Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4g83cPhBpnEF78-f-WWD4j_NugA.roa
File: 4g83cPhBpnEF78-f-WWD4j_NugA.roa (raw, json)
Hash identifier: mIGXwc3LbEUz3lDYFIka81KQP2XRitXOK6hNGSf/zXg=
Subject key identifier: E2:0F:37:70:F8:41:A6:71:05:EF:CF:9F:F9:65:83:E2:3F:CD:BA:00
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E08A1526C57FF7FAA0B941F93E9CE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4g83cPhBpnEF78-f-WWD4j_NugA.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 5.188.232.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:08:a1:52:6c:57:ff:7f:aa:0b:94:1f:93:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e20f3770f841a67105efcf9ff96583e23fcdba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:8d:62:1f:ac:f3:89:f3:90:f4:c3:7b:ad:
91:0d:85:1b:f0:3c:f6:7f:50:fb:bc:23:47:9c:44:
77:d1:07:bc:cc:90:e8:8f:90:2b:4c:c5:01:0e:70:
23:4d:16:05:35:6f:70:48:f9:a6:a4:be:91:6f:8b:
97:90:2f:ad:e8:ae:a0:47:fc:bb:80:78:88:ff:7d:
a4:af:2a:4f:2d:5c:37:09:4c:61:88:2d:f0:9d:4a:
32:c1:80:35:cf:84:1c:51:08:1e:7b:db:60:e0:1f:
69:9c:cf:13:e7:84:13:44:72:44:4d:ee:fa:00:58:
7c:f5:20:ee:3a:42:73:da:44:f1:8d:4a:43:e4:f6:
b6:f8:47:65:a9:91:4e:c5:5e:e3:40:f2:f9:a9:06:
33:29:72:00:5b:8a:99:9b:81:79:36:d7:33:f0:69:
d8:ab:57:d2:d3:a1:54:12:1b:14:a5:e5:06:58:62:
83:06:ba:8a:3f:94:e1:c2:fb:b1:19:98:fb:1c:51:
84:43:cb:f9:45:60:e6:95:c7:92:69:dd:50:79:41:
83:a7:6d:91:41:7a:9e:6d:e7:16:10:81:c9:a5:95:
94:24:35:bc:0f:3c:14:7a:c7:b1:db:bc:0a:f5:4b:
d5:7a:0a:9e:86:9b:e6:ec:f4:20:9d:bf:68:2f:ec:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:37:70:F8:41:A6:71:05:EF:CF:9F:F9:65:83:E2:3F:CD:BA:00
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4g83cPhBpnEF78-f-WWD4j_NugA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.51.0/24
5.188.203.0/24
5.188.232.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:89:d7:a4:de:42:58:9f:d4:44:20:25:1b:76:4b:e4:17:d6:
04:92:83:30:13:dd:c6:39:ae:2b:3d:48:1d:21:fc:07:b5:8f:
03:aa:6e:b9:4a:5b:48:d5:a9:20:be:51:ec:f9:bf:69:fd:4c:
fe:9a:40:ef:41:d2:b6:64:90:ca:67:75:b9:d6:7d:79:19:5c:
75:d9:ab:eb:d5:a2:f3:69:a4:0e:36:4f:35:42:24:a9:f4:69:
b3:80:4b:b8:5d:cd:86:e3:66:4f:f9:74:3f:89:e7:b5:9d:4c:
9d:13:c9:e0:ec:31:3a:b4:10:05:d2:89:f8:b7:5b:d6:af:d3:
c9:05:7b:b9:ab:d2:43:19:d3:2b:fc:f0:87:e8:f9:7c:78:97:
36:02:53:ff:2e:e0:53:37:d7:0c:6c:94:6e:a2:de:c3:31:b4:
2b:77:8e:16:df:3a:98:df:a4:50:65:6c:b7:62:45:10:22:d7:
4d:36:b3:9e:61:d2:b0:fd:e9:89:7f:95:f3:dd:a0:50:90:e0:
43:65:f0:f4:94:7a:4d:47:2c:c3:94:f8:8f:1c:7e:11:05:cf:
63:ad:cc:ee:53:30:a7:77:18:a1:ea:e6:89:7a:0e:f1:d8:1e:
f7:b6:db:29:fb:88:cf:96:31:41:88:30:e8:06:1e:f1:3a:8d:
77:ad:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:54:57 2024 by rpki-client on console-fra.rpki-client.org