Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gv-l5QtWqnzE5DdzQf7Y1V3zvf0.roa
File: Gv-l5QtWqnzE5DdzQf7Y1V3zvf0.roa (raw, json)
Hash identifier: pNDBCtbMZ9nVfqxwovm5PurPbFwqR4+bAKkhHHsIhe4=
Subject key identifier: 1A:FF:A5:E5:0B:56:AA:7C:C4:E4:37:73:41:FE:D8:D5:5D:F3:BD:FD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01930337633E3E5F875C7C8C208EA7FF5901
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gv-l5QtWqnzE5DdzQf7Y1V3zvf0.roa
Signing time: Wed 06 Nov 2024 20:43:01 +0000
ROA not before: Wed 06 Nov 2024 20:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213915
IP address blocks: 5.83.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:37:63:3e:3e:5f:87:5c:7c:8c:20:8e:a7:ff:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 6 20:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1affa5e50b56aa7cc4e4377341fed8d55df3bdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:ba:d8:7d:5a:46:9c:53:23:a7:7d:e4:fa:
2d:5e:ed:f8:85:0f:75:c2:3d:97:a2:b1:c1:26:56:
74:c2:ca:70:e5:4b:e0:58:66:af:f6:16:d6:3d:42:
cc:0a:6d:6d:ba:53:72:06:0d:40:e3:74:43:b8:07:
6d:24:02:93:20:ee:38:a4:c0:61:e4:8f:92:cb:e1:
5d:64:da:52:42:cb:a3:15:24:77:09:0e:e5:f2:e9:
e4:65:7b:9b:26:37:e0:ed:85:f2:2b:15:88:be:39:
2e:7a:0c:cf:c9:55:fd:85:86:c1:a4:17:3f:64:67:
52:ce:88:cd:81:55:93:70:1e:4a:7d:84:68:e2:69:
6c:69:b8:9d:b5:60:9a:d5:1f:8b:93:6f:9f:d6:c0:
77:4c:c1:68:f4:57:56:92:b5:20:be:cd:84:0c:9b:
1e:5a:08:f6:c0:25:cd:57:36:6b:2f:6d:0c:76:19:
67:4a:8e:6c:08:1c:5d:5d:b2:e1:92:8f:1b:f1:f9:
e0:50:ef:ac:df:ce:df:e9:7b:32:8f:39:51:9b:1e:
98:a5:b9:72:16:96:15:70:32:99:0d:85:67:e2:26:
a7:d5:db:c5:b0:80:7c:eb:fb:58:76:7d:25:93:8e:
68:3b:94:85:3e:79:82:72:93:21:b7:f5:bd:5a:19:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:A5:E5:0B:56:AA:7C:C4:E4:37:73:41:FE:D8:D5:5D:F3:BD:FD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Gv-l5QtWqnzE5DdzQf7Y1V3zvf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
Signature Algorithm: sha256WithRSAEncryption
12:df:62:7c:04:c4:9e:15:de:97:ad:25:a4:21:4f:ea:bd:71:
20:3e:2c:84:24:d8:7d:2c:24:58:8f:74:6e:b3:5f:1e:3e:1f:
1c:2f:b9:09:14:01:9a:7b:02:1f:a5:2b:53:53:0f:06:46:fe:
e3:8c:d7:5c:74:c5:ba:98:2d:c0:d3:db:bb:d5:fe:46:b7:18:
a5:32:e7:43:1f:6e:68:c4:07:5f:b3:98:1b:e2:ef:35:df:61:
5d:29:2e:14:c4:9e:42:4a:45:5d:5c:26:4f:78:c6:df:de:1a:
50:31:bf:95:b9:5b:36:18:bc:df:13:79:8a:91:e6:c0:d1:03:
7a:7a:77:cc:ba:91:d3:95:eb:1a:2c:b7:7b:01:e1:d8:e4:bc:
e7:a4:5e:42:03:d9:fb:d6:d4:c4:ba:f3:ba:b6:be:1a:01:2b:
0a:c6:de:2c:e7:4a:a1:26:63:17:d4:1c:c2:0b:09:8c:4e:68:
d7:1d:21:3f:ef:f2:e4:18:82:0e:19:89:14:da:d4:cf:c7:80:
fe:5a:ed:a9:57:79:2c:cc:3c:60:56:3d:53:09:da:50:5d:ad:
92:04:7e:f9:87:3b:93:23:e3:f5:8f:cd:42:56:95:b8:c9:7e:
79:d8:2a:67:7c:92:4e:8e:6e:b7:9c:66:20:f3:d8:66:06:f0:
5d:73:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org