Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGI509_0CWiYMHe-Wm3e34-iwec.roa
File: cGI509_0CWiYMHe-Wm3e34-iwec.roa (raw, json)
Hash identifier: ShCr1NhMHY5EuVgxaBUqRGTaPPKrebW2R31dPjHEqeE=
Subject key identifier: 70:62:39:D3:DF:F4:09:68:98:30:77:BE:5A:6D:DE:DF:8F:A2:C1:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500C104524B7AF4A86F0F0508285D2A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGI509_0CWiYMHe-Wm3e34-iwec.roa
Signing time: Mon 01 Jan 2024 12:30:10 +0000
ROA not before: Mon 01 Jan 2024 12:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200032
IP address blocks: 5.83.136.0/24 maxlen: 32
2a00:cdc0:11::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c1:04:52:4b:7a:f4:a8:6f:0f:05:08:28:5d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706239d3dff40968983077be5a6ddedf8fa2c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:8e:3b:9c:f5:b2:21:5d:3a:db:fa:4f:69:
91:b6:6f:9e:36:c5:c2:b2:be:91:f7:79:cb:28:99:
68:bf:45:76:b0:14:c0:6e:d6:ed:9f:ab:ff:e8:df:
e5:e5:6b:07:e4:a3:b1:9f:7d:9b:09:52:bb:dd:81:
ca:9a:ab:95:32:62:28:c9:11:c2:65:ff:7d:7e:cf:
69:f5:69:62:ea:cd:32:35:03:5f:71:1a:8c:72:1d:
96:60:30:66:77:7d:36:82:2e:67:b3:d9:3b:c1:07:
2d:e3:41:f8:bb:fd:26:a3:88:a2:ab:ae:bc:44:9e:
a3:36:cb:33:77:18:c9:06:f1:59:f1:c9:f8:0e:d9:
c8:2d:dd:22:44:35:ad:11:e6:57:c0:02:39:46:5d:
95:2e:48:c2:2e:07:3f:3f:f4:de:0f:cd:8e:23:3a:
88:e6:88:2b:cc:df:c4:a4:a8:e2:aa:5c:09:5e:e7:
ee:c3:cc:f9:86:c5:23:74:7a:17:75:51:92:06:82:
26:53:71:9d:a4:ff:06:0e:5f:d9:22:b6:c4:cd:25:
23:8c:75:81:bc:67:8b:50:14:3c:8d:d9:3e:e3:da:
10:ff:00:68:5f:51:6b:ae:d1:61:6c:f4:26:d3:48:
10:d1:7d:a3:c1:8c:21:10:7b:ce:85:30:d9:f7:f9:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:39:D3:DF:F4:09:68:98:30:77:BE:5A:6D:DE:DF:8F:A2:C1:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cGI509_0CWiYMHe-Wm3e34-iwec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.136.0/24
IPv6:
2a00:cdc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
60:48:84:f9:f1:fe:cd:c4:a3:2e:3d:f8:62:5d:ff:cc:75:dd:
76:08:da:37:61:09:27:3b:52:6b:38:ab:16:7b:c9:4b:31:03:
b4:19:69:3b:de:01:a8:fa:c4:24:ac:5e:48:98:2c:f2:2e:dd:
ad:ff:2a:6b:8e:f7:84:67:fe:c4:58:da:45:d0:9c:17:f1:c0:
b7:67:08:de:0e:f2:57:12:6e:5b:a5:32:65:d1:b0:ee:b1:e8:
3e:16:91:e7:45:99:68:00:e8:5b:04:19:81:0e:be:7b:10:fc:
12:08:e8:dd:a2:70:63:e0:6e:ab:bf:19:5b:2c:31:fa:d2:b6:
e5:58:dc:56:56:e1:f3:c6:f7:41:23:c2:9f:37:89:a2:0d:aa:
08:cb:fc:04:18:8e:01:f9:76:95:a2:61:5d:6d:c1:0f:4b:da:
e2:cd:35:73:46:55:1c:ad:05:f3:f0:9b:97:5a:8f:fc:df:e5:
12:b5:0f:d9:cc:7b:5d:92:ec:71:47:d8:4d:97:d4:1d:c2:8d:
a3:36:36:00:9f:03:cd:59:d3:b3:4d:bb:1d:4c:f0:61:9a:ec:
d9:dd:28:09:79:97:6f:45:09:06:32:98:e3:f6:82:08:c7:5a:
ee:7a:50:31:4f:d5:36:96:46:40:da:7c:96:1b:2d:1c:7e:1f:
76:29:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:23:38 2024 by rpki-client on console-fra.rpki-client.org