Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/A5MMlW8cqeaD3wSi1Ar18s5PezE.roa
File: A5MMlW8cqeaD3wSi1Ar18s5PezE.roa (raw, json)
Hash identifier: mDfo6LtdY+JkDIGvDgK0NwGtVo1dqFjHci7n8kffmDc=
Subject key identifier: 03:93:0C:95:6F:1C:A9:E6:83:DF:04:A2:D4:0A:F5:F2:CE:4F:7B:31
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 018E0EC2A5577291B909E94693712ACE001A
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/A5MMlW8cqeaD3wSi1Ar18s5PezE.roa
Signing time: Tue 05 Mar 2024 13:17:01 +0000
ROA not before: Tue 05 Mar 2024 13:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 37.143.128.0/24 maxlen: 24
37.143.129.0/24 maxlen: 24
37.143.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:c2:a5:57:72:91:b9:09:e9:46:93:71:2a:ce:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Mar 5 13:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03930c956f1ca9e683df04a2d40af5f2ce4f7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:06:a8:e2:a0:01:31:b6:8c:00:e0:f2:21:
0d:5f:70:06:04:9a:c4:dd:05:97:9e:46:fe:11:f0:
81:92:80:96:fd:31:89:19:9d:90:d9:4e:e9:c1:6a:
3c:a9:b4:83:73:e6:6b:44:5d:07:60:04:e6:01:6e:
29:37:af:16:af:3e:b8:30:4f:30:c3:a6:d2:b1:81:
e0:af:65:10:2d:be:79:80:44:50:eb:bf:b7:93:b6:
b5:9d:36:89:14:cd:00:f8:51:05:cf:11:cb:b0:c2:
69:9b:ba:5d:41:e4:cc:0d:76:2d:5b:b2:e0:64:ce:
45:2e:1b:01:bb:0c:a8:5b:9b:70:1b:ef:9a:5d:93:
6c:65:b8:e0:e0:a9:91:af:ee:1d:dd:9f:2b:5c:e4:
f8:62:d5:89:43:6a:13:35:f3:75:76:c3:97:01:a8:
90:59:a9:96:57:12:e1:70:13:2a:6b:20:2c:6b:c1:
47:c4:37:be:cb:07:18:69:06:82:fd:1a:64:16:f4:
71:64:57:51:40:e1:f6:50:70:af:2b:df:d2:9d:cc:
b6:3c:9f:80:ff:04:1a:b8:96:49:c7:04:c4:53:07:
e0:f9:bd:87:d0:0c:62:a1:bc:57:5e:9c:9f:05:ea:
51:88:e9:a3:02:ee:0b:64:d0:58:b2:f6:c0:8c:32:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:0C:95:6F:1C:A9:E6:83:DF:04:A2:D4:0A:F5:F2:CE:4F:7B:31
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/A5MMlW8cqeaD3wSi1Ar18s5PezE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.128.0-37.143.130.255
Signature Algorithm: sha256WithRSAEncryption
4a:b7:1e:f2:c1:e8:3d:7d:f5:09:47:c0:b3:8e:b2:1f:ca:57:
ef:b7:39:6c:5e:d8:48:34:c6:b4:c4:5b:c4:24:a2:de:21:86:
56:f5:76:81:d2:b2:e5:2a:9d:d8:70:19:a8:fb:8a:11:36:61:
85:50:af:52:83:c1:09:19:a9:9e:9a:2e:82:ac:3e:45:7a:57:
70:22:c6:fa:5e:fe:d9:51:76:99:8a:a0:c0:3f:a2:18:7e:b7:
0e:78:fc:b1:1d:12:bf:63:7a:f5:95:b8:34:ff:5a:7d:2b:47:
1a:89:34:9b:e8:d8:b8:34:d6:4b:08:cc:3e:c4:6c:80:40:a6:
90:a2:fa:52:94:f0:ca:a4:ca:d8:53:9e:ef:e5:78:10:f4:91:
74:1a:5e:a6:f0:7b:b9:d6:d0:ed:3e:d4:01:9b:c0:8b:52:b9:
e2:bf:38:5a:7c:a6:41:16:6b:27:18:60:46:54:3b:c0:f1:8a:
37:92:5d:77:8f:18:b2:f0:87:ac:ae:02:df:59:74:e1:be:7f:
ba:8e:4b:a7:88:26:a1:3e:9b:ab:70:bc:c1:1f:a6:5c:d2:ad:
f1:1b:35:24:61:57:d2:6f:7f:e6:eb:a0:67:0d:5b:64:f7:fd:
53:4f:e0:da:e5:10:08:30:90:75:26:50:8e:5e:5a:58:f3:4e:
31:31:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:38:47 2024 by rpki-client on console-fra.rpki-client.org