Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yonlUrO7oG-V4t4o_kdpE1LfODo.roa
File: yonlUrO7oG-V4t4o_kdpE1LfODo.roa (raw, json)
Hash identifier: k9q8eJZnmS27sCTrY7b55KUs4/KoB0BO2rcSOJ+Rp7E=
Subject key identifier: CA:89:E5:52:B3:BB:A0:6F:95:E2:DE:28:FE:47:69:13:52:DF:38:3A
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CC64B29096E05E003E248FD921FD1D580
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yonlUrO7oG-V4t4o_kdpE1LfODo.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47516
IP address blocks: 5.178.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:29:09:6e:05:e0:03:e2:48:fd:92:1f:d1:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca89e552b3bba06f95e2de28fe47691352df383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:33:17:d9:3f:34:ae:5d:63:1d:8b:30:21:
bc:d1:9e:84:d4:ac:6c:f2:0a:f2:bd:24:eb:c0:a0:
20:f0:7d:3a:6b:3b:fa:dd:03:29:56:83:2b:ab:24:
aa:a4:b3:d0:76:01:e5:37:3d:02:cc:8c:63:17:ca:
a8:3e:5c:6b:68:97:2a:94:3f:0e:42:d0:6f:c8:78:
d3:70:24:62:d4:37:2b:f9:32:f5:1c:f4:21:8b:40:
63:7a:8f:dd:41:1c:76:4b:cf:be:76:87:f8:2a:f5:
13:28:6b:b8:55:32:9b:7d:3e:10:6f:ef:a0:54:36:
5e:75:93:c3:90:ea:6c:04:ea:41:19:bc:05:25:e2:
26:7a:94:19:eb:f3:a0:ac:d9:e7:c0:eb:b3:32:02:
d0:f1:7e:7f:5a:2f:39:3b:5e:14:1b:79:2d:2c:8b:
2b:83:ac:0d:35:24:c6:2a:42:29:49:69:3e:09:82:
1f:d2:c7:0b:a3:42:19:65:ae:56:1a:f7:86:00:9c:
4e:68:9c:af:91:f2:60:f2:6c:49:93:4b:5c:bb:ad:
3e:bc:1f:b4:e2:66:39:64:ee:82:cb:bf:1f:6d:20:
85:ed:5b:68:a5:46:5a:76:cb:2d:19:fe:98:a6:c7:
3d:81:84:01:67:6c:c4:59:96:c2:08:88:d1:35:bd:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:E5:52:B3:BB:A0:6F:95:E2:DE:28:FE:47:69:13:52:DF:38:3A
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/yonlUrO7oG-V4t4o_kdpE1LfODo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
29:37:84:09:53:8e:f4:1e:79:d7:bf:f1:52:de:72:20:5a:51:
54:89:5b:24:7b:2d:54:c7:1e:ce:11:07:c8:0d:42:88:4a:9c:
eb:bd:d3:9f:16:45:57:60:e2:40:7a:85:b7:b4:cf:9c:28:60:
d6:9b:86:27:9c:a9:fe:bf:cd:32:a9:1b:57:3e:2b:b1:6c:20:
33:6d:7e:77:f5:2c:2f:cb:b9:f2:bb:a9:e8:d9:9f:dc:de:d9:
ee:8f:da:30:0d:21:24:d9:d0:e9:a0:1e:29:4a:93:05:c8:14:
1e:ed:7c:ec:59:c3:a1:be:73:a6:1b:a6:0c:b0:37:dd:5d:92:
68:dc:75:28:d2:81:f7:20:9f:98:ad:a6:a8:2d:7c:50:bd:91:
f8:41:35:fb:59:68:74:57:3c:ae:21:1f:f5:78:b2:bb:d1:7b:
d2:e4:db:ed:a1:b2:fa:33:70:e8:c6:83:c5:55:89:62:aa:43:
e2:09:cf:17:ed:a7:16:e1:2e:8a:2a:da:40:0c:35:0a:0b:e8:
e8:f8:72:d0:3e:d9:ef:da:e7:a7:66:33:d3:dd:30:9f:e1:0f:
75:51:59:3c:b9:99:9e:2a:ce:fe:f1:39:97:48:1e:ec:fe:d4:
1d:98:d4:55:a1:15:d1:74:d7:36:4c:a8:63:30:e1:b0:ff:8f:
9a:5e:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:15:41 2024 by rpki-client on console-ams.rpki-client.org