Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/5grXAcW-ZKRiLGqrRoO-okBEncQ.roa
File: 5grXAcW-ZKRiLGqrRoO-okBEncQ.roa (raw, json)
Hash identifier: p6a+pmIm2yffHvpzNXyvR/n2BCfaW6er30K/rnXKbFg=
Subject key identifier: E6:0A:D7:01:C5:BE:64:A4:62:2C:6A:AB:46:83:BE:A2:40:44:9D:C4
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E35D73F8881315E7CE958A68969A2
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/5grXAcW-ZKRiLGqrRoO-okBEncQ.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47206
IP address blocks: 188.224.0.0/17 maxlen: 17
93.182.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:d7:3f:88:81:31:5e:7c:e9:58:a6:89:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e60ad701c5be64a4622c6aab4683bea240449dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:80:16:4b:18:af:76:05:d1:1c:8e:2c:52:
ea:5c:71:b9:23:01:98:cc:cb:cf:c6:ef:18:1f:90:
07:15:1f:c7:73:30:25:19:e7:77:20:03:01:7e:bf:
c2:1a:3a:c5:26:4a:c1:a1:6a:06:2c:19:79:e3:31:
eb:a2:01:b4:2f:7b:06:ee:68:d1:37:a0:d1:03:1d:
f1:22:74:4a:27:38:70:e3:e4:a3:2a:5d:e6:06:dd:
04:72:b8:d2:3c:b7:07:6e:88:f6:44:f3:e9:92:a7:
2e:77:4b:d5:af:88:12:5a:bb:81:c7:70:63:3a:53:
2c:76:94:eb:88:60:56:7d:17:13:0a:cf:3b:c9:95:
e4:a4:99:ca:36:63:be:61:69:1f:82:ee:aa:79:fb:
51:a2:5e:18:83:4a:25:5e:28:00:c7:dd:da:33:de:
97:ea:2f:0b:9a:42:7b:d3:2d:a6:e4:e8:a0:81:56:
cd:ba:45:02:7a:e1:1e:26:d7:a5:73:f8:be:ca:05:
3d:65:43:a9:b1:c9:dd:05:df:cd:79:cc:46:2d:44:
f6:1e:7a:ca:04:39:f4:65:84:1e:2e:bd:b5:28:43:
15:25:3d:2f:9b:e2:13:1d:97:75:14:95:f5:82:4d:
2e:78:d0:5f:6b:cc:41:da:01:84:9c:a2:bb:bc:d3:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0A:D7:01:C5:BE:64:A4:62:2C:6A:AB:46:83:BE:A2:40:44:9D:C4
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/5grXAcW-ZKRiLGqrRoO-okBEncQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9f:be:60:53:d5:47:63:d8:3b:85:b3:9d:02:27:5a:7d:e8:04:
e6:f4:b6:58:58:9a:e8:d5:f1:fd:40:24:8a:4a:84:61:06:20:
a6:f0:8a:88:65:1d:a6:08:73:f0:90:d3:c6:6e:60:1d:fb:b8:
eb:d7:5c:c1:37:20:3a:c5:23:3b:e3:ae:fa:0f:de:68:a6:7a:
a6:d1:c4:60:62:61:82:a4:f5:e7:7d:36:36:88:ed:8b:a9:3f:
24:b6:7a:f7:fa:b8:d4:39:68:e4:39:35:6d:35:8d:b8:28:65:
f4:37:4d:a9:80:6f:be:b8:66:53:78:70:67:b0:c9:df:e3:9f:
0a:41:3f:1e:a6:92:26:50:27:d3:d1:5d:ce:a5:0b:7b:fa:b6:
37:65:a3:0b:58:d1:e5:d4:84:59:94:61:e0:f5:7a:94:88:d4:
10:a0:be:95:8a:e8:aa:99:ca:a1:76:1d:bf:60:a3:af:98:1a:
3a:05:c9:61:03:31:46:96:9f:e3:ce:8f:58:32:06:ea:e7:cf:
df:8a:2b:a8:c4:b7:37:34:88:30:17:07:67:bb:fb:61:d3:fe:
33:4c:d4:5c:2c:03:10:86:55:1e:f3:ec:75:84:97:16:2f:df:
11:3e:1e:01:fe:55:1b:c3:a7:22:59:c3:1f:72:23:2a:ed:55:
dc:2a:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:47:06 2024 by rpki-client on console-fra.rpki-client.org