Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/G5Xr-fEFuw6qX_ZzJ1P0OIAHDXo.roa
File: G5Xr-fEFuw6qX_ZzJ1P0OIAHDXo.roa (raw, json)
Hash identifier: AA4CQqIDxZ/EAlmYRDfJ3Ue90OXWrWKy7S7JeI9HFB4=
Subject key identifier: 1B:95:EB:F9:F1:05:BB:0E:AA:5F:F6:73:27:53:F4:38:80:07:0D:7A
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018F6963271885455CA6A7F5D9C3B069D811
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/G5Xr-fEFuw6qX_ZzJ1P0OIAHDXo.roa
Signing time: Sat 11 May 2024 20:40:56 +0000
ROA not before: Sat 11 May 2024 20:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 45.135.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:69:63:27:18:85:45:5c:a6:a7:f5:d9:c3:b0:69:d8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: May 11 20:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b95ebf9f105bb0eaa5ff6732753f43880070d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:96:f1:81:ee:09:77:71:54:6a:aa:33:39:
bb:ff:b6:b1:4c:0e:cb:67:79:86:52:bd:a2:0a:9e:
e0:46:98:c8:08:8f:58:94:aa:5b:5e:d0:01:08:37:
f1:dd:5e:85:0a:90:c2:83:68:60:a5:83:36:2e:22:
78:1b:30:c4:c8:16:8b:f2:37:e9:6e:06:c1:2e:fb:
4f:10:a2:01:be:c0:44:95:09:43:fe:61:b7:a6:6b:
e3:da:ee:85:e6:00:fc:86:d1:fb:3c:a7:bc:0b:96:
e5:0d:62:15:f9:99:de:b9:61:2c:1b:c9:e0:66:b1:
6e:52:20:6d:5d:34:dd:8e:3c:00:e7:dc:6c:51:20:
64:3c:6b:ab:71:99:42:ee:8d:84:88:a5:fa:78:0d:
76:2b:11:b1:23:0b:df:d4:46:1f:44:75:06:4c:61:
c3:58:db:7a:ba:65:fa:fc:07:21:07:55:10:9d:d7:
4c:cd:90:f0:8f:d5:df:a1:70:31:af:78:08:f3:50:
b4:56:d7:3d:f9:16:12:f4:d4:c4:b9:34:78:02:3d:
c3:cc:68:68:7e:c1:52:87:df:4d:fb:a7:bc:3a:fd:
e4:cc:b7:2a:7b:ed:f4:f1:99:02:89:ed:3c:bf:60:
29:a2:13:b6:d3:f8:93:b2:33:63:9f:ea:a0:92:60:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:EB:F9:F1:05:BB:0E:AA:5F:F6:73:27:53:F4:38:80:07:0D:7A
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/G5Xr-fEFuw6qX_ZzJ1P0OIAHDXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.139.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c9:0e:95:82:ab:28:61:04:d6:41:ed:07:be:a0:d6:52:51:
f1:21:24:15:5a:e9:2e:b6:d4:30:e0:ad:c5:e4:59:16:8b:46:
1f:04:f5:89:1f:89:00:bf:3d:54:71:86:90:48:96:3f:f1:b9:
93:4a:e6:c1:73:d1:73:86:44:8d:bc:04:1d:e4:aa:45:e2:db:
70:92:60:e1:76:b2:0a:94:49:6d:99:89:aa:fe:e0:ad:a2:63:
8d:ed:05:6a:25:e4:e8:4a:0f:a4:e4:5e:cc:d5:da:96:36:e4:
a6:c5:dc:73:61:20:cf:bd:d3:19:f2:e9:8a:9d:66:5e:15:e7:
18:4a:29:ba:09:96:75:c7:5a:03:bb:3a:89:58:84:ff:11:fa:
e5:9e:12:f3:6d:15:b0:b8:0c:a0:41:4f:93:a3:b1:a0:97:c4:
51:08:4e:ed:3f:56:56:c7:60:95:c4:99:96:3a:ff:f5:ad:0e:
84:8f:a0:5f:15:36:ed:fd:ea:fc:fc:c4:68:d8:5e:86:35:c9:
ce:79:54:d5:55:e1:fe:c2:fe:cd:e1:2a:48:f6:d5:4f:ec:d8:
c7:53:5f:aa:d8:7b:fd:ad:f1:c9:cf:1d:c9:dc:18:75:da:d2:
82:ea:a5:61:a4:e3:4c:08:f7:8f:40:a2:be:9e:e9:6c:8a:1e:
b8:c2:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:57:03 2024 by rpki-client on console-ams.rpki-client.org