Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/5YR_kymiZbWcfWOKquvEyTs5nQw.roa
File: 5YR_kymiZbWcfWOKquvEyTs5nQw.roa (raw, json)
Hash identifier: LQidRgec4iYRduXeYeTJHtcVdSIoSFkpBb8F3O6Co+w=
Subject key identifier: E5:84:7F:93:29:A2:65:B5:9C:7D:63:8A:AA:EB:C4:C9:3B:39:9D:0C
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 019290DE2A23A98ECAC27E2C89468E6B5B71
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/5YR_kymiZbWcfWOKquvEyTs5nQw.roa
Signing time: Tue 15 Oct 2024 15:48:51 +0000
ROA not before: Tue 15 Oct 2024 15:48:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 185.186.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:de:2a:23:a9:8e:ca:c2:7e:2c:89:46:8e:6b:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Oct 15 15:48:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5847f9329a265b59c7d638aaaebc4c93b399d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:9a:b0:32:c7:88:57:34:4c:be:e2:8a:8c:
62:e8:06:33:6a:d3:fb:6a:d6:0a:a5:91:d0:e5:49:
d1:14:a9:24:3d:08:a4:3b:71:e9:25:9a:3e:a9:64:
04:77:ca:08:9c:f7:d6:03:10:0a:39:8f:12:66:ec:
f3:36:b7:cf:d8:ae:71:27:d0:f9:e5:34:18:a2:e9:
51:2f:07:dd:f6:d4:0d:ae:1f:ef:de:f6:f3:d5:79:
a0:ab:8b:fb:3d:83:d2:f3:9e:42:63:c5:5f:a8:a3:
08:24:28:45:2f:64:4f:ae:93:5b:d4:f7:b7:f3:e6:
71:55:ca:10:44:60:3f:86:3b:c0:a1:93:84:73:4f:
9c:e6:5e:d4:90:68:34:18:a7:c0:97:27:e7:2e:08:
fe:e8:21:c4:0d:0a:13:3d:16:13:98:4b:f6:07:a4:
05:d6:ae:36:14:5c:26:09:94:db:a0:5c:72:1e:c2:
c6:94:6c:c4:28:b9:60:c3:a9:cd:f4:9b:71:9c:d2:
02:a8:5f:42:8e:28:8e:37:ab:23:28:a0:c7:00:7c:
e5:20:32:6c:4a:a5:bd:45:7d:28:37:c4:37:e8:33:
37:ec:14:41:83:6b:ac:c7:6f:6c:57:ef:83:1e:b8:
5f:a1:1a:a1:6b:02:1c:66:2c:d6:42:1d:6e:dc:0e:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:7F:93:29:A2:65:B5:9C:7D:63:8A:AA:EB:C4:C9:3B:39:9D:0C
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/5YR_kymiZbWcfWOKquvEyTs5nQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.76.0/24
Signature Algorithm: sha256WithRSAEncryption
93:18:33:bb:8e:1e:3c:51:ee:3b:2d:5c:76:42:a9:92:5c:4c:
b7:7d:03:ab:c6:77:66:ae:7f:5f:b0:41:5c:14:8d:9f:e4:d1:
dd:43:a7:f2:10:b5:a6:92:38:52:96:5f:36:ec:7e:a8:f6:b3:
59:94:b9:49:6e:0e:bd:98:90:56:d6:8c:e8:fb:59:35:3f:7c:
c3:e2:65:b3:c0:d0:e5:8f:55:ee:06:a1:6b:4a:34:47:6a:e9:
ba:ed:b4:ed:bb:86:60:68:9f:91:7c:6a:0d:ef:76:24:a7:b0:
2a:2d:47:73:ed:b0:b6:1f:bb:5b:e4:6e:3c:94:20:88:c4:85:
ff:cd:b0:85:27:dc:f2:8f:9e:09:52:e3:91:cc:f5:f6:28:53:
7d:d4:3a:53:d3:81:6f:51:e7:be:7f:b6:44:74:5b:32:62:fa:
f1:e1:a1:af:26:d5:7b:61:9e:e0:13:48:57:f9:1d:83:ac:38:
b4:b8:7f:c9:5a:d5:ae:d7:e8:4a:0a:9d:97:af:91:ad:98:38:
51:cc:67:45:3e:65:e4:d9:9e:95:f8:8c:86:6f:3f:53:5b:df:
d2:6a:d6:ae:a9:d1:96:0b:da:97:88:44:1a:3f:ee:61:2f:45:
09:3e:4f:00:68:48:1f:35:5c:4e:a9:9a:fb:20:2d:54:20:63:
60:29:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:00 2024 by rpki-client on console-fra.rpki-client.org