Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/5cPPBzr02Pwf9VCPPDiscGB-To8.roa
File: 5cPPBzr02Pwf9VCPPDiscGB-To8.roa (raw, json)
Hash identifier: iRc3CUUkIIkfsuaongQM8W8af2lvUn/rdW/eTxkz2Do=
Subject key identifier: E5:C3:CF:07:3A:F4:D8:FC:1F:F5:50:8F:3C:38:AC:70:60:7E:4E:8F
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 018CC801248BA1175F5A3589DEBE9ECC0AE9
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/5cPPBzr02Pwf9VCPPDiscGB-To8.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60126
IP address blocks: 185.46.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:24:8b:a1:17:5f:5a:35:89:de:be:9e:cc:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5c3cf073af4d8fc1ff5508f3c38ac70607e4e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:ff:6a:a4:59:4a:43:45:a8:30:37:8f:be:
74:2c:a5:7b:70:85:03:df:00:98:c5:7f:69:08:8b:
be:5e:44:25:f3:21:ea:e6:35:00:b2:b8:5d:79:e7:
b3:d8:c7:92:74:1b:76:ac:5d:a7:47:ec:4e:9f:34:
3d:6a:5e:f9:83:d5:d7:a2:c7:32:e8:29:bd:a9:47:
c1:cd:e1:28:d4:b2:00:3f:d4:30:f4:83:4a:14:d2:
b0:e8:8c:60:24:3e:80:cc:0c:86:6e:32:31:37:bd:
36:82:07:66:b5:54:a4:d2:05:d4:08:7a:0b:40:e8:
ed:dc:b7:28:e5:0a:3e:79:9d:d9:c7:78:0e:17:45:
52:7d:6b:88:13:5d:9b:0f:c7:18:fd:43:37:42:fc:
02:0f:c3:d0:19:5d:01:f6:e0:3c:0a:c3:0b:82:dc:
2e:4c:e4:ff:bf:92:9d:2c:4a:d5:9e:48:98:b5:66:
50:e8:7c:2b:f6:b6:68:9f:24:ca:91:69:12:66:fc:
a5:d5:a9:8b:83:93:50:ec:16:f0:c6:35:c0:42:68:
2c:8e:28:99:af:52:ca:4f:ff:cc:bb:02:ae:7e:9a:
64:d4:8b:f2:45:8c:c9:a4:5f:29:d5:1c:6f:f9:91:
c3:1a:fa:81:c1:7d:e0:7b:0c:a8:b1:66:d0:b1:bb:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:CF:07:3A:F4:D8:FC:1F:F5:50:8F:3C:38:AC:70:60:7E:4E:8F
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/5cPPBzr02Pwf9VCPPDiscGB-To8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.234.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d1:e2:52:37:c1:47:15:70:e8:f9:d5:4c:3a:13:85:0d:2a:
4d:35:4d:dc:d9:9f:c7:04:5d:60:2b:a1:00:55:9f:cc:a4:2e:
2f:3d:e5:4b:a7:32:49:38:70:ec:23:d0:b8:86:a2:33:c3:e7:
e2:be:5a:02:10:11:ca:ba:24:e4:a4:b0:40:6f:64:78:f6:e6:
00:8e:52:ca:0a:87:e7:9e:ae:81:94:0b:42:39:e3:1c:29:47:
c2:34:e1:70:f0:19:08:17:43:3f:60:40:3a:65:d8:f8:e6:4d:
0f:52:8b:61:53:54:e7:e5:ea:85:9a:f3:2c:42:61:54:6b:db:
49:88:63:27:7f:2d:09:18:08:d6:05:64:1d:1d:bb:77:c1:e0:
87:3d:80:7a:5b:1a:f8:95:af:5b:aa:90:cb:a3:bc:bc:d0:be:
3e:8d:9f:d7:a8:e3:c5:fc:91:11:6b:22:fe:b0:eb:22:7f:4b:
47:d8:c6:96:c1:7d:9b:79:30:a5:1d:00:6b:4f:72:3c:a1:22:
3f:32:99:6a:22:af:ea:4a:d8:b2:87:6a:2c:3d:1e:37:7d:47:
9d:29:92:ae:64:d0:b8:76:07:00:1f:31:07:05:eb:0c:10:70:
c7:bd:d6:fa:5f:27:fc:d6:55:09:a1:86:cf:31:b1:b3:be:e8:
bb:90:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:29 2024 by rpki-client on console-fra.rpki-client.org