Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/c_BK-bMhoJXf0E9FzwwYWBpEznM.roa
File: c_BK-bMhoJXf0E9FzwwYWBpEznM.roa (raw, json)
Hash identifier: QRDVNeVc2LZC4iUGO3r50J1kB/AfCLYSfnoRvmlvBIk=
Subject key identifier: 73:F0:4A:F9:B3:21:A0:95:DF:D0:4F:45:CF:0C:18:58:1A:44:CE:73
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019321F5631E866D995C5F0EBA45B92E0D6E
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/c_BK-bMhoJXf0E9FzwwYWBpEznM.roa
Signing time: Tue 12 Nov 2024 19:59:09 +0000
ROA not before: Tue 12 Nov 2024 19:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213939
IP address blocks: 5.178.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:f5:63:1e:86:6d:99:5c:5f:0e:ba:45:b9:2e:0d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Nov 12 19:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f04af9b321a095dfd04f45cf0c18581a44ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:d0:a3:60:7d:06:f6:13:a9:49:69:41:5e:
4c:c9:90:4e:2c:df:91:21:f5:dc:1d:f0:b2:04:bd:
b4:a6:3b:b2:15:47:e7:71:66:5f:49:e3:69:75:1a:
8a:91:6c:99:a4:98:91:8e:82:1c:1e:e1:cb:c0:5f:
af:3a:1f:8b:9a:e9:1e:9e:9d:4e:9e:e8:84:a4:37:
da:44:fa:44:d2:aa:e5:6b:1d:7d:61:1a:d3:2b:54:
29:e9:3f:a9:71:fc:1d:41:b6:5a:ba:85:bb:55:38:
b0:62:a8:83:3b:13:e3:14:c1:db:fe:5e:17:45:89:
d4:7c:10:2f:55:f5:03:a4:43:65:74:a3:03:62:a2:
95:38:ce:30:1c:46:a2:97:28:1c:54:62:8a:d2:62:
53:c8:65:30:7f:f0:55:cb:a8:a8:84:25:93:88:1f:
2a:5c:8a:ee:e7:e7:bd:97:cd:22:dd:41:2d:a4:f3:
11:05:7f:13:12:89:35:44:fb:bc:97:c2:e9:19:9f:
a5:85:ff:10:c7:b7:9a:55:24:44:ff:2d:15:b6:0a:
2d:7d:ab:f3:d3:2b:3a:f4:f5:0b:c5:00:34:6b:a9:
09:50:32:c9:30:eb:58:75:d2:69:f4:8b:41:a1:bd:
1a:4f:a9:3b:ad:cb:0c:02:ab:b9:9a:2a:10:89:28:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:4A:F9:B3:21:A0:95:DF:D0:4F:45:CF:0C:18:58:1A:44:CE:73
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/c_BK-bMhoJXf0E9FzwwYWBpEznM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.105.0/24
Signature Algorithm: sha256WithRSAEncryption
df:a2:c0:94:f6:92:6d:5f:b9:01:a4:67:4c:79:38:f5:26:f9:
42:fe:f9:86:6f:4c:ed:a2:56:80:e6:ab:4d:cd:4e:41:ce:54:
73:e9:fe:3c:9a:b2:2b:7a:d5:69:e0:e9:81:3f:2f:cf:f5:df:
ac:73:59:95:7e:a4:0d:07:6a:a3:f2:4e:4a:10:33:63:2f:11:
dd:e9:5f:02:29:42:75:00:d4:d5:2a:19:d8:2c:ef:37:7e:8e:
77:57:85:77:94:97:96:95:db:0c:b9:e9:f1:f1:40:64:6f:68:
83:50:62:f7:ac:12:40:25:ef:62:c7:96:f4:2b:09:15:86:79:
80:6b:81:da:fe:5b:20:06:89:3e:5d:ab:60:21:cf:30:21:b5:
31:d7:b3:94:d4:a5:66:c2:ff:e5:60:93:f2:ce:00:f1:ec:d7:
b9:cd:51:4c:9d:d7:22:67:80:3a:6e:1c:f5:7b:eb:05:8a:21:
d1:09:f9:0d:f0:07:1d:74:02:c9:d6:9b:a6:52:fb:d7:e9:ab:
11:68:e0:20:57:3a:b4:ef:a0:80:f6:e1:1a:d8:e6:ce:dc:c7:
0f:d4:f6:ef:98:f3:ba:46:e9:50:d2:4d:f8:76:6c:e8:9e:f8:
3d:81:7c:48:c6:d0:dd:b0:d1:6b:11:b6:aa:65:2f:c4:f9:92:
93:ff:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:29 2024 by rpki-client on console-ams.rpki-client.org