Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/X5WodBu3Me40y58jT9DgXkn1quI.roa
File: X5WodBu3Me40y58jT9DgXkn1quI.roa (raw, json)
Hash identifier: 3Ux0oyp+2KFx72lcCbMaI/bInQzpCCbNZvrymtK0yVM=
Subject key identifier: 5F:95:A8:74:1B:B7:31:EE:34:CB:9F:23:4F:D0:E0:5E:49:F5:AA:E2
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 018CC870B3E9CF1AB15CB9C4E1D89DF387F1
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/X5WodBu3Me40y58jT9DgXkn1quI.roa
Signing time: Tue 02 Jan 2024 04:31:18 +0000
ROA not before: Tue 02 Jan 2024 04:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 185.122.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b3:e9:cf:1a:b1:5c:b9:c4:e1:d8:9d:f3:87:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 04:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f95a8741bb731ee34cb9f234fd0e05e49f5aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:c5:f0:b5:c2:b1:fe:36:6a:c6:c9:3d:b7:
b6:15:d5:77:73:32:aa:60:52:d7:3f:e0:ef:df:45:
ec:cd:0b:a0:e7:9f:b5:36:10:0c:d0:52:af:64:5f:
d0:15:05:9a:b3:49:b5:1b:95:91:54:bc:ad:e0:b1:
71:c4:9d:f5:77:f0:ca:a7:0f:4d:9b:14:2c:21:ca:
1b:4d:31:5e:00:38:87:91:3a:b4:e5:38:35:21:cd:
10:84:2c:f6:9b:6c:1e:17:31:ca:47:38:5b:8d:e3:
2a:91:56:09:b9:a3:32:b5:c1:88:93:ee:13:a1:6c:
b9:ef:95:27:bc:ca:d5:d9:e7:df:0c:c1:8c:b6:d2:
aa:14:68:96:43:1c:76:1d:16:87:66:a1:8e:99:31:
df:87:55:cf:bd:8e:84:58:0b:64:fd:fc:ee:1a:81:
3a:6c:4a:22:48:65:91:c2:60:ac:22:50:f7:22:c9:
d4:77:5d:de:2b:6e:6f:af:18:62:13:e9:41:ba:70:
fa:43:79:ee:ba:98:7e:6b:fa:84:95:fa:1f:5a:41:
97:9f:cf:4d:2f:58:e9:ab:23:2c:0b:f1:3d:b2:ef:
75:7b:27:ea:df:8e:58:a8:32:58:63:e7:dc:e8:d7:
d4:9f:e7:a1:4f:33:52:a2:26:7e:c9:76:0d:09:11:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:95:A8:74:1B:B7:31:EE:34:CB:9F:23:4F:D0:E0:5E:49:F5:AA:E2
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/X5WodBu3Me40y58jT9DgXkn1quI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:69:a9:fc:18:53:5e:68:60:39:0f:38:2e:60:5e:78:9e:3b:
2d:6e:b8:91:e5:7d:0e:5f:bd:1d:fa:87:0e:f5:48:0e:46:d3:
67:33:27:8a:bf:8f:78:73:62:a1:12:85:f4:7a:8e:f3:1a:6f:
51:f8:79:e6:c1:90:c2:1d:e2:b7:08:7e:e3:c6:52:fc:ac:79:
3c:fc:4b:86:bc:cd:49:0f:cc:d4:d0:98:88:15:fe:8d:36:c1:
43:07:3d:8f:bf:1d:cf:49:44:4b:be:1e:8a:35:dc:0a:10:c5:
39:05:54:54:90:c8:e2:be:09:b6:7c:f9:d6:bb:65:76:52:37:
b4:3f:7b:cf:9f:86:c6:6b:ff:6e:df:75:9f:ab:27:79:c7:c1:
8f:b3:6d:16:4c:05:e0:41:f5:7c:ca:6a:07:87:f8:e8:41:c9:
c3:6f:73:dd:22:70:1e:b9:ac:5d:49:d5:05:2f:49:46:a6:32:
59:c3:30:33:93:b9:e4:3e:15:ab:04:67:5f:cb:ce:7a:5d:04:
00:27:ed:67:10:1a:05:14:11:3d:79:5c:c1:ed:46:24:f4:a6:
32:8c:0f:70:1c:6c:f9:ac:bd:78:32:4c:72:41:e9:c9:33:68:
bf:fe:bb:84:05:5f:8a:f3:e7:48:16:66:5f:9d:ce:4b:58:4f:
2c:a5:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:43:05 2024 by rpki-client on console-fra.rpki-client.org