Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m5esIE3fA-WOWkPjrsEgitbn9LI.roa
File: m5esIE3fA-WOWkPjrsEgitbn9LI.roa (raw, json)
Hash identifier: 87lPC9k8x8ZHLvui5ABH+PD96Kt+X+WVWWLbas5FjyI=
Subject key identifier: 9B:97:AC:20:4D:DF:03:E5:8E:5A:43:E3:AE:C1:20:8A:D6:E7:F4:B2
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018D0ED6D3D04213346712C5476DA4A0EB31
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m5esIE3fA-WOWkPjrsEgitbn9LI.roa
Signing time: Mon 15 Jan 2024 20:36:16 +0000
ROA not before: Mon 15 Jan 2024 20:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142594
IP address blocks: 2.56.166.0/24 maxlen: 24
194.31.140.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
77.83.241.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:d6:d3:d0:42:13:34:67:12:c5:47:6d:a4:a0:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 15 20:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b97ac204ddf03e58e5a43e3aec1208ad6e7f4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:15:4a:71:f3:d9:0d:6d:9e:0e:0e:d9:b5:
cf:f8:70:d4:6f:6f:b9:8a:65:89:24:dc:41:40:ec:
0a:42:a9:f7:7e:0e:cb:ec:67:54:b2:87:f4:88:42:
22:7d:e0:28:ae:e0:7b:27:db:26:83:4f:0f:bf:46:
59:fb:c2:2a:08:b9:59:ec:b1:21:63:bc:6b:ba:8a:
4d:44:9b:b2:15:ec:46:33:11:81:7b:fc:bb:19:e0:
93:69:e0:54:d0:76:3a:f0:26:22:84:cf:00:46:0d:
24:6e:ad:e9:74:44:13:e4:2b:9c:38:5a:4d:1b:e2:
e2:a3:f0:27:5e:83:51:20:9d:08:21:a3:9e:8f:ba:
cd:36:81:9d:00:c7:0f:08:59:f4:ae:c4:37:68:86:
41:81:21:7e:7b:d2:71:67:85:e5:dd:66:e4:44:9e:
c0:31:8d:0d:5e:59:82:aa:5c:8b:46:f7:f5:31:2f:
1d:7d:5f:94:5b:27:91:b0:ca:70:4b:2b:6b:9a:49:
2f:93:b2:9b:55:be:3f:53:e8:4c:5b:33:a1:d9:59:
17:bd:1e:af:4c:28:a0:6a:4e:32:82:55:38:3c:1f:
73:ec:a9:be:5c:4b:24:50:20:02:87:10:cd:51:1e:
26:14:16:83:85:14:73:42:c9:9c:d2:58:02:8d:84:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:AC:20:4D:DF:03:E5:8E:5A:43:E3:AE:C1:20:8A:D6:E7:F4:B2
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m5esIE3fA-WOWkPjrsEgitbn9LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
77.83.241.0/24
185.234.74.0/24
194.31.140.0/24
194.56.225.0/24
Signature Algorithm: sha256WithRSAEncryption
16:86:24:4f:53:0b:cf:4b:b4:59:5f:60:2c:c0:77:a3:c5:b3:
dd:15:d0:25:98:6c:c1:b1:2e:81:cb:a1:4a:78:1b:b3:67:fa:
3a:0e:59:54:79:fd:a7:d5:d8:3c:8f:37:15:dc:b3:62:b5:e9:
c8:ce:8b:d2:cf:42:02:5f:d0:3e:de:0e:ba:fc:ec:ae:1b:35:
9c:41:2f:de:62:ce:da:40:8e:2f:8e:a5:21:af:90:ca:7f:65:
de:55:52:7d:6e:44:0c:4a:a0:f7:cb:c0:c3:a6:3c:07:df:ac:
69:5e:09:cd:fb:48:86:71:88:ee:4f:f0:9d:29:f8:28:cf:2a:
36:71:7d:0e:50:87:9e:67:92:05:1e:64:cd:2e:e5:91:09:af:
c4:ed:9c:92:c1:84:84:f4:e1:44:37:6d:8e:68:4e:f4:65:0b:
7d:df:37:46:f8:01:1b:fd:84:70:01:cb:34:e4:4a:07:ec:0b:
bc:18:f1:54:9d:a3:64:72:99:5a:5f:a9:bc:17:3a:aa:92:e6:
1d:02:2d:03:0a:aa:38:6b:34:8c:ad:1b:cd:e0:10:ec:8f:af:
57:40:8b:cf:71:32:d4:2a:b4:c6:48:12:07:84:4f:1d:7e:d7:
1c:b6:58:78:75:a7:56:54:dc:e4:00:87:25:42:5f:ea:34:80:
c5:3d:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:33:29 2024 by rpki-client on console-ams.rpki-client.org