Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/vsHiIQ7fXzyUfwTbAL0HswSjuSE.roa
File: vsHiIQ7fXzyUfwTbAL0HswSjuSE.roa (raw, json)
Hash identifier: l9JNhSIthMP90daG/5i3R/6YKRNt8yFESrBkaU3QZnU=
Subject key identifier: BE:C1:E2:21:0E:DF:5F:3C:94:7F:04:DB:00:BD:07:B3:04:A3:B9:21
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 018CC6B79160BA3E4D92DBA131ACB1FDC7CD
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/vsHiIQ7fXzyUfwTbAL0HswSjuSE.roa
Signing time: Mon 01 Jan 2024 20:29:28 +0000
ROA not before: Mon 01 Jan 2024 20:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209072
IP address blocks: 5.183.143.0/24 maxlen: 24
5.183.140.0/22 maxlen: 22
5.183.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:91:60:ba:3e:4d:92:db:a1:31:ac:b1:fd:c7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jan 1 20:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bec1e2210edf5f3c947f04db00bd07b304a3b921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:9f:86:77:e6:27:f7:40:c9:c3:eb:8f:06:
d6:f2:9a:e3:07:a0:89:8b:02:56:62:d0:74:ae:ff:
e3:ca:8d:27:10:46:eb:23:2a:31:87:b3:a6:0f:9c:
bc:ff:c0:a3:8e:1e:ee:c2:27:ca:97:b6:45:84:52:
99:60:9e:3c:ed:d6:7c:a4:df:bc:95:ae:9a:15:f1:
1b:e5:64:15:e9:2f:40:e8:5b:ec:4b:d6:9d:4d:27:
e2:d4:89:9c:2d:f6:65:ea:de:b7:75:11:1f:b9:6b:
f6:94:4c:91:09:53:73:c6:25:5c:2e:70:dc:7b:a7:
f0:38:49:27:aa:6c:5c:38:2a:4a:d2:46:3e:75:fd:
a0:f7:cf:6c:dd:c5:ee:48:56:a4:f4:65:e7:46:62:
5b:a0:28:73:4d:88:5b:18:ce:ff:e7:c5:0c:a8:00:
df:ab:41:f9:10:00:ad:b1:5e:ca:b3:6f:21:27:73:
ed:71:fc:09:46:2c:55:1f:86:e9:ba:60:8f:38:ac:
1c:d4:e7:d7:44:ac:03:76:f3:ac:97:c4:ff:1d:9d:
47:90:2c:d7:91:5e:2b:03:6c:63:2a:37:05:af:07:
0c:b5:e7:5c:b9:d7:74:74:30:ed:3f:e0:ba:c4:dc:
1b:90:ae:1d:a3:c3:93:2d:de:51:4e:15:6d:e4:fc:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:E2:21:0E:DF:5F:3C:94:7F:04:DB:00:BD:07:B3:04:A3:B9:21
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/vsHiIQ7fXzyUfwTbAL0HswSjuSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:1c:6a:7f:53:b3:14:6e:54:86:d6:4c:3c:34:15:6a:e3:67:
ed:63:11:1f:7d:85:8f:71:41:2a:0d:79:a4:b1:4f:36:9f:89:
67:3a:83:e7:06:64:98:76:8e:77:4d:b0:c0:1c:6e:e5:6f:1b:
a3:3f:98:22:6a:83:40:1f:5e:bd:aa:2c:31:f8:6e:ac:f2:e9:
60:d0:e8:5e:b8:9f:df:09:2a:71:a3:f6:d4:6e:41:f5:9f:b0:
6e:1a:5a:d1:31:39:75:2e:96:b4:6d:f5:95:55:8b:2d:9c:af:
15:f6:51:6b:c2:91:00:26:94:1c:2f:74:6a:83:7d:33:2f:cb:
5e:18:c1:48:ce:26:60:a0:b6:67:05:9a:78:cb:1b:40:69:2b:
19:10:f1:d4:e9:30:7b:04:70:76:9e:27:7f:d8:7f:da:60:81:
67:8d:8a:90:9d:9b:62:2b:f5:ff:0d:e7:c1:db:b6:ab:b2:92:
b4:3c:b3:8c:eb:f8:90:38:70:01:41:be:a3:eb:1d:3c:6b:6b:
ae:4d:27:41:44:c8:6c:e6:c8:c3:4c:e1:83:28:f0:43:d8:5c:
71:13:40:be:7f:ab:06:9e:5e:76:bc:87:b7:2f:ca:36:b2:41:
0e:4c:4b:69:8e:b8:f8:ad:c3:18:8b:ab:80:4c:ad:77:8e:bf:
6a:af:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:40:16 2024 by rpki-client on console-fra.rpki-client.org