Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/5zDBuWknuhDeRZJnRTTOM-VRpjU.roa
File: 5zDBuWknuhDeRZJnRTTOM-VRpjU.roa (raw, json)
Hash identifier: FmSPOfIZMbclLZEA/pVEg+PZj1rTZ+iHlkxcpz3LgKI=
Subject key identifier: E7:30:C1:B9:69:27:BA:10:DE:45:92:67:45:34:CE:33:E5:51:A6:35
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 018CC26D510D3181E4102911C48D2F264DA3
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/5zDBuWknuhDeRZJnRTTOM-VRpjU.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59510
IP address blocks: 185.1.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:51:0d:31:81:e4:10:29:11:c4:8d:2f:26:4d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e730c1b96927ba10de4592674534ce33e551a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:0d:b0:10:59:9f:80:db:6b:3c:47:58:3a:
46:90:31:6f:9a:85:00:c8:15:02:b1:94:e0:d7:e8:
71:b6:9f:5f:b7:59:73:b6:96:47:cc:56:98:f8:62:
e2:54:5e:f0:38:a2:0d:76:58:7e:2a:46:9f:14:0a:
6d:64:92:02:2e:bf:f0:de:8d:46:93:7f:70:61:03:
35:e2:fd:0d:5a:74:47:d2:22:3d:27:8e:2e:2c:7c:
e4:82:06:dd:5c:ef:9c:fb:c5:90:bb:c6:80:4a:d0:
02:67:e7:59:d4:35:d6:33:03:3e:fd:7f:fc:d7:fa:
b2:ea:7d:d8:51:9c:f0:eb:cb:b1:aa:c4:67:aa:4c:
2f:2f:8c:5d:7b:c1:42:fc:7f:a2:7b:4a:8d:49:c7:
60:d2:a5:e0:6e:6e:12:03:6e:6b:a8:7e:5f:78:ab:
f6:00:2a:61:c4:1d:95:11:e3:66:ca:62:a5:5e:4f:
a9:90:d5:a5:e3:05:50:03:64:ec:b8:24:e8:11:b7:
1a:e9:56:6b:d7:a6:48:18:18:3c:ec:84:e8:40:66:
d9:52:1d:a5:45:4f:17:ff:29:56:88:f1:d1:2a:fb:
f3:5b:74:3c:4f:54:c9:8f:fa:97:e1:f4:c5:a3:e5:
0b:65:6b:15:68:94:cf:75:df:2d:91:2d:95:37:89:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:C1:B9:69:27:BA:10:DE:45:92:67:45:34:CE:33:E5:51:A6:35
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/5zDBuWknuhDeRZJnRTTOM-VRpjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.221.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2e:f7:9e:59:2d:e4:32:aa:63:c6:9c:fd:b7:2b:84:ea:d7:
75:cd:b5:59:ea:23:91:aa:d4:ce:ac:a1:e0:96:1b:be:c1:70:
fd:cb:40:95:94:0c:56:b9:da:ec:60:5e:ab:7c:0b:c0:2b:b3:
28:13:87:5b:5f:fa:e7:62:8c:e4:35:9f:ee:71:c5:c8:f2:49:
29:07:0b:90:b5:ce:44:b8:a4:6c:c0:c9:75:74:ce:f2:3e:a1:
d5:e4:58:c9:d7:65:d5:84:14:bd:d9:63:6c:57:48:0f:67:30:
64:0d:5c:40:57:ef:b1:f6:e5:5e:05:71:e0:80:69:70:d3:ba:
f9:ee:37:8e:66:f3:b4:33:8b:21:47:9b:ba:0a:7e:e0:83:2e:
cb:c0:73:48:4c:de:69:dc:09:12:be:1a:30:11:7e:b0:d6:25:
a2:1b:e0:1f:8c:71:1b:ce:c4:33:bc:70:1f:35:a8:ea:36:55:
d4:0a:3c:2b:ed:1a:ab:31:3e:77:52:13:b2:8e:48:33:da:59:
ce:b5:43:20:d2:be:9a:b4:cc:70:fe:d7:56:32:77:1d:d6:3d:
7a:40:ac:ee:49:63:ef:75:06:54:93:40:fb:27:7a:ff:a4:68:
29:6a:aa:1c:dc:e1:52:8b:78:4f:87:80:c6:51:2a:cf:71:96:
90:6a:7a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:05:11 2024 by rpki-client on console-fra.rpki-client.org