Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/615rgCY8pczPM3zj-YJctvLeap8.roa
File: 615rgCY8pczPM3zj-YJctvLeap8.roa (raw, json)
Hash identifier: I7DSIN65A1r4NXWPhKEEY++YXVJ5jfAtRsulK9IwJos=
Subject key identifier: EB:5E:6B:80:26:3C:A5:CC:CF:33:7C:E3:F9:82:5C:B6:F2:DE:6A:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192CAF661396D5C0CDD882777A4DFCF0E1E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/615rgCY8pczPM3zj-YJctvLeap8.roa
Signing time: Sat 26 Oct 2024 22:33:17 +0000
ROA not before: Sat 26 Oct 2024 22:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214052
IP address blocks: 5.83.139.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ca:f6:61:39:6d:5c:0c:dd:88:27:77:a4:df:cf:0e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 26 22:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb5e6b80263ca5cccf337ce3f9825cb6f2de6a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:fd:48:8e:f8:16:d4:d8:2c:9e:77:e9:b5:
be:bc:11:21:49:c4:77:69:d6:eb:c0:e2:ba:c2:31:
66:9f:a8:39:bc:21:57:46:ed:cb:1d:42:fc:ae:74:
1a:43:86:a6:bc:a6:c3:13:a5:15:ed:b4:55:a3:b7:
d3:fb:a1:1a:2d:23:21:f5:50:77:84:bf:eb:e5:81:
f7:56:59:c1:bb:51:9c:2e:05:50:f9:b6:6b:53:9a:
c9:0f:18:9c:cf:a3:23:96:de:fe:ac:a8:26:07:f5:
76:8f:ff:d7:23:b4:09:0c:d9:56:11:35:a1:44:59:
88:68:cf:77:1c:2d:51:71:45:44:73:75:b2:72:b0:
e2:fd:52:f7:4f:ba:8f:ae:ba:30:56:3d:db:9b:1a:
62:69:aa:25:cb:25:f8:39:2b:ff:5b:67:4d:dc:25:
f2:eb:06:09:10:1f:b3:c8:2e:95:b5:d0:6e:e5:4b:
8d:25:68:cf:59:c4:e4:34:1a:50:ad:b3:32:75:46:
7d:95:fa:12:ba:75:cd:88:37:8f:90:fb:fa:69:33:
90:9a:f8:8d:24:47:4a:d8:6a:65:fd:12:83:23:44:
0a:74:a5:48:86:27:6f:96:26:f6:58:54:d3:95:67:
ec:66:fd:48:60:89:fb:95:30:8d:54:3a:c2:52:97:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:6B:80:26:3C:A5:CC:CF:33:7C:E3:F9:82:5C:B6:F2:DE:6A:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/615rgCY8pczPM3zj-YJctvLeap8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
77.90.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5b:c0:79:e0:06:29:24:c8:5a:2e:e7:78:a7:5b:4e:a2:bb:
e4:0b:dd:54:95:19:b5:3c:a7:5a:73:99:1a:53:63:1d:77:76:
af:cf:84:75:f2:02:e9:9f:8c:96:d9:91:07:b5:57:4f:9f:8b:
27:4d:77:88:11:4a:6f:49:47:42:a4:cd:7e:bd:f9:ba:3e:0a:
ad:4c:d8:12:c5:12:4d:7d:49:8d:84:83:61:06:14:f7:ab:56:
b5:03:cb:da:75:86:de:f2:e7:5f:2a:27:48:8c:68:3e:6b:ed:
fb:48:7f:29:ce:7b:32:04:54:eb:aa:e8:6f:56:67:f3:13:7a:
07:f2:83:0a:62:ed:5a:02:ac:bd:6f:6b:30:b4:0e:59:b1:1c:
32:80:38:df:93:e7:94:6b:0d:60:49:e5:c7:b2:cd:82:77:b0:
06:e3:fd:6e:38:bc:a3:52:dc:3f:d7:0b:74:a7:37:51:58:9d:
53:d6:fb:d5:ef:86:51:0f:50:a6:10:37:c2:13:38:19:c3:8e:
47:03:c6:74:a1:d2:13:62:87:70:c4:bf:de:3a:37:0d:a5:bf:
8d:9a:73:4c:2e:41:f0:f7:a3:13:76:e9:df:cc:bc:8e:83:23:
6a:87:0c:20:7f:cb:80:ac:a0:8f:48:43:9c:d8:30:6a:68:32:
7f:a0:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org