Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/unahcy51J5L-q0G1yENIhaaqPCQ.roa
File: unahcy51J5L-q0G1yENIhaaqPCQ.roa (raw, json)
Hash identifier: gdXJg7j3FSUG6KMki5pJ/BlJ6STZrUqApemtIjnQEwA=
Subject key identifier: BA:76:A1:73:2E:75:27:92:FE:AB:41:B5:C8:43:48:85:A6:AA:3C:24
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 018CC348E03C896086B3A3141BCF9CB9F78D
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/unahcy51J5L-q0G1yENIhaaqPCQ.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41039
IP address blocks: 92.242.96.0/19 maxlen: 24
195.184.192.0/19 maxlen: 24
128.0.93.0/24 maxlen: 24
5.153.176.0/23 maxlen: 23
5.153.179.0/24 maxlen: 24
5.153.178.0/24 maxlen: 24
5.153.181.0/24 maxlen: 24
5.153.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e0:3c:89:60:86:b3:a3:14:1b:cf:9c:b9:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba76a1732e752792feab41b5c8434885a6aa3c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:9c:19:d2:6e:62:03:8a:88:91:46:43:29:
ce:d7:f9:20:c3:34:87:a8:ee:dd:21:24:9f:2e:84:
7d:98:87:5a:24:ac:3d:0c:16:43:e5:a2:81:a5:bf:
84:ef:66:79:5c:44:aa:e0:4a:0c:b2:e6:f2:fc:2b:
5c:c1:2c:cf:02:10:9f:ac:1f:3c:54:a3:4d:c4:04:
8c:07:ba:77:27:6e:66:86:b0:31:1a:24:06:2d:98:
de:4e:35:d5:35:ef:09:a0:3a:d1:15:b0:95:56:95:
65:70:3d:5e:97:97:98:b8:79:43:35:aa:97:32:88:
4e:9b:7b:00:ee:ed:02:e5:d0:fb:e3:79:59:24:f8:
92:91:44:6e:9e:0e:36:74:bd:b5:0d:b1:76:23:ec:
de:5e:df:70:48:a7:3f:28:83:cc:e6:f1:2e:bd:0e:
93:34:0b:e6:86:4a:55:52:ed:de:6e:da:c7:d1:f6:
f8:87:31:e4:d8:ce:cb:d2:c8:51:e6:28:f4:54:7b:
6a:ae:3b:0b:50:2a:f7:1c:57:2c:67:1e:1c:49:6e:
8f:5c:8f:07:96:fc:70:df:99:51:b9:a5:02:46:f6:
52:40:ed:74:43:fe:38:b9:46:83:f9:5f:68:f0:7d:
51:1d:ee:17:32:74:44:c5:a4:c8:11:36:70:dd:fe:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:A1:73:2E:75:27:92:FE:AB:41:B5:C8:43:48:85:A6:AA:3C:24
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/unahcy51J5L-q0G1yENIhaaqPCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.176.0/22
5.153.181.0/24
5.153.185.0/24
92.242.96.0/19
128.0.93.0/24
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
38:12:e7:3f:ef:32:0a:84:52:8c:24:60:ee:8d:26:82:f3:55:
b1:23:35:3d:1f:13:d0:03:39:3b:27:3f:a9:4c:b3:5a:7f:37:
f9:03:12:17:cb:e5:74:06:89:ef:1f:2b:1c:84:17:2c:bc:15:
43:3e:72:3b:59:c5:36:5d:77:f8:52:db:e9:5b:99:dd:76:7b:
9f:5e:69:8a:4d:6d:f2:79:8d:97:62:03:4e:b8:5e:b8:43:65:
b5:ce:0c:02:cd:ee:45:bc:62:07:fe:23:cd:b6:bb:fe:2c:0b:
0e:51:68:0d:7c:80:6e:39:b1:1a:7d:67:9a:f6:2c:ab:a0:07:
86:3d:a4:8b:87:7f:6a:c8:96:04:ba:f5:f6:2e:31:6f:16:08:
b3:20:f2:1c:03:c9:37:fd:8e:78:b9:71:66:2f:ac:5a:e7:51:
dc:6e:ff:8b:8a:39:03:59:a6:01:4d:a6:f4:2c:d2:b1:53:f7:
87:71:db:81:e4:83:9c:9c:40:fb:b9:d8:6c:25:c8:3a:33:78:
42:24:2a:6d:ae:31:9b:4c:af:17:f5:e7:53:e2:0a:8b:b3:bc:
96:38:04:ef:e2:5e:b5:fe:04:d4:8d:68:31:05:2e:61:e0:92:
80:b3:02:05:a5:06:f3:ad:67:02:90:98:b4:e9:d7:52:51:ee:
a7:30:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:59 2024 by rpki-client on console-fra.rpki-client.org