Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/5HHyxPuAEva2-tXaHrkQYdbC4go.roa
File: 5HHyxPuAEva2-tXaHrkQYdbC4go.roa (raw, json)
Hash identifier: kPhyvAjPb2Or3krxbvBeIoz0WoG+VT7DuYOfQ/TnWJg=
Subject key identifier: E4:71:F2:C4:FB:80:12:F6:B6:FA:D5:DA:1E:B9:10:61:D6:C2:E2:0A
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 018F0B389594C80739860E4D253ED554F638
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/5HHyxPuAEva2-tXaHrkQYdbC4go.roa
Signing time: Tue 23 Apr 2024 13:50:08 +0000
ROA not before: Tue 23 Apr 2024 13:50:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12130
IP address blocks: 81.201.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:38:95:94:c8:07:39:86:0e:4d:25:3e:d5:54:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Apr 23 13:50:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e471f2c4fb8012f6b6fad5da1eb91061d6c2e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:bb:06:fc:2a:11:42:9a:3d:51:9a:63:9b:
ae:b7:48:f6:fa:3b:b5:f2:54:9b:c9:f8:4d:9d:3a:
b7:a5:b1:0b:55:b3:f8:ab:e5:3d:8b:bd:7e:fc:d5:
75:ee:65:7d:ba:8b:ba:f5:13:b6:e8:a1:05:a7:a5:
6b:9f:8b:74:7e:b5:b2:51:64:cb:f0:d4:5e:99:e2:
51:9b:03:0a:ce:dd:0a:31:3e:f1:87:ea:bb:4f:84:
87:ba:d5:60:5e:ae:7a:92:c3:61:43:37:e9:c1:f5:
01:1f:d9:6f:60:94:46:0c:2d:da:84:f9:3c:28:f0:
82:a8:7c:53:b8:d6:bc:9a:58:b0:91:2b:9d:91:c6:
c9:66:d1:11:81:4c:1e:f5:fd:05:45:fc:c4:39:ef:
e3:62:80:b3:cf:d4:13:d8:12:c9:38:81:3d:24:db:
c4:e5:f7:4f:bf:b1:f2:67:4e:36:a1:2b:40:80:bb:
4e:2f:25:51:e0:43:5c:78:84:70:87:79:53:fe:b6:
8e:7e:6a:c8:bf:6e:4c:42:eb:bb:a1:78:1a:72:be:
85:a9:e3:21:bf:83:53:59:27:f2:28:84:6b:a5:99:
e8:4d:66:e3:47:4f:75:21:fd:6b:72:19:81:1e:61:
b5:b8:9f:d5:e5:4c:76:33:f7:d1:9c:e7:56:3b:ca:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:F2:C4:FB:80:12:F6:B6:FA:D5:DA:1E:B9:10:61:D6:C2:E2:0A
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/5HHyxPuAEva2-tXaHrkQYdbC4go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.80.0/20
Signature Algorithm: sha256WithRSAEncryption
32:db:1d:d5:1d:80:12:8c:17:f0:c9:a9:4c:3d:26:79:9b:3f:
bb:81:7b:7c:9a:c3:8e:8d:ed:f0:da:25:3b:62:04:64:a6:9e:
fa:d7:56:9b:05:06:0d:c5:cd:92:ba:23:45:f4:cc:dd:53:64:
93:8b:f9:8e:34:d4:b4:b2:1d:90:21:4d:f4:bb:cc:6e:02:cb:
f6:1a:18:df:3e:f2:c7:30:0b:e9:2e:8c:7d:e2:af:cb:37:5a:
bb:53:3e:aa:f1:34:75:db:3a:47:cb:d0:f6:13:7a:49:1f:6b:
ff:ba:fe:78:c7:e9:1d:28:f6:b7:9b:70:3d:0e:60:bc:b9:9e:
b1:57:cf:93:09:04:74:d8:7a:f8:1d:bb:84:87:85:77:18:f5:
dd:bf:64:bb:bf:10:8b:fb:57:65:f0:1c:a1:2f:b4:dc:98:95:
e9:73:ae:c6:9d:b6:16:31:f7:5e:c9:92:c7:86:fe:d8:7e:c1:
40:bd:9d:ba:ed:88:97:d2:9b:a5:ab:49:ba:b5:d4:ca:63:db:
aa:17:13:b4:69:6d:77:e5:48:5b:90:4d:98:38:38:16:35:0d:
b8:22:c2:ab:53:63:9a:84:f8:e2:a4:14:d3:5e:e9:18:c0:49:
ba:bf:6a:65:19:1c:76:c5:d4:f1:88:4f:23:c8:7f:2b:ef:e4:
cf:a8:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:53:19 2024 by rpki-client on console-ams.rpki-client.org