Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5FkLY2MkCly-7mySOnuhbSNHlog.roa
File: 5FkLY2MkCly-7mySOnuhbSNHlog.roa (raw, json)
Hash identifier: P6qockQ1RdAFxoCj5LLSxiagKZbK6XklXMKAFRKHwdU=
Subject key identifier: E4:59:0B:63:63:24:0A:5C:BE:EE:6C:92:3A:7B:A1:6D:23:47:96:88
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7A6731CC03D9ADC36326B58CBB464
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5FkLY2MkCly-7mySOnuhbSNHlog.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 176.57.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a6:73:1c:c0:3d:9a:dc:36:32:6b:58:cb:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4590b6363240a5cbeee6c923a7ba16d23479688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:7a:32:6d:5d:ef:00:90:4e:c5:28:f3:d8:
0b:2d:41:ed:5f:95:96:eb:e0:52:eb:3b:e3:ad:2c:
8c:53:2c:0c:c7:88:47:d3:5f:f3:25:84:d7:59:6e:
65:79:ff:5d:25:a5:a6:46:8a:d7:16:68:d1:c3:bd:
f6:d7:7e:4b:e6:39:c4:cf:15:c0:36:08:d5:eb:78:
0f:7b:20:e3:38:ba:89:d6:e2:36:27:a1:b2:ff:c6:
b5:e5:69:57:89:92:e5:8b:22:3b:6e:0e:21:bf:9c:
74:b7:1b:14:f8:8b:99:4a:83:f7:f2:b8:a9:80:2a:
0d:f6:9f:40:35:42:dc:ea:c7:18:8d:01:53:14:c3:
d9:92:20:89:14:4c:f5:67:27:ba:4f:5f:9d:1f:c3:
8f:af:58:84:e7:41:be:4b:05:75:11:c8:53:07:fd:
85:0b:05:09:c1:76:74:82:30:c0:59:a8:c4:a5:87:
e2:06:82:38:19:35:18:56:a3:2f:19:58:2e:34:19:
48:e5:75:d4:4f:9a:71:90:3c:60:07:88:93:58:15:
51:a6:29:dd:c5:89:61:51:73:df:9e:47:5e:f0:5c:
9f:2a:69:65:35:7d:5a:94:a2:0f:69:5f:2d:8a:ee:
2f:28:d0:e8:06:c7:d4:08:81:7a:4a:2f:00:87:b3:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:0B:63:63:24:0A:5C:BE:EE:6C:92:3A:7B:A1:6D:23:47:96:88
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5FkLY2MkCly-7mySOnuhbSNHlog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/22
Signature Algorithm: sha256WithRSAEncryption
37:bf:0a:ce:de:c6:b7:14:75:c2:eb:e7:e6:0c:92:a6:1f:19:
21:8d:c6:73:79:c3:4e:c1:e9:2c:de:75:9f:8e:8b:a1:1f:63:
21:cd:31:ae:b0:36:6f:33:6a:6a:f9:48:73:04:d2:11:6e:05:
e5:a1:cb:20:dc:d7:65:c8:f6:dc:2c:ca:be:09:7e:a1:75:e3:
e0:4e:6b:83:e6:d5:a6:12:36:64:69:c0:7e:08:d5:48:af:28:
2d:4b:e3:60:d0:f1:a9:b0:ec:81:93:6c:b8:c1:d1:6b:00:ea:
a8:77:7f:87:ef:2b:84:19:2e:0d:3c:e8:72:98:00:a0:fa:fc:
3a:a8:26:d1:0d:b3:09:e4:17:93:f8:d4:17:e8:2b:5e:81:20:
5a:49:e5:e5:80:68:dd:33:8a:e4:8f:1c:01:29:47:6b:c3:6a:
55:b2:f0:f8:26:7b:61:67:45:b0:bf:1d:22:7e:50:1f:72:db:
56:5b:d8:95:52:b8:bc:ba:97:2c:17:12:e7:2b:7e:65:99:a3:
51:8f:41:f5:68:f1:10:5d:c6:55:c5:1c:15:7d:f5:8a:6f:55:
1b:33:21:52:98:9d:e4:a8:41:93:4e:ef:20:04:99:b8:a1:02:
b4:d1:52:61:e2:9b:9f:14:6b:3a:d9:f5:9f:d0:ba:b0:ae:a2:
63:9b:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 23:34:30 2024 by rpki-client on console-fra.rpki-client.org