Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/wLPEpwQ6-dG7hNIBiFuV6g6SeBo.roa
File: wLPEpwQ6-dG7hNIBiFuV6g6SeBo.roa (raw, json)
Hash identifier: qSGGjy3u21dMoIR8tZkUDS/a5EHbVkW5b55Fm0Ru9oo=
Subject key identifier: C0:B3:C4:A7:04:3A:F9:D1:BB:84:D2:01:88:5B:95:EA:0E:92:78:1A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018EB2BB7934936F870571141D532014E915
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/wLPEpwQ6-dG7hNIBiFuV6g6SeBo.roa
Signing time: Sat 06 Apr 2024 09:26:54 +0000
ROA not before: Sat 06 Apr 2024 09:26:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215780
IP address blocks: 5.39.253.0/24 maxlen: 24
185.5.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b2:bb:79:34:93:6f:87:05:71:14:1d:53:20:14:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Apr 6 09:26:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0b3c4a7043af9d1bb84d201885b95ea0e92781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:be:a3:70:25:29:e4:60:e3:c0:53:88:60:
a8:6d:e2:f7:e5:bf:4e:09:e8:a6:2b:e9:1b:98:44:
f3:cd:0b:0e:b3:b6:90:e9:1a:44:ba:07:13:13:9e:
bc:a8:0c:0f:b9:39:90:10:cd:6c:f7:0c:99:09:43:
a6:8a:71:57:af:95:d3:cb:e9:8c:ae:a5:81:5e:d7:
ae:84:ac:01:da:b7:ce:a4:12:e6:8d:cb:1b:62:91:
93:5d:00:52:96:c2:50:88:a7:d0:cc:cf:4e:36:49:
aa:7a:48:a7:a3:e2:f8:5f:4d:2b:27:73:43:50:8f:
08:97:2e:04:b0:b1:a4:95:23:91:32:9e:44:8a:e7:
36:71:5d:ee:1f:81:33:c2:40:c8:3c:fb:cf:1d:3d:
fe:78:6d:75:8b:f0:3f:d3:8e:64:15:1f:ef:6e:6b:
46:a8:04:6f:e7:64:e0:ba:97:6d:1f:7f:54:07:a9:
7d:52:8e:11:c5:05:4a:ac:ce:f0:58:4b:f3:2e:fa:
f5:e7:20:7c:a8:02:de:55:79:0f:a4:81:b4:f6:a0:
07:e1:f3:81:3f:16:9e:b2:ea:3c:e0:ae:f8:df:a1:
a3:40:6a:2f:f5:63:4d:48:0f:ae:7d:2c:3f:28:61:
f3:ec:a4:b1:b7:c7:cc:39:40:67:7e:ba:fa:9f:7a:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:C4:A7:04:3A:F9:D1:BB:84:D2:01:88:5B:95:EA:0E:92:78:1A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/wLPEpwQ6-dG7hNIBiFuV6g6SeBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.253.0/24
185.5.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:32:28:b1:46:30:61:8d:22:3b:58:6a:fe:54:54:7c:06:62:
1a:37:eb:9d:2f:06:e7:fb:bc:18:86:7f:98:54:cf:91:43:e2:
33:d4:61:88:13:fb:27:20:28:1f:83:ab:99:58:de:25:cf:db:
6d:b6:3f:83:08:92:79:05:f3:05:95:cc:0f:bc:44:a2:54:bc:
1c:00:79:8d:0c:3c:8f:bf:66:84:28:3a:c3:20:f6:a6:77:35:
5b:ad:bb:4b:93:25:d8:f6:74:ea:d1:21:51:e5:31:ff:43:e8:
b4:6c:59:db:28:c2:d1:70:70:d8:9b:de:fb:f1:bb:4e:ca:e7:
db:f9:46:b1:4a:a7:8c:1e:69:ce:6b:57:0e:8c:9c:4d:91:e6:
54:a6:4a:da:df:17:45:f9:35:be:d3:ec:5b:82:be:1a:d5:63:
73:71:98:21:bc:e1:5c:8a:18:21:f1:7f:de:89:6d:c9:58:8b:
79:8e:44:e4:0c:92:a8:a8:f5:60:6f:5e:98:4e:ab:2b:9b:70:
77:76:df:8b:90:ec:9c:8b:7c:53:df:f7:79:c9:89:4d:c2:f2:
20:16:21:fc:a2:5a:bb:59:47:e5:86:8f:71:38:17:84:74:35:
84:fd:7c:29:8e:db:c7:1b:b5:5e:b5:8a:19:16:b8:7f:03:de:
54:08:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:55:49 2024 by rpki-client on console-fra.rpki-client.org