Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/5fuuXlPUYZulnhyM23xR1qESI0I.roa
File: 5fuuXlPUYZulnhyM23xR1qESI0I.roa (raw, json)
Hash identifier: a9bAwvchWiD+NB5lzyBbTMwG1xWKf75dloE+Oj0w3bg=
Subject key identifier: E5:FB:AE:5E:53:D4:61:9B:A5:9E:1C:8C:DB:7C:51:D6:A1:12:23:42
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 018CC4246A3BF6594265EF986BC123DE5EF7
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/5fuuXlPUYZulnhyM23xR1qESI0I.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49028
IP address blocks: 185.165.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6a:3b:f6:59:42:65:ef:98:6b:c1:23:de:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5fbae5e53d4619ba59e1c8cdb7c51d6a1122342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:28:f4:99:36:f3:c3:9b:0d:f6:15:6c:b9:
ac:f4:37:ff:97:64:f0:5a:ea:d6:b2:1d:48:5b:f7:
f5:7e:7b:b1:89:db:9f:4a:65:a9:9c:44:d9:e4:c7:
d4:a9:bb:1e:44:ff:c1:02:f3:88:64:87:34:32:9b:
b2:85:03:85:f1:c0:4c:fd:6d:c9:a1:1a:e5:a8:f7:
9e:9a:39:a4:16:f0:3b:a2:ec:36:fc:f2:a1:f6:d0:
4a:ce:90:66:bc:93:f6:c2:9e:7c:46:e7:f6:d6:2d:
be:62:43:03:86:99:39:e4:b1:85:73:be:9e:97:67:
14:78:42:db:c1:2b:5c:3d:40:b0:e9:55:c3:95:aa:
4d:7a:4b:3b:07:2f:04:7d:ad:df:24:28:ed:bf:50:
6c:d4:09:b8:94:3f:35:70:21:85:cb:39:b1:7f:e0:
b6:0b:cd:da:e9:f4:7f:aa:e0:f9:0f:2a:6e:f0:33:
1a:6f:f6:91:32:b8:f1:a5:49:a9:01:3c:d5:45:cf:
90:f7:31:73:86:09:7a:a1:28:c7:a4:66:97:79:5d:
6f:51:5a:61:89:83:be:50:6c:4f:90:ca:ff:61:7f:
55:db:64:e6:ff:4a:e6:2b:1f:ff:e1:18:8c:a3:73:
ef:5b:64:8f:e6:86:a4:c9:66:2a:f0:5b:0b:0e:6b:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:AE:5E:53:D4:61:9B:A5:9E:1C:8C:DB:7C:51:D6:A1:12:23:42
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/5fuuXlPUYZulnhyM23xR1qESI0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0b:69:73:62:69:1d:02:20:14:77:1a:34:da:13:61:be:0f:
b9:7b:ad:26:94:97:a2:99:90:8e:73:1a:71:9e:8d:79:57:88:
22:a5:04:1b:6d:01:26:95:0a:14:65:ab:62:24:54:23:54:a5:
09:be:71:1b:b0:4e:9d:01:01:4c:3c:03:47:92:ad:94:7a:bf:
dc:78:c8:2e:47:24:ab:47:bd:f4:1a:ce:f9:a2:ed:57:c1:0a:
5e:dc:2e:34:98:7c:54:66:e5:6d:08:fb:30:d6:33:c7:7f:0a:
0d:a2:d4:37:dc:cc:43:cf:c7:16:ef:6d:a8:da:6e:4a:81:31:
9c:17:68:96:63:24:16:c7:cf:b8:9d:e5:7e:12:59:a0:50:b6:
b2:7e:54:fd:94:2d:2d:f1:e5:5f:b8:45:d2:36:63:ec:fa:58:
b9:65:99:05:f0:8c:75:67:40:08:82:8b:3e:5f:12:02:93:ed:
5f:8e:83:fb:d1:7d:66:59:e9:70:4e:80:fb:c0:79:90:1b:e4:
39:99:cd:16:75:23:d8:4a:5b:3b:9a:81:24:1a:85:b0:59:c8:
5c:0d:ab:b0:23:46:4c:da:81:9c:8b:fb:a5:93:84:6b:3c:a0:
b6:7b:84:2a:54:7d:bf:7a:15:2b:d9:38:64:3c:60:c5:6c:84:
01:8e:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:48 2024 by rpki-client on console-fra.rpki-client.org