Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_n5bXClITDyW2ihCW6kL0NHTMAI.roa
File: _n5bXClITDyW2ihCW6kL0NHTMAI.roa (raw, json)
Hash identifier: jmrRVBFKRMc9waLKt0XHCNapgIFbxGk+GpaD6PZ2bjY=
Subject key identifier: FE:7E:5B:5C:29:48:4C:3C:96:DA:28:42:5B:A9:0B:D0:D1:D3:30:02
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018CC64999B70A81FB406D3E743433CCC2FD
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_n5bXClITDyW2ihCW6kL0NHTMAI.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50606
IP address blocks: 95.160.58.0/24 maxlen: 32
93.105.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:99:b7:0a:81:fb:40:6d:3e:74:34:33:cc:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe7e5b5c29484c3c96da28425ba90bd0d1d33002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:20:bc:ac:ec:46:bf:23:46:49:3a:e2:3d:
81:d7:f2:f9:91:ff:ab:dd:9e:a0:c9:ae:49:5a:fd:
01:ff:a3:46:45:c5:37:75:65:2d:30:bb:44:2e:a4:
12:25:be:cd:36:4f:24:a9:ef:13:cf:4b:7d:5c:e8:
d1:45:ce:7f:d1:19:21:e5:31:ee:9c:fd:80:cd:15:
e5:08:ac:eb:3d:57:e3:f5:00:0f:37:4c:70:1f:b7:
59:ab:94:2b:e9:71:30:ae:18:4b:4e:2e:60:43:b4:
34:36:ad:8a:cf:6d:64:6e:fc:a5:3b:f0:52:ce:b5:
13:ba:ff:d6:78:e1:15:47:af:2d:fd:9b:8a:14:b7:
8f:18:d4:af:63:67:7f:2b:38:a4:6e:9c:e9:bc:b1:
2d:3b:7c:37:f0:64:df:8b:ed:98:a6:ec:e1:8a:59:
cf:bb:2f:e3:5d:46:2b:d4:5e:30:69:56:db:b5:c4:
b7:99:7a:20:7b:6c:0d:3e:1e:58:46:de:bf:d6:49:
fe:63:2f:c4:6b:0a:13:59:de:34:c6:96:6f:e7:4c:
98:a9:7f:e0:54:aa:fb:6b:10:af:1d:94:10:7f:7d:
94:bd:48:d1:7c:31:89:ed:50:c6:12:8b:c2:1e:cc:
d9:56:8f:1d:e0:98:6a:f9:c8:d3:e6:a3:45:5f:a2:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7E:5B:5C:29:48:4C:3C:96:DA:28:42:5B:A9:0B:D0:D1:D3:30:02
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_n5bXClITDyW2ihCW6kL0NHTMAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.88.0/22
95.160.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:55:15:aa:41:98:86:7f:a7:d8:77:d8:49:12:36:49:6d:3f:
ab:fb:6d:0a:79:49:f2:01:22:48:2d:be:4a:a9:af:df:99:70:
55:01:32:43:1c:83:8a:8c:86:0b:28:18:9a:79:0e:9b:f0:e9:
6c:22:0a:81:b5:8e:57:46:18:f7:c2:bd:43:f8:87:4a:c2:e8:
96:eb:5a:a1:af:7d:2d:8d:d8:5c:7f:d5:82:be:7b:b4:0e:39:
fe:a8:80:78:47:33:b8:84:f7:13:a2:80:82:9a:a9:0e:94:39:
9e:67:24:ca:b3:18:df:81:2a:35:c7:51:6e:a0:a9:f3:1d:69:
56:95:cf:5f:ef:23:cd:1c:ca:a3:1a:4b:c4:06:43:9d:d5:54:
6b:59:7e:36:73:4b:da:cb:f9:2d:14:17:e4:14:2f:7c:be:89:
a0:7b:68:5d:6b:c4:f2:44:04:cf:70:88:bd:ff:54:86:29:d5:
bf:62:04:25:cf:33:da:20:8b:1b:2e:c2:9e:11:37:3a:11:f9:
10:0c:e4:bb:62:f1:1c:ef:2f:e0:10:c7:cc:f0:a2:b4:3f:2d:
e7:36:4e:7c:99:c2:07:31:17:b3:35:b8:a0:66:c7:5b:bb:5e:
28:5d:66:33:48:e8:43:d4:53:2d:6c:6a:bb:d0:46:a3:c9:41:
a7:65:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:03 2024 by rpki-client on console-fra.rpki-client.org