Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/5P91ohjmNh5Xer15ap0YgHngsBs.roa
File: 5P91ohjmNh5Xer15ap0YgHngsBs.roa (raw, json)
Hash identifier: chYor8SkT0mKEu4IoVzh3aMhOCnktlAMLR3D/jVUIuc=
Subject key identifier: E4:FF:75:A2:18:E6:36:1E:57:7A:BD:79:6A:9D:18:80:79:E0:B0:1B
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 018DA1D5D434C6441FF3152DBF39705959D2
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/5P91ohjmNh5Xer15ap0YgHngsBs.roa
Signing time: Tue 13 Feb 2024 09:39:21 +0000
ROA not before: Tue 13 Feb 2024 09:39:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43973
IP address blocks: 195.189.100.0/22 maxlen: 22
195.189.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:d5:d4:34:c6:44:1f:f3:15:2d:bf:39:70:59:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Feb 13 09:39:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ff75a218e6361e577abd796a9d188079e0b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:96:8a:01:32:63:d7:7a:7c:bb:f0:3c:5d:
4a:7b:38:64:21:e4:a6:0e:31:79:be:12:6e:04:88:
7b:65:f5:98:11:d8:3e:a3:e8:be:c6:45:59:1b:56:
f3:66:4e:13:ee:0f:da:96:ee:96:13:7d:ff:1a:11:
6c:2e:64:c5:5c:40:a1:ca:d4:8b:94:c9:54:d7:83:
de:65:25:69:53:29:72:bb:d5:d9:d0:78:73:d4:5a:
45:3d:77:fb:d0:15:ec:75:ab:75:a4:44:1c:cd:7f:
be:24:81:0c:e0:0c:56:d3:5e:06:66:30:58:9e:1a:
5d:ac:f1:a9:63:f1:6b:75:e0:99:c3:9c:fc:3e:7d:
01:05:1f:e8:c6:cc:a3:88:93:ab:d0:b7:ea:83:5c:
52:6c:6d:6c:09:52:72:8f:45:8d:b0:b6:35:ff:e8:
d4:8e:ab:b6:c0:7c:af:0a:24:7f:4c:92:b7:98:85:
b2:47:b0:37:60:c2:e4:3a:bd:07:81:42:03:1a:94:
f8:e2:59:bd:34:ac:f8:d8:01:b0:66:fe:6e:32:f5:
06:30:1e:3a:03:b1:78:a7:e2:51:47:ee:69:a4:0c:
7e:81:7e:4a:ac:2a:bc:b6:b8:eb:28:12:90:0f:77:
1b:64:8f:57:14:e2:67:fb:41:e9:08:67:12:15:30:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FF:75:A2:18:E6:36:1E:57:7A:BD:79:6A:9D:18:80:79:E0:B0:1B
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/5P91ohjmNh5Xer15ap0YgHngsBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:89:ee:c8:b0:4c:96:19:45:7a:8e:30:f1:5e:57:19:ff:4f:
d8:40:db:22:d2:8a:38:7b:37:4d:1f:68:68:77:7d:f4:8b:4b:
38:69:e6:7d:22:08:33:73:1b:3b:16:14:5d:60:16:51:7d:a4:
7e:b3:4b:37:82:1f:0f:b1:44:48:27:e4:72:cd:25:b1:91:2b:
b1:8c:c4:e9:bc:49:bc:1c:9b:0a:07:31:e1:47:d8:fa:61:91:
25:e1:ab:16:8f:71:3b:07:db:ad:6a:3f:56:78:9b:90:fb:77:
ac:3d:a8:a5:58:9f:99:bf:43:e0:22:ef:09:6c:f1:7c:7e:ee:
ab:fd:a0:28:08:ce:26:1e:e5:c3:5c:fe:20:3f:17:25:e3:02:
28:dd:55:52:68:1e:c8:f3:01:f3:74:27:94:5f:ff:8a:a4:fd:
bc:c7:01:1d:9a:62:b0:ad:f8:e1:84:70:cc:e9:ec:57:eb:ea:
31:8b:c5:44:11:9a:31:83:a9:03:de:64:b5:8a:30:ca:70:41:
a1:9b:ff:6c:c8:cf:a1:a4:ef:d6:a5:ba:7b:45:c8:57:e9:d7:
bb:22:ac:21:bc:b5:78:ef:04:b4:e9:bc:7b:dd:a3:97:02:d1:
d2:e4:10:5a:87:34:37:5a:5e:d9:69:42:62:2b:7e:dd:18:11:
4d:92:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:49:05 2024 by rpki-client on console-ams.rpki-client.org