Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k5RfzPFOZIBNR-Mmgbv_FpUDlRg.roa
File: k5RfzPFOZIBNR-Mmgbv_FpUDlRg.roa (raw, json)
Hash identifier: dSc+LD4lic2d6hfxUILtUDk97FSxhMrp/VVLwZcXDXQ=
Subject key identifier: 93:94:5F:CC:F1:4E:64:80:4D:47:E3:26:81:BB:FF:16:95:03:95:18
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49250187FBA6A6566DD16D424737DBA
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k5RfzPFOZIBNR-Mmgbv_FpUDlRg.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59709
IP address blocks: 151.252.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:50:18:7f:ba:6a:65:66:dd:16:d4:24:73:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93945fccf14e64804d47e32681bbff1695039518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:62:22:b1:51:28:22:24:4e:60:ee:1a:8d:
70:99:70:e6:c4:3b:27:50:9c:26:17:fb:40:89:56:
e7:98:28:d5:10:ba:9f:8f:18:1c:6f:3f:a8:29:d7:
93:ec:f9:91:c9:bf:54:f5:d8:f3:be:ca:10:fc:38:
68:3b:62:63:9d:87:42:ea:96:db:13:00:1f:f3:1c:
3a:8e:44:cd:a9:1c:fb:0f:6c:4f:70:b8:dd:48:c1:
b9:da:97:08:27:6d:c9:aa:16:ee:18:3e:e4:0b:67:
e8:87:eb:7f:d1:24:da:f4:f4:d7:17:02:e5:1e:e3:
dd:82:00:f0:9d:83:ed:ff:b7:fe:0d:51:11:00:67:
2e:e1:0f:26:b9:7a:7d:4c:03:cd:16:d4:60:46:4a:
a1:61:00:73:ca:17:0e:57:56:eb:34:82:cf:97:9b:
bc:cb:93:15:3c:f2:5c:21:5e:7d:73:c9:1c:e0:63:
c2:58:68:9f:80:95:97:4a:26:fb:cd:21:71:98:20:
19:12:31:fc:8f:6a:da:69:c5:16:96:a0:b5:fe:2c:
c8:e7:96:74:df:b9:40:33:b0:e7:9c:61:e9:86:cc:
df:a5:91:0d:0f:0f:fe:13:0a:00:e0:7d:ca:bc:eb:
0c:39:3d:05:09:a7:72:3a:65:23:1e:af:62:56:7c:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:5F:CC:F1:4E:64:80:4D:47:E3:26:81:BB:FF:16:95:03:95:18
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k5RfzPFOZIBNR-Mmgbv_FpUDlRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.252.198.0/24
Signature Algorithm: sha256WithRSAEncryption
01:cd:c3:65:c2:f2:0a:3e:d7:ab:e7:6a:f3:91:8a:0a:d3:a7:
b7:f2:75:81:03:35:f0:bf:31:e9:68:04:30:85:21:d8:0f:3a:
d8:9a:77:20:04:aa:61:1b:89:b0:69:5a:bc:e1:f8:08:d6:e8:
44:2a:53:c1:7d:0c:fb:2c:d2:ce:49:7a:c0:2d:82:2a:53:10:
2f:f3:3b:fe:76:c0:8c:30:e6:b0:2b:dc:0c:8e:60:51:f1:28:
65:99:e4:01:59:59:74:cb:9a:c1:18:45:4a:ee:a8:29:fe:43:
4d:3e:d1:0d:84:a8:d0:c2:b9:05:33:8f:dc:0a:79:d6:cd:7c:
c9:d3:38:20:4f:d1:9d:83:6d:e6:0a:40:b4:67:26:c4:c1:a6:
e2:78:2b:99:da:96:76:b4:3f:19:65:df:a7:aa:fb:e4:a8:a4:
c0:d5:8e:a1:6c:1a:06:b4:6a:37:25:97:e5:52:10:19:64:8f:
03:3f:57:78:b5:be:0c:b5:45:74:0e:d2:ff:3e:94:1c:a0:ca:
d8:2f:aa:ea:c0:80:5d:b0:dc:35:2b:b1:36:ca:7e:43:c8:f2:
aa:b2:9f:2c:a2:b9:ca:bc:da:71:6e:55:7d:e1:37:09:91:ae:
3d:f0:6b:5f:9a:3f:59:a9:37:5d:40:9b:c2:b3:7c:d5:1c:87:
a3:06:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:25:31 2024 by rpki-client on console-fra.rpki-client.org