Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/A_bNs5kDJ2B-UiR0QXK_GvLPWQc.roa
File: A_bNs5kDJ2B-UiR0QXK_GvLPWQc.roa (raw, json)
Hash identifier: 8rjaAjgEnVIuqvwC0WDrfKUEOlKSg9EM5fs95YrR7Z0=
Subject key identifier: 03:F6:CD:B3:99:03:27:60:7E:52:24:74:41:72:BF:1A:F2:CF:59:07
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 018CC56EE03BEA1F575BDC295DCCD0AFB4E3
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/A_bNs5kDJ2B-UiR0QXK_GvLPWQc.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 5.198.138.0/24 maxlen: 24
5.198.139.0/24 maxlen: 24
5.198.137.0/24 maxlen: 24
5.198.141.0/24 maxlen: 24
188.92.139.0/24 maxlen: 24
188.92.138.0/24 maxlen: 24
83.137.212.0/24 maxlen: 24
83.137.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e0:3b:ea:1f:57:5b:dc:29:5d:cc:d0:af:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f6cdb3990327607e5224744172bf1af2cf5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c2:a2:16:18:7b:a6:04:de:28:83:ab:69:c1:
dd:eb:8e:8d:c8:e0:70:49:11:73:83:05:34:7f:9f:
e0:8a:11:2a:ab:e4:d4:03:25:06:7c:c2:62:6b:bc:
7e:fe:51:c8:15:d0:d0:92:92:bc:0b:b4:31:99:25:
13:3d:8e:71:f3:f1:a2:b1:dc:30:42:d9:6f:21:6b:
83:15:5d:f9:f4:da:f2:07:3e:a1:19:6b:bf:98:3f:
65:a1:51:6f:ad:c9:fd:90:12:54:a5:67:d5:84:86:
21:57:0a:3e:ac:98:a3:b0:f8:d6:74:fe:a1:b0:8e:
e4:d1:db:65:cf:a8:82:80:4f:c0:ce:9f:f7:f0:86:
49:f2:6b:49:31:27:5a:d8:9d:0e:aa:16:3b:bb:b4:
3b:37:50:08:0c:7b:97:a3:77:56:4b:9a:0d:d1:71:
67:4d:9a:bd:82:2b:8c:3e:e2:10:5d:da:50:06:f0:
ae:bc:5b:d7:83:44:1b:c1:17:de:3b:80:ee:90:89:
17:6e:53:9e:58:bb:a4:4b:92:de:91:48:1e:b4:ac:
a5:d7:79:6d:c5:f5:8d:c4:64:01:42:68:72:73:c6:
4c:53:f4:85:2a:54:c4:5a:2d:42:ed:9d:bc:bf:06:
b1:98:5a:a7:51:40:91:5c:4d:96:be:36:48:40:77:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F6:CD:B3:99:03:27:60:7E:52:24:74:41:72:BF:1A:F2:CF:59:07
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/A_bNs5kDJ2B-UiR0QXK_GvLPWQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.137.0-5.198.139.255
5.198.141.0/24
83.137.211.0-83.137.212.255
188.92.138.0/23
Signature Algorithm: sha256WithRSAEncryption
93:98:5f:fa:56:70:66:da:6e:1b:60:f3:6f:8a:95:e0:c2:a8:
ad:75:d5:e2:ea:e0:cc:33:c8:86:9e:e1:80:da:56:b9:b4:70:
e0:11:88:2e:f9:86:17:6c:a7:a7:4e:78:84:8b:e7:60:29:f2:
53:ab:eb:5e:46:25:91:53:c0:a0:7d:0a:ce:d3:2f:e0:81:9f:
b0:af:77:cf:df:43:26:95:e5:ff:b6:aa:c0:2a:36:58:57:4b:
1b:68:d8:7d:db:46:31:83:da:26:8f:d0:6e:0a:4b:bb:0a:4d:
18:a1:ae:95:4e:11:ba:2c:19:d0:4a:a0:b4:11:71:c9:c3:07:
98:7c:4b:98:51:a0:c5:69:cf:88:72:75:e8:b6:3a:b6:ac:d6:
2e:2e:91:20:71:6b:9d:e0:aa:15:03:e2:7a:5e:4c:f8:7a:ad:
ff:47:42:15:2a:bc:cb:f4:57:93:07:05:c1:31:ff:93:5f:2d:
84:b6:8c:4b:82:b0:85:60:6e:67:0d:b3:d9:94:4e:d6:48:e4:
50:47:b1:3f:4e:5c:fc:aa:11:cc:ae:0c:39:cb:e4:e3:0c:45:
2f:07:98:54:9f:3b:57:7c:62:d2:e9:9c:ca:34:68:98:e2:af:
6d:f1:65:72:3b:1d:2c:31:84:43:1a:1d:a5:fa:a4:f4:99:b5:
d8:f1:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:47:14 2024 by rpki-client on console-ams.rpki-client.org