Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/pLWlUaYmWn78k2AVGWqTVrrmC3s.roa
File: pLWlUaYmWn78k2AVGWqTVrrmC3s.roa (raw, json)
Hash identifier: j3F9yFNGX+0czZiLr8uqRivrZWTa8bzOwoUQCFVqN4E=
Subject key identifier: A4:B5:A5:51:A6:26:5A:7E:FC:93:60:15:19:6A:93:56:BA:E6:0B:7B
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018CCA29DBDE048073B4399524FA66817F16
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/pLWlUaYmWn78k2AVGWqTVrrmC3s.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208392
IP address blocks: 5.42.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:db:de:04:80:73:b4:39:95:24:fa:66:81:7f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b5a551a6265a7efc936015196a9356bae60b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:6d:e9:12:29:b0:af:e8:69:1b:4b:a2:72:
9c:b4:2b:30:7c:20:c1:11:7b:a8:e2:6c:5a:51:6a:
14:88:ce:9f:a3:ab:39:0d:20:5c:33:9f:c6:aa:5c:
98:41:dc:0c:e4:71:8f:d8:c7:6b:9f:cb:07:6d:01:
a3:6c:dd:48:ec:5a:3d:bf:cd:09:59:4c:cd:31:90:
41:73:6a:0a:47:cb:a9:5a:06:c9:30:7e:48:f4:a9:
d8:f0:f4:58:9f:84:09:5c:ed:0a:b6:3a:90:71:db:
e7:c9:b7:9b:b6:db:d0:2c:e9:ef:83:81:0a:a8:d0:
85:8c:2c:75:0e:04:b2:cc:57:0b:0c:70:46:d8:bc:
74:fc:22:d3:3e:bb:e4:3c:0d:a5:53:ae:2d:2c:68:
1b:8e:a3:20:82:6b:4e:5f:c0:66:d2:20:4a:46:b7:
83:c9:3c:eb:c3:d9:e9:f8:69:c5:b1:5e:92:7b:87:
0b:38:36:b6:99:04:6e:dd:5b:27:28:51:12:47:f5:
b7:25:43:07:6a:bb:19:f4:06:de:12:7a:a1:02:3b:
ce:16:a0:0e:b6:09:6a:83:09:5d:32:89:ce:a6:36:
53:a3:78:76:e5:19:93:e6:b0:81:8a:b3:88:7c:14:
b3:db:d9:ac:c9:a7:ee:ec:08:c3:46:b5:44:d6:50:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:A5:51:A6:26:5A:7E:FC:93:60:15:19:6A:93:56:BA:E6:0B:7B
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/pLWlUaYmWn78k2AVGWqTVrrmC3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.89.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8e:7b:19:d0:52:f5:b3:d1:a0:8d:4d:01:1c:96:5b:23:7d:
55:90:65:ef:10:58:24:b4:5f:9c:68:f2:0a:83:9a:21:61:46:
fb:00:ad:6f:54:de:13:4e:90:1f:98:be:9c:dd:f1:0a:e5:19:
e1:39:44:c8:cd:e1:2c:42:58:a1:20:78:b4:d9:24:0e:1b:bc:
f0:65:e9:60:34:28:d0:5a:f2:fb:98:75:18:c1:b6:88:d8:48:
c3:b7:f2:9a:ed:9c:cd:81:b0:5e:27:20:ef:41:d2:94:ef:cc:
21:60:44:6c:d7:cf:23:3f:1f:78:1a:a1:26:c0:70:28:11:4c:
83:c4:1e:94:6e:46:de:79:ca:19:c4:bc:76:19:90:01:f2:f3:
d8:49:70:f0:8c:41:1b:84:3d:31:98:5f:f0:d5:90:df:33:fc:
cc:97:66:96:9f:98:c8:c0:f0:82:fd:b4:0e:9c:8c:31:c1:0a:
87:39:0c:60:84:ea:50:24:e7:f6:6e:6a:7c:c7:a8:db:04:6d:
a8:29:6c:78:b8:cd:64:a1:90:e8:1e:56:9f:3d:14:04:8b:76:
04:54:f3:02:21:0d:bc:38:0f:c5:b5:ec:96:85:0a:92:ba:ea:
48:43:4a:b2:e2:3e:a6:8e:0a:e7:83:ef:f9:e7:93:a7:1d:84:
bf:e9:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:03:00 2024 by rpki-client on console-fra.rpki-client.org