Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/5XihfbvwT4VvyIUAH_Om6kfubm0.roa
File: 5XihfbvwT4VvyIUAH_Om6kfubm0.roa (raw, json)
Hash identifier: 1Rs7iK1SzXyzv/T9iPiaLC17p5G49r+9b0gLShBC+/4=
Subject key identifier: E5:78:A1:7D:BB:F0:4F:85:6F:C8:85:00:1F:F3:A6:EA:47:EE:6E:6D
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 018CC56E17A04704863D1FF16BC5B54EC7EF
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/5XihfbvwT4VvyIUAH_Om6kfubm0.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209836
IP address blocks: 213.232.124.0/24 maxlen: 24
185.126.201.0/24 maxlen: 24
213.232.125.0/24 maxlen: 24
185.126.200.0/24 maxlen: 24
213.232.127.0/24 maxlen: 24
213.232.126.0/24 maxlen: 24
2a13:6b00::/32 maxlen: 32
2a0a:2fc0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:17:a0:47:04:86:3d:1f:f1:6b:c5:b5:4e:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e578a17dbbf04f856fc885001ff3a6ea47ee6e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:a2:df:95:76:05:a3:e6:54:34:94:25:10:
fa:84:2b:49:3d:c7:03:76:40:d1:4d:02:e6:3d:d7:
42:5b:c9:32:15:fd:65:28:5a:b5:78:b1:6a:ff:7c:
f6:b3:7e:b9:f1:bf:a3:3c:32:9d:2d:1e:0e:87:f5:
87:96:95:1e:d5:75:ac:1e:84:50:63:60:50:cd:fc:
b9:89:a9:b6:3e:79:47:37:05:e1:22:25:3f:a1:4d:
86:b8:a0:09:34:c7:36:5a:54:e0:9e:f1:06:9d:c8:
9b:99:c2:9c:e8:07:9b:28:93:a7:ee:93:52:b5:e9:
4f:b8:8a:03:cd:5e:ff:d8:ef:bc:44:2f:ea:39:d1:
d7:eb:b4:58:a2:de:32:e4:a9:fc:5a:de:c0:42:da:
39:37:03:ab:ee:da:0c:30:98:8c:24:1a:15:10:44:
57:7f:9d:4f:88:5d:c7:b4:68:f8:25:9f:1a:1b:e5:
36:6e:33:d0:a1:a8:ba:36:6b:3c:31:55:63:fd:20:
1a:c7:30:14:65:b5:19:b3:ed:84:e4:24:5d:a3:b6:
17:d8:40:06:80:67:b7:06:75:09:71:28:32:2a:ff:
b1:ac:ab:d5:bd:25:2b:56:2d:5f:0d:b6:df:ca:31:
b3:84:7e:69:17:74:7b:d9:93:6c:ab:57:39:1b:45:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:A1:7D:BB:F0:4F:85:6F:C8:85:00:1F:F3:A6:EA:47:EE:6E:6D
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/5XihfbvwT4VvyIUAH_Om6kfubm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.200.0/23
213.232.124.0/22
IPv6:
2a0a:2fc0::/30
2a13:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
70:9e:54:4a:5e:89:6d:8a:cc:46:09:ad:a7:6b:d1:3a:71:de:
52:13:fc:b4:5d:80:48:3f:5b:18:5c:ef:4f:a4:ad:46:04:f8:
c2:82:03:b4:0c:cb:66:9f:74:08:1e:a7:97:63:35:9e:27:02:
0e:4c:62:b0:12:02:1d:1e:b7:8b:9b:12:1d:50:68:c0:48:f3:
10:f1:3c:d3:63:42:ae:09:16:98:8b:c2:0b:c3:df:d5:a2:88:
85:e8:e8:e6:df:32:78:90:fd:9e:21:ee:36:fe:8b:dd:e8:a8:
f5:71:32:ca:8e:aa:c1:a8:e7:a1:5c:bf:5c:63:42:22:36:71:
07:d9:8b:52:4f:d1:94:88:83:1a:89:50:a4:95:a0:a5:42:b8:
9a:d4:0e:ae:1a:84:7d:b0:a0:a8:10:a4:78:78:07:9a:24:cf:
a2:ea:9e:e2:71:a2:a5:81:f1:78:96:27:30:93:da:02:f6:47:
7b:06:cd:97:c5:6e:c8:00:09:b4:12:0a:2b:06:f6:8a:de:04:
71:2c:f9:3c:0e:88:d1:2a:d1:bd:5e:1a:88:ab:60:ca:61:e7:
3d:16:d3:f3:94:8f:8e:65:ff:80:00:0d:c8:dd:2e:e0:47:5a:
b6:53:39:7f:e0:70:c5:2d:0f:ab:03:ff:0d:b5:0c:fc:d3:9f:
42:53:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:12:26 2024 by rpki-client on console-fra.rpki-client.org