Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5XFlwu4lrw4b-vGx-kiQ25ltNZM.roa
File: 5XFlwu4lrw4b-vGx-kiQ25ltNZM.roa (raw, json)
Hash identifier: OwM2Bh2Oxcb45e/oxgC07PhI7p5GN56zmFftEE4w/A0=
Subject key identifier: E5:71:65:C2:EE:25:AF:0E:1B:FA:F1:B1:FA:48:90:DB:99:6D:35:93
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD3CDD4D2074890E4EE7F9F735399
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5XFlwu4lrw4b-vGx-kiQ25ltNZM.roa
Signing time: Mon 01 Jan 2024 02:29:30 +0000
ROA not before: Mon 01 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50625
IP address blocks: 194.183.60.0/23 maxlen: 23
82.177.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d3:cd:d4:d2:07:48:90:e4:ee:7f:9f:73:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e57165c2ee25af0e1bfaf1b1fa4890db996d3593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:32:41:c4:0c:2d:d8:48:35:7b:8d:36:14:
9d:07:20:ee:fd:74:e6:3a:fb:5f:1e:6a:2f:01:59:
cb:b7:8e:e0:1b:39:23:44:85:bc:5e:c0:c6:d0:e9:
ec:cf:d5:3f:2a:0e:17:c2:92:df:68:0c:40:a0:6d:
f5:7e:47:65:2f:36:03:90:41:e7:03:d3:d1:bf:33:
34:1d:10:e5:92:19:e8:06:a0:83:6d:7a:ce:02:3b:
6f:b9:cc:57:23:cd:7e:56:e4:45:ec:90:28:c6:54:
c4:e8:41:3b:3d:45:d1:7b:9c:33:98:dd:07:82:f4:
04:ba:83:44:9b:56:7e:ea:a1:0b:25:38:41:ee:a0:
09:2a:6c:49:a1:76:82:55:46:af:e1:b9:49:7d:ae:
d1:d1:c3:74:7c:bb:d3:fb:f8:93:1e:77:75:de:35:
ab:b8:a7:b0:4d:80:a2:88:e2:5b:b2:7b:cb:6d:ca:
58:fd:3b:0e:89:82:4e:e8:78:64:77:19:36:9d:05:
fc:bb:a8:12:96:f4:f8:d3:20:23:f4:ad:b9:3e:04:
d0:86:14:f7:ac:02:81:04:b9:66:52:e7:45:b5:d4:
68:43:05:1e:e4:3e:7a:c7:d4:43:50:b3:1a:95:05:
39:23:65:25:e4:91:6a:7e:47:81:aa:81:19:c3:af:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:65:C2:EE:25:AF:0E:1B:FA:F1:B1:FA:48:90:DB:99:6D:35:93
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5XFlwu4lrw4b-vGx-kiQ25ltNZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.204.0/24
194.183.60.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b5:d7:84:42:d2:fb:6c:63:35:6c:4d:c9:1d:98:0e:c6:0a:
4b:ea:75:21:97:12:44:c0:0f:66:9f:4f:d5:fa:d3:21:9a:80:
ec:ce:f7:64:4f:0f:7f:13:2b:d7:51:32:5e:47:7b:ba:e7:8b:
c6:ce:10:11:fa:ad:42:4c:bd:25:91:be:78:09:9f:8a:ab:2a:
47:e6:51:d6:e1:c2:7e:e8:72:9e:09:e1:f7:ab:99:9d:be:d3:
d0:1c:f1:11:9d:cc:7b:a7:8b:0b:06:77:81:b2:42:7f:67:47:
61:56:87:94:2d:7c:9a:d5:bc:30:2f:e1:11:60:fa:61:b1:13:
46:74:ba:c9:b8:7f:0f:73:72:50:3a:49:9f:2c:68:fa:d8:df:
b4:c6:f6:aa:4f:b7:d4:fe:d7:7c:99:71:53:f2:11:22:a4:e6:
ef:f2:2d:ca:56:c9:85:aa:dc:b0:df:11:49:77:92:d2:d0:ae:
d6:f4:0d:b3:9b:67:51:58:0f:02:94:8c:df:8a:be:e2:c7:e1:
59:d4:d4:80:4b:c9:92:e1:ff:cb:5e:af:77:41:ff:31:7d:1e:
fe:67:3b:8c:62:46:64:47:28:aa:6d:59:73:a5:0f:f6:00:97:
37:37:6f:9e:fe:49:30:73:da:e6:ae:0a:fa:f1:1f:01:0b:5c:
71:c9:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:57:25 2024 by rpki-client on console-ams.rpki-client.org