Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/5O7EGZ-YPGS7LViYdkAWD94aKAo.roa
File: 5O7EGZ-YPGS7LViYdkAWD94aKAo.roa (raw, json)
Hash identifier: yhe5yjeQiEWOuuL/WG8FI6Qh7BiD146+ixWJuLj8P9I=
Subject key identifier: E4:EE:C4:19:9F:98:3C:64:BB:2D:58:98:76:40:16:0F:DE:1A:28:0A
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 018CC8DEB77DE97810CBB1E1C581949A8CCA
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/5O7EGZ-YPGS7LViYdkAWD94aKAo.roa
Signing time: Tue 02 Jan 2024 06:31:28 +0000
ROA not before: Tue 02 Jan 2024 06:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60793
IP address blocks: 193.19.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b7:7d:e9:78:10:cb:b1:e1:c5:81:94:9a:8c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jan 2 06:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4eec4199f983c64bb2d58987640160fde1a280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:47:a8:59:57:41:fa:d8:a6:69:48:86:39:
79:90:39:72:25:57:85:b4:15:73:89:40:53:d3:55:
8d:da:d4:bb:9b:89:2b:33:ee:29:97:2e:29:00:0c:
db:b3:05:25:1e:80:de:89:0c:e2:ee:d5:c7:82:b5:
f3:4a:b1:c1:36:33:95:53:51:e0:b8:90:82:42:9b:
a8:01:59:e2:f2:c1:56:40:81:63:e9:dc:b4:2e:ce:
f0:4d:de:7c:2e:9e:92:ec:1f:2a:c5:c0:97:91:03:
7d:0f:37:8d:36:bc:76:c7:61:f4:8a:af:80:54:45:
cb:20:0d:bc:94:d0:c5:51:2c:6c:3c:a1:c4:fa:16:
6c:fc:70:9e:28:e4:a3:ef:49:36:3f:2e:16:3e:c3:
57:5c:9b:15:37:b0:ac:5e:5b:39:f9:8f:de:69:32:
4e:95:36:f6:19:2c:ee:b6:67:4b:08:f9:f4:2c:bf:
03:27:17:0a:6d:8b:33:d4:ea:e3:e7:53:62:7f:f5:
cc:66:aa:9c:85:b5:a5:37:55:4b:9a:59:1e:e2:50:
62:b0:43:f3:91:dc:a0:2f:fc:5e:7a:77:35:47:89:
28:f9:07:1f:9e:fa:b2:81:c0:20:fd:54:55:ec:04:
77:6c:64:30:3b:14:fd:5c:f9:5c:d9:08:ed:6b:47:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:C4:19:9F:98:3C:64:BB:2D:58:98:76:40:16:0F:DE:1A:28:0A
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/5O7EGZ-YPGS7LViYdkAWD94aKAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:71:3e:6e:04:c9:26:88:fe:10:ff:ce:51:ad:08:05:1c:f6:
4f:ce:a9:38:49:13:31:37:e5:43:86:aa:3a:1e:98:4a:05:11:
c3:22:f0:fa:08:1c:a1:aa:70:5d:22:13:73:e6:8d:db:a4:88:
80:d7:49:39:1b:91:88:12:27:ad:c3:82:d8:f4:e4:a5:40:49:
47:a4:da:d7:69:a4:9f:60:2e:f7:22:c9:77:ee:c6:fb:a9:17:
91:c3:a2:c3:a4:34:27:e4:e2:1a:63:5f:e1:e7:bb:9b:21:ea:
27:40:6d:29:32:25:2d:78:88:5b:5a:36:25:47:36:3d:3b:75:
02:93:19:16:c6:87:46:db:54:e2:29:a7:1b:29:48:65:2c:7f:
e2:56:bf:c6:3c:99:e8:23:ae:af:6e:d1:1b:da:e9:d6:4c:f5:
cd:b6:2d:97:72:db:57:da:1d:64:d7:80:b0:45:cd:d5:de:38:
06:04:bb:58:81:15:7c:25:57:39:68:da:5d:cf:fc:b6:f1:d4:
e4:77:cd:86:9a:ab:96:3c:61:4c:94:62:58:27:3d:73:af:d3:
7b:95:73:01:ea:ce:f1:83:c3:dd:6c:a3:28:53:33:61:8e:d0:
ff:9d:78:3f:cf:38:ea:e0:21:e9:bd:33:1e:e9:a9:ca:d5:bc:
b5:5c:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:46:04 2024 by rpki-client on console-ams.rpki-client.org