Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/5e98SUhb3lJXXSMp28h-fS0QRh8.roa
File: 5e98SUhb3lJXXSMp28h-fS0QRh8.roa (raw, json)
Hash identifier: VuqspkxstgC0IYz6+GRMr2h/naiEl7JGiwocnJKUnQw=
Subject key identifier: E5:EF:7C:49:48:5B:DE:52:57:5D:23:29:DB:C8:7E:7D:2D:10:46:1F
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 018ECC4486D95D2F7A6D1DABEBC15FF93E8E
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/5e98SUhb3lJXXSMp28h-fS0QRh8.roa
Signing time: Thu 11 Apr 2024 08:27:06 +0000
ROA not before: Thu 11 Apr 2024 08:27:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.11.181.0/24 maxlen: 24
185.158.248.0/24 maxlen: 24
2a0b:7140:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:44:86:d9:5d:2f:7a:6d:1d:ab:eb:c1:5f:f9:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Apr 11 08:27:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5ef7c49485bde52575d2329dbc87e7d2d10461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:54:db:26:66:c3:49:88:22:6f:2f:ea:47:
54:3f:92:21:ff:4c:ca:37:62:bc:5d:c5:4e:42:f9:
25:4e:d3:56:80:88:73:a5:14:c1:44:a9:94:0e:8e:
69:ae:04:52:0a:2f:3a:f1:5c:93:a4:a6:53:ba:7b:
70:0e:13:e7:b5:35:4c:ce:07:99:96:63:03:5e:db:
e9:ba:0d:ea:b2:db:a4:ee:80:73:f3:e7:96:ec:8b:
c8:fb:06:4d:d0:1f:d4:90:73:ec:8c:e4:fb:9c:78:
9e:d2:26:d2:af:f2:8f:04:ff:45:43:36:2c:39:86:
8b:0a:29:10:05:e0:f7:7c:a2:6a:63:0e:7e:4b:63:
4a:09:64:8d:69:94:a4:ef:d7:e6:24:fd:4d:74:d8:
a0:b9:1c:77:3f:ca:4b:df:7c:55:98:d5:db:3e:d1:
23:fe:c5:72:23:3d:f2:cc:36:26:c4:05:04:09:ef:
89:b7:ad:72:92:97:5d:48:5b:6f:8f:68:30:1d:18:
19:22:77:ec:94:26:d9:e9:02:cc:f7:d1:7c:b6:d8:
29:1a:4a:22:bc:33:dc:4a:f3:5a:86:96:18:85:9b:
fa:3b:cf:05:88:9e:3b:15:9e:15:9b:1f:df:d8:9d:
62:1b:2c:8e:ea:e6:67:35:84:9d:65:2c:d2:b1:1c:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:7C:49:48:5B:DE:52:57:5D:23:29:DB:C8:7E:7D:2D:10:46:1F
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/5e98SUhb3lJXXSMp28h-fS0QRh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.181.0/24
185.158.248.0/24
IPv6:
2a0b:7140:7::/48
Signature Algorithm: sha256WithRSAEncryption
2e:83:fb:f5:5c:f9:3f:ce:46:36:40:e7:24:2d:82:7b:0d:5e:
76:36:8d:d0:92:b1:a4:30:d5:8f:24:fe:62:97:55:49:29:2f:
27:38:15:e8:eb:a0:1f:25:55:15:b3:25:22:d0:86:7f:cc:c6:
74:6c:20:01:46:74:36:72:4f:28:09:34:81:40:38:f0:15:b2:
da:61:6d:ce:89:a0:aa:72:c1:26:91:42:55:ce:44:b6:72:77:
bc:94:56:b4:04:ff:47:f2:b0:f3:57:82:6d:8f:8d:5f:e3:a1:
13:c3:c1:88:86:88:bd:fa:49:fa:e4:67:53:2c:7e:df:ac:03:
da:13:8e:77:b4:78:a2:0c:87:5b:54:3e:27:51:0d:5b:c6:9c:
df:f2:b3:95:02:5a:ed:fa:bd:97:f5:e9:38:63:b7:3d:7e:c4:
24:f1:35:8f:f1:99:d9:a8:7d:2b:b0:5e:46:4b:26:c7:16:d7:
bd:61:40:31:24:af:2f:3f:3f:98:48:c1:9e:c4:fe:a9:56:20:
3f:de:1f:c3:dc:a7:b8:d1:e5:4d:ad:1c:d7:be:72:f3:5f:6f:
b6:71:43:fe:7e:52:86:de:61:82:5d:f7:51:66:b0:56:bc:1a:
ea:04:80:41:75:c1:7c:7b:f5:bc:1c:29:f0:2d:52:43:bb:42:
07:d8:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:35:06 2024 by rpki-client on console-fra.rpki-client.org