Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5g58vDu9pKQXHZ4Nld3RXzka9Tg.roa
File: 5g58vDu9pKQXHZ4Nld3RXzka9Tg.roa (raw, json)
Hash identifier: 0bvGYA65n81yq/j4x6X1CdzLR9HDAPLro6X3GZ3E0J4=
Subject key identifier: E6:0E:7C:BC:3B:BD:A4:A4:17:1D:9E:0D:95:DD:D1:5F:39:1A:F5:38
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F81D4EAAA75E1A902B94158EDFB8CC3CF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5g58vDu9pKQXHZ4Nld3RXzka9Tg.roa
Signing time: Thu 16 May 2024 14:36:05 +0000
ROA not before: Thu 16 May 2024 14:36:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51219
IP address blocks: 194.104.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:d4:ea:aa:75:e1:a9:02:b9:41:58:ed:fb:8c:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 16 14:36:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e60e7cbc3bbda4a4171d9e0d95ddd15f391af538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:d0:e4:3b:86:d4:ec:78:34:86:a4:9d:b3:
80:2b:ea:83:f7:b6:91:f0:b8:e7:be:79:e8:a5:98:
13:16:cc:52:51:c0:4c:99:87:ad:ed:4c:9d:68:7e:
d9:35:92:43:af:df:7e:f6:65:73:32:d6:6f:12:3d:
b1:9b:1c:f6:72:77:2c:ec:fc:0c:a6:f7:28:cd:39:
a0:04:64:1b:b8:53:dd:25:a3:8d:89:7f:fa:7a:c1:
c4:5a:0b:0a:86:fc:86:61:93:a7:1c:98:00:4a:c7:
b1:ff:ad:03:17:4e:0e:41:15:0f:90:60:a3:4c:bd:
38:e3:9e:0d:2b:ca:ff:e3:10:c0:0b:01:98:67:73:
38:a9:ad:7e:bf:45:aa:30:bd:2f:b6:9b:98:f8:e8:
f8:0f:01:24:bd:98:6e:c3:1a:3f:29:0f:74:f8:3e:
53:68:04:2f:f8:04:f0:1b:2c:71:8d:f9:6f:e8:29:
6f:06:7c:57:94:5e:4f:c5:e3:7a:ad:b8:3e:48:1d:
92:ad:f4:7b:86:e7:d4:49:31:64:70:1a:c0:af:82:
05:23:55:f9:bf:7c:99:4b:6a:f6:7d:f4:0e:45:bc:
3d:c6:a5:fe:be:f6:2e:64:6a:da:68:71:75:72:a3:
a8:18:cf:76:4a:e9:84:fa:1a:45:10:20:99:a3:ef:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:7C:BC:3B:BD:A4:A4:17:1D:9E:0D:95:DD:D1:5F:39:1A:F5:38
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5g58vDu9pKQXHZ4Nld3RXzka9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:a4:fc:70:0f:c5:99:dc:e3:34:bc:c3:99:bd:9f:45:d8:
e9:30:0a:b2:6d:8e:35:be:04:fc:00:69:8b:99:1c:b3:c0:6a:
6e:dc:94:b4:08:81:2d:94:74:f7:37:c0:12:be:f8:26:a6:e0:
38:a0:f3:da:ee:a8:fd:06:d4:2d:b0:26:34:39:93:cd:68:88:
fb:45:61:a6:e5:ac:4a:39:4e:fb:a9:7f:b8:57:d7:82:19:e9:
b4:30:d1:d4:ad:22:1f:8b:6a:59:c9:b0:66:a7:8a:c7:23:a8:
f2:6e:fe:b1:53:5a:0f:2a:52:d5:bf:0f:59:4d:b2:a4:ac:d8:
50:aa:d3:ba:a1:17:6b:a9:fb:05:6e:c0:29:8f:9f:64:fa:47:
24:d4:c9:b1:b0:fc:05:4a:57:85:67:d9:1d:fb:31:be:d5:25:
35:72:bf:25:92:39:f5:fe:6b:97:d8:c3:97:21:0a:78:53:68:
35:97:84:4d:60:95:25:cf:69:5e:a8:a9:39:8c:77:a3:26:9b:
9e:3b:b2:02:bc:9c:8e:25:87:eb:ea:c7:37:21:8a:ee:76:75:
69:e8:b4:d3:b5:7a:25:c2:dd:d0:88:ce:3e:d8:69:de:c2:75:
d0:3e:07:f9:eb:28:2e:8b:f1:43:2d:05:6f:d2:8c:3c:86:32:
4f:6b:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:12 2024 by rpki-client on console-fra.rpki-client.org