Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5Xm92XHjhwl5gunsRyAlNGASOQs.roa
File: 5Xm92XHjhwl5gunsRyAlNGASOQs.roa (raw, json)
Hash identifier: Swp53W8tV3ohw8c01/s5V365pN3pCbo7b+is0wKF/UY=
Subject key identifier: E5:79:BD:D9:71:E3:87:09:79:82:E9:EC:47:20:25:34:60:12:39:0B
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933DD10C50E493700BB45C7CFB5687
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5Xm92XHjhwl5gunsRyAlNGASOQs.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200590
IP address blocks: 188.116.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3d:d1:0c:50:e4:93:70:0b:b4:5c:7c:fb:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e579bdd971e387097982e9ec472025346012390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:cd:68:8a:7b:43:cc:c9:33:73:87:f8:91:
22:ad:f4:c1:42:a2:4e:bb:0e:1a:8e:7b:97:c0:5b:
f5:95:28:af:c7:82:c6:4d:4a:71:51:81:a0:7c:fe:
78:06:25:d5:d1:c7:e0:22:50:cc:38:a5:cf:a3:3a:
88:8b:0d:d1:68:47:cb:e2:b7:d2:d7:0b:c5:5d:f0:
6c:53:eb:8c:f3:06:6b:49:1b:f3:39:cb:87:52:7a:
67:2a:26:a2:cc:f6:0b:fa:92:4d:b3:5e:e2:07:de:
ac:e1:ad:d5:fc:d0:cf:8d:29:a5:72:06:f9:e6:54:
64:40:53:96:d9:76:be:b4:9d:e5:ba:d6:90:32:ff:
2e:0e:6f:e4:dc:af:d2:f5:d1:9e:49:e9:70:47:a1:
37:63:f5:20:ed:aa:a0:59:a0:50:db:3e:07:9a:ad:
7f:bd:e0:0e:65:b0:1e:e4:56:60:f0:7d:46:61:8e:
f5:93:ed:e1:df:fc:2a:18:94:e2:9b:47:ed:3c:75:
b6:1b:f3:36:94:1a:bd:55:4e:f1:d1:32:74:72:41:
64:17:20:78:27:74:b1:0a:ff:a5:86:b3:16:16:0a:
6a:8d:17:e7:ad:0b:87:a2:b8:a3:0f:cd:25:64:a8:
f0:72:8b:40:a7:8d:34:43:07:79:1a:9a:d1:56:21:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:BD:D9:71:E3:87:09:79:82:E9:EC:47:20:25:34:60:12:39:0B
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/5Xm92XHjhwl5gunsRyAlNGASOQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.116.20.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f9:04:a0:ae:bc:32:75:4c:74:d7:be:e4:08:7d:49:41:ac:
48:6d:6d:19:83:3e:5a:a0:d0:f1:a1:22:63:e9:2e:b7:d3:36:
9a:88:dc:a6:6e:c8:e5:05:3c:c4:4d:fa:ee:3a:1e:af:40:33:
2b:1b:04:71:e9:d2:c9:a8:85:50:cb:3e:e8:b0:f0:f3:a2:cf:
ce:16:42:65:59:50:b5:44:28:57:cb:65:10:07:55:9b:80:cd:
2b:77:3a:52:7f:b3:e1:8e:71:e3:87:a2:19:ad:0b:dd:d6:09:
49:80:3b:19:34:fd:59:f8:e7:12:aa:1d:6d:29:87:1a:1b:c0:
56:2b:8c:db:de:bb:71:a8:49:de:11:2e:be:98:91:53:46:11:
81:40:26:3b:d0:52:19:53:f5:b1:8c:f6:f1:31:10:7e:14:bf:
c9:bc:a3:53:31:fc:11:c4:29:8c:84:b6:c5:0f:8e:e6:6d:9e:
2e:8e:d5:2d:4a:cb:a7:a8:0c:e3:2c:f3:19:e0:94:3c:3b:7b:
3e:b7:34:e5:e4:56:7e:28:d8:50:ee:14:80:47:88:a7:17:4c:
0b:91:2e:79:26:01:c4:6b:d1:92:aa:d5:c9:c4:d3:26:8f:38:
5a:bc:4e:95:9f:1c:6a:f4:d8:82:97:7e:bb:d1:2c:7d:6a:f1:
4b:16:2e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:45:45 2024 by rpki-client on console-ams.rpki-client.org