8:3f:3b:77:2b:e9:3e:81:42:3d:cf:ff:ba:
44:09:c2:09:02:0c:a5:21:0f:71:fc:d2:31:c8:da:51:1c:3f:
ec:a0:f7:e4:7e:39:78:8c:f8:eb:01:ae:b7:c4:bb:3c:35:3b:
f3:32:66:56:c6:cf:c7:01:81:04:89:cd:5c:50:d3:a3:22:7e:
06:95:fa:c7:1e:16:cf:ab:48:09:05:83:57:4f:01:cd:72:4b:
96:a8:e3:4f:c6:70:b2:0a:01:8f:42:8c:56:76:d6:eb:4c:40:
20:77:c6:bd:f3:30:a8:6e:6c:bb:ec:3b:cd:75:dd:6e:06:a1:
7b:19:12:8d:76:5f:8c:49:29:23:3b:5b:ef:c7:ee:2d:ae:d1:
62:92:53:53:d2:c0:1a:9e:a3:e0:28:37:b7:72:9c:86:7f:76:
69:d1:af:8e:44:5b:6f:ea:24:e8:9d:50:3f:11:f6:a8:55:98:
1d:83:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:35 2024 by rpki-client on console-fra.rpki-client.org