Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/pb5FmiRkNVW6y22OEN2oeyKJBCA.roa
File: pb5FmiRkNVW6y22OEN2oeyKJBCA.roa (raw, json)
Hash identifier: 88mho5B2SpplEJZUSVe+jSvMcK6YSNo48kFLsketoy0=
Subject key identifier: A5:BE:45:9A:24:64:35:55:BA:CB:6D:8E:10:DD:A8:7B:22:89:04:20
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 018CC8014EB5181A069C24139D326122C08E
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/pb5FmiRkNVW6y22OEN2oeyKJBCA.roa
Signing time: Tue 02 Jan 2024 02:29:37 +0000
ROA not before: Tue 02 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207344
IP address blocks: 185.179.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4e:b5:18:1a:06:9c:24:13:9d:32:61:22:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Jan 2 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5be459a24643555bacb6d8e10dda87b22890420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:eb:ba:2a:ce:22:5d:4a:75:17:9c:07:07:
36:2a:0e:76:8c:b8:0c:63:6f:86:a4:60:8e:39:b2:
d1:c1:b0:73:01:ea:e2:c0:64:e2:ca:15:61:0c:8b:
b9:f6:7b:64:ee:da:bd:4e:b7:48:41:53:64:b3:07:
8a:68:d5:eb:4f:e6:13:e0:1e:4e:34:e1:14:d0:e5:
b2:3d:32:f5:8b:7e:19:6d:e8:3b:b2:6c:97:85:1e:
94:31:47:7c:10:05:bc:5b:22:24:ec:db:80:fe:ce:
6a:bc:7b:82:58:4b:55:dc:37:15:d1:06:40:6a:f7:
f2:ee:78:b9:00:0b:1f:8d:6f:83:c9:a3:24:4c:13:
35:f5:0f:42:bf:4a:3d:04:67:2c:24:8c:55:85:e7:
74:a6:9c:86:0f:ba:50:73:dd:8c:20:62:c0:6b:df:
e4:ab:16:c5:17:fa:41:cc:44:db:1f:41:75:41:33:
61:36:20:08:c7:e3:0b:91:05:37:b5:67:e6:98:c1:
b6:80:40:1f:6a:ce:b9:55:6b:ce:e7:3f:39:ca:83:
30:8a:13:6a:a1:06:5d:bc:05:fd:a6:87:f0:42:45:
d0:67:39:8c:49:52:11:e7:df:f0:73:87:f7:c6:94:
fd:d4:79:ea:f1:58:a9:28:bc:8c:20:20:82:6a:4e:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:45:9A:24:64:35:55:BA:CB:6D:8E:10:DD:A8:7B:22:89:04:20
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/pb5FmiRkNVW6y22OEN2oeyKJBCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.87.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3d:f4:49:1b:37:e6:c5:94:fb:25:64:80:83:10:0b:fd:ac:
2b:a8:0f:40:64:f5:f9:be:5e:5c:f5:26:c1:e2:a3:93:43:14:
91:26:24:5f:99:94:14:19:c5:7a:d9:a7:23:73:b5:c2:fe:c8:
1e:18:6c:99:ec:98:08:ad:7f:4c:6c:a7:e6:da:cb:44:f2:8c:
54:09:32:32:00:2f:1a:c6:39:51:de:2e:9a:5e:9e:4a:b6:f8:
47:f6:84:ff:0b:be:e1:5d:d0:0a:9b:84:1a:c5:6e:26:f4:ad:
57:ce:24:1c:80:cb:dc:2d:61:6e:67:95:f9:f0:c6:47:ba:78:
e5:1e:66:0d:d2:94:b9:30:53:1e:68:90:09:62:1a:5f:b7:86:
9f:19:1a:ed:96:39:c1:0f:4d:e1:ba:93:b3:9b:f5:f2:c2:8d:
22:f5:ef:ce:1c:ad:b0:96:fe:59:bc:9a:99:13:a4:27:a8:be:
a4:4e:f3:19:eb:0d:fe:79:9f:14:38:05:e5:eb:f3:9c:4a:2e:
48:5f:43:9c:d8:7f:1a:a7:2e:d0:27:2a:2c:68:a5:8c:bf:dc:
aa:06:d8:5c:26:0d:26:77:cd:c7:c8:71:8c:92:aa:59:ad:cf:
e4:b7:65:32:7e:10:5f:3b:0b:49:3d:a2:06:1b:7f:9f:54:06:
cf:4d:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:11:42 2024 by rpki-client on console-fra.rpki-client.org