Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/5FrJag-TZQzVnhbmxmnSVUd06eA.roa
File: 5FrJag-TZQzVnhbmxmnSVUd06eA.roa (raw, json)
Hash identifier: F6HS38zxsy9c1pbCUvvFUWKO1z0RhS4fbrezUJ8E99c=
Subject key identifier: E4:5A:C9:6A:0F:93:65:0C:D5:9E:16:E6:C6:69:D2:55:47:74:E9:E0
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 018CC2DB513FCEDD1E80CF49515508A5255F
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/5FrJag-TZQzVnhbmxmnSVUd06eA.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59827
IP address blocks: 185.70.72.0/22 maxlen: 24
2a05:2880::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:51:3f:ce:dd:1e:80:cf:49:51:55:08:a5:25:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e45ac96a0f93650cd59e16e6c669d2554774e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:ef:60:e3:6b:17:fb:df:90:d6:cd:18:de:
3f:ec:38:7c:67:68:df:8b:0c:5d:58:05:17:5e:29:
75:a7:c2:85:ab:d1:27:1a:3b:91:2b:88:6e:7e:da:
6a:94:af:1a:82:da:ae:0b:8a:ca:c6:d6:92:9b:c9:
46:c0:30:a3:9f:10:fd:64:3a:42:8e:57:ad:58:51:
20:24:8c:de:38:61:f0:bb:c2:b0:d7:c8:11:70:12:
9a:09:76:40:ec:61:47:2b:42:20:9d:55:f6:cb:f8:
3b:9f:16:c1:9f:da:1d:70:4f:88:0d:f3:71:d9:dc:
5b:3a:41:75:01:46:f5:a8:72:1d:42:8a:0c:65:1c:
fc:88:2d:51:58:b9:e0:c0:4d:32:7f:dc:f2:66:77:
2f:7e:b2:31:65:d4:05:91:e6:2a:1c:af:7d:e4:64:
91:b7:ff:0a:0a:25:96:d4:b0:00:b2:ef:57:0d:ec:
4e:08:2c:6f:2a:05:ee:ef:17:e9:d4:f9:95:cd:6a:
3d:c7:38:6b:fa:a1:47:c0:e5:49:2f:34:1d:ca:e0:
f7:f8:0f:91:23:78:f6:0e:8d:8b:7e:8c:e1:b4:8c:
d8:48:ac:68:bf:fb:7a:3e:ce:09:3f:82:49:69:0d:
9f:46:01:c4:95:35:20:f4:b3:f8:c7:66:02:41:ab:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:C9:6A:0F:93:65:0C:D5:9E:16:E6:C6:69:D2:55:47:74:E9:E0
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/5FrJag-TZQzVnhbmxmnSVUd06eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.72.0/22
IPv6:
2a05:2880::/29
Signature Algorithm: sha256WithRSAEncryption
73:5d:75:9a:41:2c:41:33:5d:6f:12:89:b6:f0:3a:a9:b9:3a:
d3:6b:9e:c0:da:89:6c:ed:a4:04:4f:20:76:aa:9e:88:a8:52:
d5:4a:63:65:1d:05:48:5c:dd:d9:70:28:3e:27:8a:d2:6f:93:
f0:fb:55:ff:89:4b:6d:f3:04:17:e7:78:fa:9a:1f:82:3f:c8:
0f:1b:56:05:4a:90:8d:b9:b9:71:48:20:ad:b6:e8:d0:d8:25:
c7:03:b8:f7:c1:79:2b:36:90:f2:69:33:3b:cd:de:57:79:ea:
2f:70:9a:d0:c7:59:12:b8:6c:77:1f:ad:a6:78:17:76:2e:4f:
61:dc:21:18:ee:b1:52:9d:54:ff:6c:14:13:bf:aa:4a:8a:c3:
de:f6:17:b0:b5:95:2b:5a:da:54:5e:b5:58:92:e2:2c:fd:52:
b6:1a:4f:d7:3a:60:e6:cf:7a:62:f5:e1:94:38:cc:34:b7:09:
11:43:fe:b3:53:0d:b6:e1:5c:2c:05:65:97:ea:54:d5:43:a7:
b8:a8:cd:6a:33:6c:6e:37:6a:0d:fc:f5:47:0e:5f:19:28:b5:
70:9f:12:b1:63:61:f9:5d:a2:6b:8c:b1:df:37:df:4e:93:49:
b1:0c:44:ec:e3:77:c6:5b:e1:ff:ff:18:42:82:dd:fa:b8:83:
6d:5e:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:27:05 2024 by rpki-client on console-ams.rpki-client.org