Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/5Vs-eOvNeYiBEm8t3NGyLJIrGfc.roa
File: 5Vs-eOvNeYiBEm8t3NGyLJIrGfc.roa (raw, json)
Hash identifier: cxvRDh938j/7OBTK+b909AKBsENflcZoPNRR63z8sLc=
Subject key identifier: E5:5B:3E:78:EB:CD:79:88:81:12:6F:2D:DC:D1:B2:2C:92:2B:19:F7
Certificate issuer: /CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Certificate serial: 018CC7956D20ABAFE7A03433D69CBF1E64F6
Authority key identifier: C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/5Vs-eOvNeYiBEm8t3NGyLJIrGfc.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49468
IP address blocks: 91.213.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/wuiCx3bGT-9YOb5J64rKP8dbEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/wuiCx3bGT-9YOb5J64rKP8dbEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6d:20:ab:af:e7:a0:34:33:d6:9c:bf:1e:64:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e55b3e78ebcd798881126f2ddcd1b22c922b19f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:9c:e7:47:13:4d:49:d9:71:43:3d:3a:b5:
60:6d:fa:4e:22:58:73:e8:76:08:65:ca:0e:50:d0:
f2:a3:e2:ab:4d:05:a1:e1:9e:e9:59:7d:8d:7c:a7:
f7:6b:11:d2:1a:ad:fe:ee:9d:3a:04:90:35:75:c9:
3b:81:7a:16:29:e3:d5:81:95:f5:88:de:29:b5:c0:
cf:a0:0c:ba:d5:e5:d0:68:87:f0:69:2d:63:f0:b3:
ba:a7:b5:ef:4e:89:c9:e3:ac:67:85:c3:3e:fb:5a:
42:d2:c8:d1:4c:40:13:d4:7b:f1:84:2b:33:4e:8b:
9a:c4:51:dd:17:0e:9a:e3:06:84:61:05:5d:e5:cc:
f9:8d:36:82:fa:17:bd:10:02:37:93:5c:c0:f2:82:
c4:8a:bb:c1:ee:bb:3d:5f:82:d4:7b:99:0c:7d:85:
54:fa:ef:77:41:49:7b:af:07:c3:4b:e7:34:cc:fb:
e4:b0:72:0b:8f:aa:6c:93:3d:df:be:c6:04:ac:38:
4d:6c:69:79:57:2c:66:0f:f0:da:9e:61:0a:a7:e3:
03:d1:96:e0:85:e6:f4:4a:e6:12:43:28:35:47:62:
2b:29:11:ed:cc:be:78:1d:07:22:4b:e7:1a:8e:a7:
41:bb:57:76:88:0c:e5:7b:7b:a8:8c:86:47:c4:9d:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5B:3E:78:EB:CD:79:88:81:12:6F:2D:DC:D1:B2:2C:92:2B:19:F7
X509v3 Authority Key Identifier:
keyid:C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/5Vs-eOvNeYiBEm8t3NGyLJIrGfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/wuiCx3bGT-9YOb5J64rKP8dbEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:68:1c:2f:e3:7b:dd:57:e3:0a:2b:06:f0:54:3f:a1:fb:bf:
99:5e:95:ee:33:13:0d:90:21:1b:fc:b0:41:05:b5:63:df:f1:
a7:05:e3:a4:c6:94:c2:2d:52:0e:30:2a:9c:75:f5:06:86:1c:
86:96:63:74:da:b8:6e:72:a5:ac:d9:1f:4d:9d:eb:ee:30:68:
97:3b:b2:71:ed:56:53:07:e5:e9:93:8b:04:d9:4e:f1:d4:6f:
90:88:6c:c7:0a:6f:21:6d:5d:15:ae:22:ea:f3:68:eb:1f:1f:
7d:4c:d6:0d:bd:42:12:a4:4f:8b:7b:f9:8d:2a:54:a8:25:66:
63:66:b8:e3:d9:5a:79:9c:27:b2:55:17:2c:ad:98:3d:5f:ea:
fa:2f:ed:01:59:8f:a8:a5:35:c7:d1:b6:f6:c7:fe:28:bb:f4:
f7:a9:04:3c:db:03:82:81:58:9a:1b:b6:02:e3:34:91:47:a8:
11:58:20:c3:38:42:44:dd:dc:67:86:ac:b6:dc:d4:ff:7a:9d:
28:45:38:ca:ac:4a:9e:b6:f6:b4:0f:33:a7:0b:29:b3:1a:d5:
79:0d:9c:ce:1b:b3:d6:3b:5a:9d:b8:63:3b:c1:60:03:a2:2b:
00:7c:3d:7e:fe:55:91:0a:ce:15:c8:f0:af:41:c6:9c:b0:84:
92:19:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:12 2024 by rpki-client on console-ams.rpki-client.org