Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/5eLaNlSPKZSWm5E5UhOvaVFxTqc.roa
File: 5eLaNlSPKZSWm5E5UhOvaVFxTqc.roa (raw, json)
Hash identifier: IFPmp2bjNy08Sh2w2U198tiz0CIK318eXRMH/ayKoyk=
Subject key identifier: E5:E2:DA:36:54:8F:29:94:96:9B:91:39:52:13:AF:69:51:71:4E:A7
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018F104ACD18E3C0C9AD9464F467A8B15757
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/5eLaNlSPKZSWm5E5UhOvaVFxTqc.roa
Signing time: Wed 24 Apr 2024 13:28:08 +0000
ROA not before: Wed 24 Apr 2024 13:28:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 217.147.180.0/23 maxlen: 24
217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
2a0b:2900:1100::/40 maxlen: 48
2a0b:2900:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:4a:cd:18:e3:c0:c9:ad:94:64:f4:67:a8:b1:57:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Apr 24 13:28:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e2da36548f2994969b91395213af6951714ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:56:58:2c:03:2b:89:69:72:61:a2:7c:9e:
44:54:a4:9f:20:d7:b7:7e:4d:f1:fd:e4:5a:42:59:
7c:7d:66:9a:63:e3:f1:d8:31:5c:e0:64:92:81:23:
a3:da:c8:6d:57:c4:c2:ae:52:9b:94:e4:6e:98:20:
fa:fa:ec:f5:c8:ac:b7:03:e2:b9:bb:d3:f5:77:3b:
04:ea:72:73:bf:09:b7:55:d1:bb:c6:24:d6:8b:d8:
7b:f6:62:5f:c5:2f:c8:d9:5a:38:13:e5:40:b3:53:
8e:8c:5d:22:3b:18:7d:b6:36:ec:d1:51:20:e4:ff:
02:c6:93:e8:4f:2a:5b:7b:ec:c7:14:d3:b4:6c:93:
91:63:a8:9b:dc:02:48:64:e6:ea:59:a5:6c:32:50:
95:88:87:a9:76:63:80:90:6f:cf:91:19:86:f3:b6:
48:bc:1b:c2:86:ca:55:ea:b9:19:6f:92:af:94:fb:
0f:82:16:6a:95:82:c3:2f:75:b6:0c:a3:3c:44:72:
43:3b:60:07:12:c2:30:cf:bd:bc:3c:d0:30:9c:c6:
82:9e:6f:f0:a9:df:a6:2b:c5:39:1b:d0:90:74:fc:
6d:4c:35:3c:e9:41:6c:12:23:54:3a:51:98:ac:fc:
d9:c9:af:a1:ec:1e:a7:ee:45:03:0c:66:02:21:63:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:DA:36:54:8F:29:94:96:9B:91:39:52:13:AF:69:51:71:4E:A7
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/5eLaNlSPKZSWm5E5UhOvaVFxTqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
IPv6:
2a0b:2900:1100::/40
2a0b:2900:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
35:1a:b6:8d:ed:48:62:f3:7f:2e:09:5f:48:37:86:21:f2:b4:
02:8b:9c:ac:d9:74:d0:12:88:6e:78:0e:e0:5b:16:b7:f2:5e:
27:e9:71:21:7d:4c:3c:d9:6c:a6:bd:f3:09:d2:91:0a:6b:3c:
42:88:26:b0:2e:bd:43:19:55:a6:af:70:6e:82:35:4d:bc:8b:
97:cc:1f:36:6d:6c:23:4c:d5:d8:24:f6:83:bf:67:b9:41:24:
fb:3a:54:82:c9:60:59:75:59:56:27:95:32:90:66:7d:85:68:
74:7b:32:e7:70:38:d8:68:f9:5a:af:f2:25:50:75:20:ab:25:
3d:fb:0a:1a:28:38:22:c0:a8:c4:81:86:74:d8:6b:f3:2e:64:
3f:05:6f:20:77:2e:e4:b4:f0:2b:10:2c:28:31:78:23:ae:82:
67:62:6a:79:19:b3:3c:8a:ba:41:31:8c:82:1a:6a:bd:e6:2e:
fe:0a:1d:14:ef:a8:06:fd:eb:83:ed:46:b0:17:f8:e7:cb:cb:
27:1b:3c:62:a5:a8:8a:3b:ea:c7:73:8f:03:b7:da:86:d6:b1:
c6:fa:b8:9c:64:2b:4d:7d:42:65:a8:ab:a0:91:12:51:1f:7f:
bf:0b:7d:17:bc:5f:42:b2:0f:4b:bc:13:ae:8d:36:d8:2f:3d:
65:19:b1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:12:14 2024 by rpki-client on console-ams.rpki-client.org