Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/mBuEgeP9Zxm8y-ezeNy2wNRUre8.roa
File: mBuEgeP9Zxm8y-ezeNy2wNRUre8.roa (raw, json)
Hash identifier: cEvkHt0QFypkVoKKxtB21hgRukatWGxYgCkisE0fhiY=
Subject key identifier: 98:1B:84:81:E3:FD:67:19:BC:CB:E7:B3:78:DC:B6:C0:D4:54:AD:EF
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 018D73895446F6E8C6513BFB739662109D1E
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/mBuEgeP9Zxm8y-ezeNy2wNRUre8.roa
Signing time: Sun 04 Feb 2024 09:53:16 +0000
ROA not before: Sun 04 Feb 2024 09:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 5.63.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:73:89:54:46:f6:e8:c6:51:3b:fb:73:96:62:10:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Feb 4 09:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=981b8481e3fd6719bccbe7b378dcb6c0d454adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:3d:37:e6:dd:89:03:5d:af:7f:c4:a0:3a:
8f:66:2d:41:00:7c:f5:11:73:77:96:04:41:e2:1b:
5d:e7:4b:07:ae:72:e3:ab:b2:db:7c:7b:36:ba:30:
e4:45:3e:ef:59:47:99:e3:56:1b:49:1d:f2:ab:bd:
9b:e2:78:43:12:d9:29:e4:a4:b0:3e:c7:83:a7:ed:
d9:b5:c4:22:8e:9c:56:64:17:8a:07:30:b6:ad:2a:
7d:e4:a3:8b:2d:72:a2:07:fa:0e:2a:9b:ca:0d:48:
d7:91:41:a5:35:67:fa:35:85:7e:2d:0f:49:e8:63:
7f:44:83:2f:0e:ad:83:b0:ff:f9:83:ba:3e:ac:7c:
fd:11:96:f2:10:52:38:d8:42:16:d7:7f:82:89:aa:
b9:56:8c:6d:e1:7c:f6:4c:db:a0:a6:9c:b2:a2:71:
02:45:d1:66:8b:6c:fa:fd:b5:25:2d:92:73:05:df:
64:0a:f7:87:cc:20:2c:be:92:5e:ef:03:0b:15:76:
8d:25:fc:79:bf:79:d8:f6:e0:9b:20:ff:11:14:24:
52:ad:ec:3c:04:ef:73:bb:42:06:e2:de:ca:83:04:
52:5e:b4:7d:75:68:5c:ec:c8:08:2a:14:40:ff:fd:
b4:a1:16:ab:93:0d:0a:f5:dd:0b:4d:40:fd:25:7d:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1B:84:81:E3:FD:67:19:BC:CB:E7:B3:78:DC:B6:C0:D4:54:AD:EF
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/mBuEgeP9Zxm8y-ezeNy2wNRUre8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1c:c4:94:96:de:8b:1c:cb:52:16:12:b8:e8:16:e2:c9:b4:
fe:85:b7:76:c4:b6:b1:c4:1e:01:2d:19:da:66:ca:ff:80:7a:
41:52:8d:d7:2a:08:98:88:bc:37:da:dc:cf:fb:f9:c7:39:0c:
30:73:f6:68:1f:ed:58:89:9f:a2:e3:c0:3c:fc:0f:0b:70:69:
26:7b:14:67:30:3e:b0:4d:ce:23:0e:3d:40:c7:64:50:97:c7:
3d:8d:00:63:f9:4e:8c:da:25:ad:a6:60:93:1c:3b:04:3d:a1:
56:c6:29:30:75:59:92:70:52:1f:3d:a8:e7:bc:32:58:64:bb:
a7:e3:07:30:a6:61:42:08:3e:d6:b8:cb:9e:8d:78:5d:b8:88:
2b:dc:75:6a:f4:34:c4:32:98:8b:c1:6b:a6:d6:0f:b5:68:b7:
95:88:25:24:89:32:26:6d:44:c1:89:8c:86:16:e0:11:56:e8:
a5:2e:b4:e9:31:31:d9:04:4e:2e:68:d2:7a:05:01:60:59:67:
d1:cf:08:99:d4:5d:7d:c8:cb:e7:49:99:01:d9:40:f0:9d:ac:
4c:e5:4e:1b:a7:24:5d:3d:b5:3e:70:ea:ad:29:f6:6a:30:34:
47:3f:f0:ca:e2:6b:33:ba:5c:cf:9a:b7:b3:e7:f8:59:55:af:
d5:f8:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:33 2024 by rpki-client on console-fra.rpki-client.org