Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/iYWKVjm_ffwcTgnYm7LRXWGGQv4.roa
File: iYWKVjm_ffwcTgnYm7LRXWGGQv4.roa (raw, json)
Hash identifier: NgZ9kRCyrIkA4qIKO6WY+x5nWhTzC9TT9RgIJr9oJA4=
Subject key identifier: 89:85:8A:56:39:BF:7D:FC:1C:4E:09:D8:9B:B2:D1:5D:61:86:42:FE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018E8FC522C328792315BBAFAB50EC225675
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/iYWKVjm_ffwcTgnYm7LRXWGGQv4.roa
Signing time: Sat 30 Mar 2024 14:30:45 +0000
ROA not before: Sat 30 Mar 2024 14:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30938
IP address blocks: 5.39.248.0/24 maxlen: 24
5.178.97.0/24 maxlen: 24
5.178.99.0/24 maxlen: 24
31.192.240.0/21 maxlen: 21
45.12.216.0/24 maxlen: 24
185.5.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:c5:22:c3:28:79:23:15:bb:af:ab:50:ec:22:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 30 14:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89858a5639bf7dfc1c4e09d89bb2d15d618642fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:47:28:54:73:a3:1c:df:13:44:20:dc:5f:
05:c1:8b:3b:ad:f6:4d:59:f2:08:45:7f:9f:1f:5c:
3f:9b:d6:4e:af:1d:df:64:d6:2b:e9:e5:6c:44:d1:
a7:b6:e1:0b:dd:1f:71:09:cc:54:dd:1a:d0:46:7d:
4d:f6:74:fa:e0:5f:01:9b:fd:ea:f1:74:7b:3c:1a:
e7:f2:39:9f:b6:18:a7:32:37:c7:61:cb:0d:6c:ff:
8b:3a:ba:07:4b:ad:39:0e:07:ac:70:32:65:0e:81:
d5:ec:44:f6:d6:27:7d:81:fa:49:cc:36:ee:ea:12:
c1:d0:71:92:98:40:54:b9:11:f6:79:a9:3e:57:3a:
ca:89:7b:46:cc:08:1b:44:7d:b4:34:38:45:d2:81:
a7:7e:80:e9:5f:3b:6e:47:93:44:b0:ba:1c:2b:ba:
df:35:f0:51:aa:a5:24:00:d4:0b:95:10:6f:5d:f1:
59:ae:b8:6b:7c:e0:2f:0b:96:db:72:e5:da:2c:0f:
d4:59:5b:d5:e4:4b:65:64:36:c4:eb:09:a4:d8:7f:
f1:ff:0f:d3:9e:bc:48:2a:ae:41:e9:31:3a:41:7d:
a1:27:1d:f9:bd:56:b5:e2:35:6f:8f:fc:20:29:25:
31:1b:37:6e:8e:97:48:84:dd:68:15:26:93:3a:d5:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:85:8A:56:39:BF:7D:FC:1C:4E:09:D8:9B:B2:D1:5D:61:86:42:FE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/iYWKVjm_ffwcTgnYm7LRXWGGQv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.248.0/24
5.178.97.0/24
5.178.99.0/24
31.192.240.0/21
45.12.216.0/24
185.5.36.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9c:78:2e:4c:d1:d3:40:d9:98:b0:05:16:57:ca:fe:a0:23:
f7:e6:d5:2a:06:7c:ac:19:d5:02:b5:58:ab:2d:2e:26:82:91:
00:22:92:58:93:70:ae:82:b6:11:85:54:71:9c:73:f0:7a:73:
80:ad:84:bd:99:59:1a:14:b8:3b:6f:d5:13:9d:4c:b6:07:88:
24:4e:34:9d:78:e5:58:30:33:35:69:7e:57:4e:07:ed:6d:be:
76:ba:43:47:7b:95:42:66:9c:e6:18:09:60:cf:30:32:cd:4f:
4c:f3:2c:ae:07:3c:3e:ee:80:91:d9:81:53:f4:b2:e3:20:44:
b4:71:16:b8:de:fd:ed:a9:0d:20:b0:ef:f5:fb:6f:e7:80:98:
90:c6:1b:60:c6:b3:e5:26:1c:96:85:06:1a:27:bc:32:40:98:
c6:8c:72:62:d2:b6:36:58:87:ad:a2:38:64:2d:09:34:09:82:
e5:eb:aa:9b:ca:58:ce:6a:7e:eb:ea:0c:8e:f7:de:58:e3:9a:
99:d3:f8:62:78:c1:42:d9:7d:b6:a6:e5:4b:60:e4:0c:e4:ff:
20:c3:28:80:df:f4:22:6e:5d:0b:de:c7:36:06:98:69:cc:5e:
f2:bc:8a:8c:b4:27:61:51:f8:fb:75:ff:5d:50:00:5c:6a:86:
f9:4d:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:30:10 2024 by rpki-client on console-ams.rpki-client.org