Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa
File: 5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa (raw, json)
Hash identifier: 5FyeDcmtJvPLYhzFStuUEcfCDIDKRlGrMN5mfn3Io5U=
Subject key identifier: E5:02:7E:26:1C:1E:1C:4C:9C:F3:41:36:88:01:0F:43:99:10:68:F5
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018CC7271130D677302C31EB4846D9DD5450
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa
Signing time: Mon 01 Jan 2024 22:31:15 +0000
ROA not before: Mon 01 Jan 2024 22:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:11:30:d6:77:30:2c:31:eb:48:46:d9:dd:54:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5027e261c1e1c4c9cf3413688010f43991068f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:62:0f:41:a5:ad:1f:46:43:b7:11:90:b1:
b8:be:c2:33:00:f4:25:7e:92:8e:74:98:6a:e7:67:
1a:9f:04:8c:b0:8e:9a:e6:66:7b:0e:ed:40:e0:1e:
0c:de:92:14:a0:c1:a5:66:0b:29:36:04:17:5a:89:
cf:cb:6b:74:e3:8c:9f:64:a1:2f:7f:c8:ff:e6:77:
0c:b6:64:41:75:22:0c:69:7e:75:1c:93:31:a2:4b:
dd:43:04:8b:4a:1b:db:16:dc:90:bc:e0:89:28:00:
be:1e:62:1d:a3:c3:3a:8f:9d:e2:f3:8a:fe:e3:01:
8d:7f:8c:33:b2:9c:99:54:81:76:a4:aa:d1:1d:87:
05:52:50:2e:ba:64:00:5a:75:17:c4:b2:ab:78:c1:
e2:e9:ff:7b:39:47:fc:79:3d:69:38:7a:a5:6e:8d:
ea:70:3f:40:4a:e8:86:69:28:5b:d6:b6:2d:23:52:
46:dd:3a:af:44:a5:66:49:79:74:f8:8e:59:c9:e4:
7f:76:ba:d5:60:23:5e:21:bb:ed:a7:a8:2f:ac:a0:
1b:7a:30:a8:0c:b9:ef:c6:24:17:b5:11:6c:2c:30:
78:4c:ac:99:f3:85:00:02:9a:3f:75:06:90:27:9d:
2b:9a:4b:13:b9:32:61:cb:2e:39:70:0b:eb:44:11:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:7E:26:1C:1E:1C:4C:9C:F3:41:36:88:01:0F:43:99:10:68:F5
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:82:f2:ea:42:1c:ba:77:e1:e1:4e:4c:d2:66:87:6b:c1:56:
78:e0:92:f6:32:34:4b:e1:0a:07:64:62:2b:cf:85:50:dd:88:
27:c2:19:21:c1:83:92:6f:28:68:1d:2a:68:63:75:e3:ea:9c:
14:44:8b:73:20:c4:3f:61:1b:bf:c2:2e:6a:65:7e:1a:92:54:
0b:66:aa:58:62:0b:98:06:0d:de:57:c3:f3:77:40:dd:34:88:
f2:98:42:f5:67:ca:6f:a0:b2:c9:a5:91:0e:f2:0f:9e:85:69:
74:42:a0:72:13:f6:2b:4e:e5:88:53:4d:52:40:86:03:76:b7:
5a:cd:25:ee:04:53:f0:db:fb:19:23:33:50:69:e7:0a:bc:18:
f8:c5:5a:eb:f0:b2:cc:a9:55:59:0e:a0:2b:56:23:ac:a4:d5:
3d:12:f3:a8:a5:27:7b:7b:79:e7:d5:4a:5e:6e:14:1d:70:a8:
45:eb:04:04:6a:c5:32:3d:6f:02:c5:39:f9:1b:b5:da:40:39:
a8:b1:5a:ad:be:17:10:77:a4:94:c8:89:17:97:df:47:bd:d7:
0f:e2:83:23:ae:20:4f:74:84:9b:ae:78:b9:19:a0:93:07:99:
dd:69:1a:88:1a:fd:b5:56:22:8d:75:ef:5f:5a:4b:3d:a2:e4:
ff:92:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:01:41 2024 by rpki-client on console-ams.rpki-client.org