Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/E-0gk2oW7ajMEcgwCUP-DTWTqRA.roa
File: E-0gk2oW7ajMEcgwCUP-DTWTqRA.roa (raw, json)
Hash identifier: 7oLNkcH6S3tWyUW9jngTY321D+IP+aCQZ/thonwvvnM=
Subject key identifier: 13:ED:20:93:6A:16:ED:A8:CC:11:C8:30:09:43:FE:0D:35:93:A9:10
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 018CC56DFC4547D774B658BCFAB487F38CAA
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/E-0gk2oW7ajMEcgwCUP-DTWTqRA.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39787
IP address blocks: 195.5.112.0/23 maxlen: 23
5.44.64.0/21 maxlen: 21
2a00:e48:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fc:45:47:d7:74:b6:58:bc:fa:b4:87:f3:8c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13ed20936a16eda8cc11c8300943fe0d3593a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:04:fc:a2:4f:ef:05:0c:86:b2:05:73:a6:
d1:59:16:d2:b1:ff:6b:59:09:9c:77:90:2b:58:d1:
e8:24:33:37:7d:70:0a:ef:9f:ee:ad:b4:13:dd:60:
bc:bf:33:30:14:1e:a7:6f:8a:90:5a:21:6d:ee:54:
80:cc:fc:51:0c:40:b2:91:5e:00:b7:36:aa:d6:e4:
0f:7b:b0:76:d9:cf:fb:51:f4:41:a7:fe:38:e7:fc:
36:cc:c1:68:22:1b:fa:13:d6:54:52:9d:42:5d:1e:
cc:4f:49:c8:ba:5f:b1:98:35:80:ad:2a:da:8e:fa:
f1:c5:ae:b7:46:29:69:47:4d:6d:2c:99:61:97:9e:
3b:93:85:8a:0c:08:61:33:4f:a6:46:63:8e:93:0e:
21:66:15:ba:d8:c6:f7:ae:f0:f1:53:d4:1c:1d:58:
d4:1a:70:b4:88:a6:2a:5e:74:02:15:1f:10:ba:46:
90:9b:2e:be:0a:01:18:4b:48:00:c0:5a:1e:65:76:
3b:85:35:a5:74:9c:42:99:f2:f0:76:9a:f6:36:91:
97:c7:2a:88:1f:44:1c:c9:ad:05:f4:2c:16:5f:80:
ce:5c:58:6b:ac:51:e7:f9:54:be:99:f0:65:2c:17:
61:57:0f:67:2b:92:55:9c:e8:44:0a:5b:92:32:58:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:20:93:6A:16:ED:A8:CC:11:C8:30:09:43:FE:0D:35:93:A9:10
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/E-0gk2oW7ajMEcgwCUP-DTWTqRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.64.0/21
195.5.112.0/23
IPv6:
2a00:e48:8000::/33
Signature Algorithm: sha256WithRSAEncryption
1c:d5:11:3d:b0:56:86:d0:17:1e:fc:be:d5:14:2e:0c:f1:77:
19:ff:02:51:84:52:8b:30:5b:d8:e1:cd:a3:56:e0:c7:68:c1:
0b:e8:b7:5b:71:29:1e:12:f0:a4:fd:76:54:bf:90:78:75:ec:
b9:bb:6c:74:d8:b6:9d:38:c0:46:b1:82:51:03:84:39:c0:f0:
26:20:2b:a5:5e:58:24:14:31:ca:3d:d0:9a:c2:da:86:ed:c5:
d5:3a:f2:7d:ac:14:b1:19:f4:15:6f:7e:5f:c3:f0:98:8a:af:
7b:14:96:ca:0a:a8:ec:8b:57:99:f7:4e:f2:7f:6c:2e:f5:e0:
b1:7b:29:77:7f:9f:91:e6:b2:5c:43:c7:44:f7:85:cd:10:c3:
1f:89:12:49:0e:c6:ea:d3:d2:7b:5e:62:2e:c5:0d:71:cd:0d:
85:a0:67:2b:48:6d:f5:27:91:17:42:75:34:68:ee:de:93:e6:
8f:ff:6e:bb:26:2b:ca:16:2f:21:fd:d0:f5:94:b9:9d:f1:e2:
de:ee:83:e5:ab:10:dc:a4:f0:39:b0:44:47:1f:fb:81:b1:98:
ec:d3:a6:71:41:8d:e4:cd:e9:a2:7a:d3:4a:70:85:07:2e:06:
d1:d7:be:c3:8e:1a:0e:c6:35:23:24:28:dd:1b:0f:2a:f7:8a:
3f:51:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:26 2024 by rpki-client on console-ams.rpki-client.org