Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/9ZZSOafnhooqrJjUuJki28vifKs.roa
File: 9ZZSOafnhooqrJjUuJki28vifKs.roa (raw, json)
Hash identifier: SgXHiFjZAu+q7kSfMbvWeItINzJKTdexMW7FLmsdV9Y=
Subject key identifier: F5:96:52:39:A7:E7:86:8A:2A:AC:98:D4:B8:99:22:DB:CB:E2:7C:AB
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018CC26D234DFD17D9829112CC54C33B8AF4
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/9ZZSOafnhooqrJjUuJki28vifKs.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 5.182.86.0/24 maxlen: 24
5.182.87.0/24 maxlen: 24
77.232.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:4d:fd:17:d9:82:91:12:cc:54:c3:3b:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5965239a7e7868a2aac98d4b89922dbcbe27cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:96:f4:68:92:63:e3:ff:46:e2:35:c4:81:
91:6b:fe:1e:bf:6c:82:55:99:ea:61:b1:1f:df:d5:
75:ca:3d:b2:12:bf:b6:f7:7a:00:8b:75:da:e3:5d:
5b:dc:09:93:8a:72:9b:17:e4:6a:89:7c:37:d9:05:
7d:b6:33:c6:1b:6f:ba:f9:0a:89:bc:f9:28:6d:10:
90:9a:f3:ac:4d:cb:d2:b8:9c:bc:d2:d3:bd:b0:6b:
24:50:c9:03:f1:2f:d2:4c:0f:36:97:17:05:d2:0c:
1f:04:9d:6c:8c:38:1e:fa:2c:fd:a4:5c:30:59:bb:
d9:8b:09:7c:c4:5c:6f:82:6f:06:46:77:63:09:74:
a6:ea:7c:ca:f5:df:77:36:b6:db:29:bc:38:40:35:
9e:54:85:0e:6b:be:ac:32:9b:8f:f7:bd:50:d4:06:
b8:4d:24:f3:8e:f5:07:e5:55:58:61:66:2c:1d:34:
46:6c:13:f6:2d:3e:26:cd:bb:f0:06:aa:7b:d1:7a:
43:ac:0a:af:1e:ad:83:67:59:1d:5e:14:fb:6b:47:
d8:20:58:5e:ee:00:30:4c:2e:d8:39:54:7d:45:07:
94:9a:67:9e:d4:ac:be:a0:21:16:f3:18:d7:43:1b:
e4:8a:6f:86:98:3e:34:22:d6:13:2b:ed:6c:0c:36:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:52:39:A7:E7:86:8A:2A:AC:98:D4:B8:99:22:DB:CB:E2:7C:AB
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/9ZZSOafnhooqrJjUuJki28vifKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.86.0/23
77.232.142.0/23
Signature Algorithm: sha256WithRSAEncryption
71:f6:78:82:45:b9:96:ca:2a:32:2b:b2:39:fc:2a:4f:b5:32:
5b:60:36:ee:84:9a:84:8a:29:cc:c7:7d:53:df:4b:36:bb:4d:
2b:95:a9:d1:8d:15:0b:94:3c:70:0b:7b:8e:de:11:04:9a:fa:
8f:da:9b:d3:85:1f:68:6d:bc:d8:00:0b:6f:36:72:09:d2:12:
7e:05:28:16:66:b3:f9:93:9c:e8:be:cc:32:8c:7e:49:20:62:
ba:b8:aa:5d:20:de:3e:9d:a7:9d:73:f6:0c:08:08:ca:fd:fa:
52:9d:34:7e:f0:88:8c:52:38:92:42:d5:09:0f:f2:63:17:45:
17:44:60:19:97:72:7e:ae:84:e9:8f:4e:9f:70:9d:1c:28:ea:
2f:37:b2:b0:8e:30:11:21:b3:86:cd:51:26:85:80:74:06:32:
2f:c7:ad:7f:d3:a2:24:ed:9f:11:53:6d:c1:d5:7d:48:e5:a1:
71:44:45:66:b5:27:b8:b6:9c:74:79:c5:f8:fd:a1:c2:a7:f8:
4d:c1:53:83:37:f2:f8:df:e2:b6:15:0e:6a:ea:76:9f:b3:f8:
83:21:e3:8f:3e:db:c4:b4:fd:e4:7f:b4:8d:b0:fc:16:29:09:
60:2f:16:db:d0:db:1d:9f:5b:8f:7f:83:c7:60:52:ca:48:7c:
be:a0:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:28:26 2024 by rpki-client on console-fra.rpki-client.org