Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d5KqPBjH8tOTMF7dD0mD3W_E7V8.roa
File: d5KqPBjH8tOTMF7dD0mD3W_E7V8.roa (raw, json)
Hash identifier: hH68HCi/3A4IUoc7xUiiKvz1okERo+1gH5cO6pIFdTg=
Subject key identifier: 77:92:AA:3C:18:C7:F2:D3:93:30:5E:DD:0F:49:83:DD:6F:C4:ED:5F
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 018DB7065574D778160CCEC1D4D73D7329AE
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d5KqPBjH8tOTMF7dD0mD3W_E7V8.roa
Signing time: Sat 17 Feb 2024 12:24:22 +0000
ROA not before: Sat 17 Feb 2024 12:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205007
IP address blocks: 138.124.31.0/24 maxlen: 24
138.124.126.0/24 maxlen: 24
138.124.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b7:06:55:74:d7:78:16:0c:ce:c1:d4:d7:3d:73:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Feb 17 12:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7792aa3c18c7f2d393305edd0f4983dd6fc4ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:12:08:ef:f4:89:be:0d:f5:71:63:98:e2:
cc:df:c9:f3:f0:6e:30:b9:6a:6b:11:99:0a:8d:79:
ee:93:a7:74:d7:93:2c:e9:f2:08:7d:4b:72:ca:90:
fc:de:00:aa:31:bd:49:8b:a6:eb:ad:ea:16:88:9f:
ee:5d:bf:82:9e:d1:f3:7a:bf:04:ba:25:56:5b:7d:
e6:f7:4c:d7:47:b8:9b:68:b4:25:58:85:d0:5d:6a:
9d:45:2e:6e:4f:45:d9:a4:0b:e3:71:03:d8:18:e4:
b1:f8:9a:62:04:8e:a1:b5:31:c4:d3:e5:78:84:ac:
94:0f:7c:c9:e6:24:68:a8:02:80:6e:ad:b0:a1:11:
78:4d:5a:63:4b:44:27:eb:c3:f4:5f:64:1c:7f:9c:
ff:d8:11:4c:20:8b:13:e2:d1:7b:23:72:29:82:ce:
03:84:87:5a:8f:a5:44:28:da:54:93:0e:a6:c3:3b:
01:b0:8e:74:21:2f:26:62:5f:8a:ad:26:5a:50:e0:
55:e5:c7:b4:bd:a5:76:6c:56:c7:8d:a5:e4:cf:f5:
36:c9:ef:7b:c5:83:f6:38:18:6a:38:be:4c:9d:4f:
08:7d:0c:fb:9f:e2:eb:a9:d1:47:1b:7c:11:c0:17:
b2:f7:12:44:c9:a0:14:b4:b5:3a:44:44:cc:f5:e4:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:AA:3C:18:C7:F2:D3:93:30:5E:DD:0F:49:83:DD:6F:C4:ED:5F
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/d5KqPBjH8tOTMF7dD0mD3W_E7V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.31.0/24
138.124.126.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ab:42:6d:0c:b1:ed:c2:c5:70:1a:26:08:7f:2a:ca:1d:9e:
e7:c3:77:78:70:80:c4:b6:cf:54:32:a3:c0:70:97:f2:fd:92:
30:f3:d3:ff:89:4c:97:85:b1:95:b9:54:1e:52:c6:72:93:62:
db:e6:4c:bb:f4:52:b8:bb:f2:e8:36:5c:4b:1e:d9:e2:a2:0c:
a6:f6:e1:a5:23:5a:2c:5f:70:41:37:af:aa:1b:00:51:13:4e:
03:ec:74:52:a6:5e:61:a1:08:87:98:7f:16:cb:3d:1f:b5:a6:
a3:4d:8c:3c:56:ce:59:64:65:70:e3:33:2d:04:00:4f:fc:b3:
c5:d2:80:06:db:3a:68:c2:58:f2:e1:b3:47:f7:b9:b5:8c:50:
67:e8:9e:f9:ac:3f:c9:1b:ff:d8:0b:26:fc:19:6f:eb:d8:0d:
4e:0c:10:40:d9:53:64:44:45:ed:e2:ca:03:0f:36:fc:75:fa:
4d:c7:4c:e6:c5:6d:82:2c:e7:bd:5f:b3:5b:a6:b8:c4:b2:a5:
62:a8:c3:ff:f5:b0:4d:ae:22:c0:83:3c:63:9e:a0:f2:e2:0d:
38:f9:09:5e:61:1c:25:c1:3b:dd:f6:48:be:34:8e:4b:06:a8:
47:dc:55:72:71:38:c1:d3:e9:e9:f0:36:40:14:1d:d5:79:23:
79:1c:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:25:58 2024 by rpki-client on console-ams.rpki-client.org