Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xBBrT8qDFCEkvBjCaHh64ByfEL8.roa
File: xBBrT8qDFCEkvBjCaHh64ByfEL8.roa (raw, json)
Hash identifier: ugASb9E2nkKhExBiCI6TgxYUvYUwQdrQCWJj6REKw58=
Subject key identifier: C4:10:6B:4F:CA:83:14:21:24:BC:18:C2:68:78:7A:E0:1C:9F:10:BF
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 018F4C5AEA610F1897DF721F64F91C5F51CF
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xBBrT8qDFCEkvBjCaHh64ByfEL8.roa
Signing time: Mon 06 May 2024 05:22:57 +0000
ROA not before: Mon 06 May 2024 05:22:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60485
IP address blocks: 5.157.38.0/24 maxlen: 24
5.157.57.0/24 maxlen: 24
37.203.209.0/24 maxlen: 24
91.108.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:5a:ea:61:0f:18:97:df:72:1f:64:f9:1c:5f:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: May 6 05:22:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4106b4fca83142124bc18c268787ae01c9f10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:49:c5:a6:36:17:ab:2f:43:c7:f3:b2:2c:
05:23:b7:7f:19:8e:90:87:b4:60:af:f3:9c:d0:f0:
2c:9d:4a:bc:ae:a8:e3:43:1d:0a:c0:e3:d1:3e:d3:
81:9b:db:9c:d7:84:05:4f:8f:08:1d:c9:92:ba:5d:
be:2e:0d:9b:18:64:c6:d6:be:96:29:36:2a:2d:da:
9a:07:89:a6:69:0e:6e:9a:36:18:75:e6:03:6b:a7:
fe:fa:79:ec:79:2a:49:5b:b4:e1:9b:d5:55:b3:6d:
3f:01:42:a0:fd:99:be:1e:c2:99:ef:13:3b:96:28:
72:05:7d:a3:a9:b2:d1:7c:a5:7f:4d:09:48:47:3a:
6d:eb:f6:31:ba:ff:82:4d:3e:76:8f:7f:0b:0f:72:
c7:f9:87:61:0b:82:55:85:2d:26:b1:aa:dc:3e:36:
38:6e:49:5b:4c:49:5f:c2:44:81:4b:dc:e9:0b:fe:
63:b5:e9:30:9c:67:1b:26:83:e1:b1:e1:61:79:95:
2c:e0:fa:a4:04:a6:55:64:79:dc:ea:0e:6e:20:9b:
e3:da:8a:32:84:b1:be:5c:f9:f3:c2:c1:37:7d:61:
b6:58:9c:de:67:d4:df:48:78:91:f9:d9:fa:b2:cc:
16:2b:cc:8e:f8:64:61:89:68:66:a1:60:1d:f1:cb:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:6B:4F:CA:83:14:21:24:BC:18:C2:68:78:7A:E0:1C:9F:10:BF
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xBBrT8qDFCEkvBjCaHh64ByfEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.38.0/24
5.157.57.0/24
37.203.209.0/24
91.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
54:65:5c:26:49:07:f3:e6:be:54:45:65:5a:45:80:27:15:57:
fb:58:cb:b0:ba:af:0c:38:5b:0c:1c:6d:88:e3:81:95:39:f0:
bf:d0:d1:57:f9:29:b1:0b:15:ae:ec:11:e4:08:0b:fe:13:fe:
ca:f7:98:fa:29:1c:00:63:83:1f:08:15:90:f9:b1:42:27:f0:
27:f3:5e:b6:4f:2b:c6:b5:70:cf:7b:3e:c3:ce:49:b4:5b:d8:
f4:5d:97:bd:04:3f:43:f8:03:79:75:ac:4e:ad:d6:e8:b9:29:
47:25:f6:2a:f8:26:f5:ee:c5:77:8b:23:12:45:9a:e6:f0:91:
d1:53:b4:15:60:e9:99:cc:f5:43:59:a5:74:64:c6:a5:a8:8d:
0f:cf:4d:a0:03:ab:f6:74:31:29:52:50:88:7c:e5:2d:4b:d2:
43:b5:91:98:e1:8f:20:82:3d:ac:ea:2b:62:6f:90:47:a8:a5:
eb:55:b0:70:69:21:e9:22:a7:48:f3:46:61:2c:10:d4:37:64:
a9:4b:dd:e9:26:63:20:30:cc:12:68:27:df:4b:59:07:98:5f:
bd:0c:f8:39:cf:4c:1a:88:e7:b2:10:0b:4f:01:fd:cd:b6:d1:
eb:f6:bf:05:49:a1:2d:36:c0:27:d6:e2:4e:e7:4b:4f:1d:ca:
13:05:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:27:57 2024 by rpki-client on console-fra.rpki-client.org