Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5U4Wj3MjH6OsuWQ2TNVC8M90Bxc.roa
File: 5U4Wj3MjH6OsuWQ2TNVC8M90Bxc.roa (raw, json)
Hash identifier: 0IK10evMNoNLqwAKM79jMZ54r3ngdrOiZ7Cyd1VPMDY=
Subject key identifier: E5:4E:16:8F:73:23:1F:A3:AC:B9:64:36:4C:D5:42:F0:CF:74:07:17
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018CC3489A886E65D5297E5693CFD51E8A53
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5U4Wj3MjH6OsuWQ2TNVC8M90Bxc.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.243.0/24 maxlen: 24
212.116.252.0/22 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:88:6e:65:d5:29:7e:56:93:cf:d5:1e:8a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e54e168f73231fa3acb964364cd542f0cf740717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:18:35:a8:bb:50:83:a9:83:0c:56:b3:9d:
53:88:0d:28:9f:d6:d9:05:b9:5c:42:bd:95:35:33:
cd:68:72:43:77:12:66:0f:79:61:19:96:92:85:55:
d4:f7:29:bf:5c:fc:e3:d4:70:7e:3f:4a:02:82:f7:
f1:4d:d5:03:47:2b:95:ef:cf:76:95:2c:49:f4:71:
8e:58:c5:c6:da:2a:bf:08:23:41:5d:a8:ce:b8:2e:
8c:89:44:f4:af:6b:b3:1e:29:5c:77:03:be:60:c4:
71:e8:53:fb:45:55:ef:ab:45:28:b1:96:75:c9:ff:
d2:55:e9:41:5d:eb:a7:1b:29:55:0f:d9:df:61:57:
40:dd:ab:45:e5:d3:37:95:e8:07:77:c7:79:89:d6:
11:c3:8f:d9:59:f0:7c:8a:11:df:92:18:01:1e:68:
4c:e4:09:f2:06:fa:00:8a:b8:f6:1b:ad:47:26:35:
35:0a:c0:0c:0d:d8:64:ad:f2:f1:d7:ed:21:57:74:
a8:a5:c6:c3:6e:6a:17:0d:05:e8:c6:15:04:3e:a3:
31:64:fb:b0:d0:aa:76:b2:8b:87:6e:45:de:55:13:
f3:96:3b:d1:ea:02:0f:d4:eb:18:2a:f6:8e:d8:5f:
3e:92:e2:11:4f:25:b4:c0:f0:5d:28:ca:d7:d4:26:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:16:8F:73:23:1F:A3:AC:B9:64:36:4C:D5:42:F0:CF:74:07:17
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/5U4Wj3MjH6OsuWQ2TNVC8M90Bxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
212.116.243.0/24
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:5b:f1:7d:eb:70:46:92:f9:28:df:03:d9:24:fa:54:07:d0:
9e:66:35:71:86:8e:6e:6d:9a:38:69:d0:e0:07:a4:d4:f6:63:
da:a8:df:c2:ba:c3:6a:8e:52:15:88:45:f1:e0:4a:91:f9:f8:
20:b4:95:7a:93:71:1d:95:3e:70:e1:b9:38:16:43:e0:17:46:
48:15:6f:8e:7d:b8:60:3d:0f:07:a2:00:5f:a2:e8:c9:59:29:
3b:b2:7e:b8:a0:d2:8a:7b:e1:a0:57:30:af:03:1d:b6:79:3d:
7c:7f:60:ad:74:de:87:e5:bd:66:29:39:6b:42:56:ac:e6:72:
57:f1:09:6d:35:bc:8f:33:4d:e5:05:72:04:a2:9f:d2:8f:48:
f3:13:9d:9f:30:2e:a5:6a:38:1f:17:1a:29:d4:14:6e:1b:e3:
d5:e1:de:95:60:03:03:e3:eb:9f:ac:e7:06:fe:9e:9c:d8:08:
34:3d:61:35:74:f6:3d:c8:95:44:d2:bd:47:3c:09:12:a2:cd:
19:07:c6:5e:c1:8a:04:72:f5:df:fa:60:f1:2d:3a:ac:3e:be:
39:8c:2b:f7:47:12:8c:51:4f:64:f7:8f:29:fe:1e:56:db:5e:
1a:c6:a6:86:a8:d4:2b:93:bf:bc:7d:02:0b:4a:6d:c9:3f:3d:
dd:c9:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:08:26 2024 by rpki-client on console-ams.rpki-client.org