Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/5N_kgbicsvOFuDHv_jewlQhqPNE.roa
File: 5N_kgbicsvOFuDHv_jewlQhqPNE.roa (raw, json)
Hash identifier: tI+tauaRKBG5kr3fekvGp9BgapqO98xD3ZV6FohnT0s=
Subject key identifier: E4:DF:E4:81:B8:9C:B2:F3:85:B8:31:EF:FE:37:B0:95:08:6A:3C:D1
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0191A35ACE4841418A4B10662A8525CECF8B
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/5N_kgbicsvOFuDHv_jewlQhqPNE.roa
Signing time: Fri 30 Aug 2024 12:55:22 +0000
ROA not before: Fri 30 Aug 2024 12:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 80.253.245.0/24 maxlen: 24
80.253.247.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
213.142.135.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
2a01:ed80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:5a:ce:48:41:41:8a:4b:10:66:2a:85:25:ce:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Aug 30 12:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4dfe481b89cb2f385b831effe37b095086a3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:dd:60:8c:96:e9:15:0c:67:c6:4d:8d:29:
16:7e:a8:20:f7:fb:9a:39:3a:e4:c5:7b:6e:3b:16:
cc:6e:a7:15:b7:12:69:aa:19:50:cf:c9:45:de:14:
6b:3a:5d:3f:0a:b4:aa:eb:76:ce:fd:2d:16:d1:a5:
37:8e:0d:a6:b2:19:db:93:49:8d:d2:e4:d9:66:f8:
5a:35:ff:f1:f9:ee:0a:0c:68:08:a0:d2:47:25:f4:
78:bf:f8:93:ab:c9:48:bd:a0:a0:0e:6f:fe:fd:b1:
cc:64:48:00:30:ef:2e:0f:94:97:17:98:ff:9d:bf:
61:6d:82:3e:67:50:6d:2a:85:ea:0e:9c:c0:0b:31:
84:14:f7:89:97:35:2d:c9:59:1d:c6:30:d4:ca:d2:
35:4b:c1:21:de:b8:81:60:90:f9:4b:05:2f:c5:c8:
d6:73:65:83:87:11:2b:45:9b:aa:87:f8:0b:42:d7:
c9:f9:0e:03:92:e5:1f:13:35:7f:16:39:a2:12:9e:
d4:38:89:fa:be:cf:52:f0:21:08:9e:17:d9:ae:8f:
28:01:49:8a:ca:a0:96:b1:d4:37:02:4e:d8:ac:85:
20:f2:ad:29:7f:b1:b8:9d:83:a9:26:ca:2d:f4:3e:
75:7b:26:9e:ab:83:dd:b2:8a:9c:a2:8b:b6:6e:2a:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:E4:81:B8:9C:B2:F3:85:B8:31:EF:FE:37:B0:95:08:6A:3C:D1
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/5N_kgbicsvOFuDHv_jewlQhqPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.245.0/24
80.253.247.0/24
91.151.83.0-91.151.84.255
213.142.135.0/24
213.142.143.0/24
IPv6:
2a01:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
bc:97:db:57:26:85:6f:ce:a0:97:7a:8b:67:60:69:4d:70:d5:
a3:63:fd:60:44:00:33:c3:32:16:39:91:a0:a7:0a:cd:1f:2c:
82:8f:06:26:af:38:9b:6b:99:86:a7:ca:60:01:9c:ac:fb:ed:
d5:a3:15:2f:d9:d4:b8:57:44:37:70:30:e6:21:48:74:0c:f8:
3a:c4:43:e3:20:dc:75:25:60:29:08:7b:3d:93:11:07:b8:2d:
63:ba:85:d3:5a:0e:1d:49:4c:b4:0f:a8:85:5e:0e:d0:9b:ae:
16:16:a8:61:a1:68:cf:20:46:59:61:af:68:c3:34:5f:6c:b7:
39:5b:04:fc:61:6b:5d:b9:c3:a5:04:6e:57:f7:93:8c:56:34:
1a:3b:8e:da:e7:73:fa:b2:b5:4f:de:b6:f9:73:f4:be:f2:e6:
29:40:be:38:cb:3b:e8:2d:d3:fe:14:f8:d7:dc:0e:ab:69:47:
53:c0:be:d8:c0:47:db:d9:3b:09:80:d0:62:df:54:21:d7:01:
9c:33:c6:54:84:f6:48:ec:0e:14:3d:1a:69:6c:7f:8c:56:bc:
8e:88:fd:f8:d2:50:89:35:da:a2:15:c8:06:d3:63:cc:46:56:
0c:ca:e3:8c:27:ea:32:db:f5:f6:b3:19:21:33:a2:4a:2a:e1:
61:1f:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:43:55 2024 by rpki-client on console-ams.rpki-client.org