Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/O17RWCi-pLi3YhhIrnMSmouAkuk.roa
File: O17RWCi-pLi3YhhIrnMSmouAkuk.roa (raw, json)
Hash identifier: 4IHKpjZkQusVR7kpTs0R/laM4axahyWp04AAnseHGr0=
Subject key identifier: 3B:5E:D1:58:28:BE:A4:B8:B7:62:18:48:AE:73:12:9A:8B:80:92:E9
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 018E372ED0544983797165817F821BF5B8A6
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/O17RWCi-pLi3YhhIrnMSmouAkuk.roa
Signing time: Wed 13 Mar 2024 09:39:58 +0000
ROA not before: Wed 13 Mar 2024 09:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58208
IP address blocks: 5.42.152.0/22 maxlen: 24
5.42.153.0/24 maxlen: 24
5.42.156.0/23 maxlen: 24
5.42.159.0/24 maxlen: 24
91.216.120.0/24 maxlen: 24
2a01:45c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:2e:d0:54:49:83:79:71:65:81:7f:82:1b:f5:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Mar 13 09:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5ed15828bea4b8b7621848ae73129a8b8092e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:a1:43:54:36:41:af:6d:cf:0c:e0:ee:49:
83:5e:de:ae:db:95:42:99:ec:cd:1e:8e:6c:4a:25:
3d:d2:9e:e6:f1:a8:e1:5c:15:3c:28:86:6d:79:7c:
0a:e5:80:93:38:a8:ab:49:78:a0:f5:c2:aa:eb:3f:
2a:8c:c2:13:d2:89:d2:26:bc:84:0b:c8:12:5f:37:
0f:7f:5e:ce:8b:8e:2a:51:00:53:f3:9e:67:29:c0:
bd:52:bd:09:23:ff:80:9b:01:40:26:c5:4f:a7:a3:
83:3c:73:a8:21:ce:bd:ac:8a:34:e3:47:68:5b:87:
05:e9:1c:57:3d:7c:b3:2c:4e:88:13:aa:9b:65:83:
03:2f:85:ae:eb:19:63:90:2c:cc:02:93:c3:42:4c:
44:7a:d9:21:82:23:cc:4a:a2:0b:73:17:2d:09:04:
07:a0:b5:e8:ec:69:52:ff:e2:b6:54:b1:cd:81:ea:
65:62:65:46:98:05:27:69:52:e9:c8:76:f3:24:02:
89:e8:8d:cc:4e:91:16:e7:ac:bf:a1:94:cb:53:80:
44:0a:4f:2f:32:58:d2:ea:74:3a:37:91:41:94:05:
21:a4:e7:3a:a1:ff:7a:4c:6b:57:8f:67:fb:22:63:
36:f5:66:7e:5d:07:76:db:ef:6a:cb:ab:70:6b:47:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:D1:58:28:BE:A4:B8:B7:62:18:48:AE:73:12:9A:8B:80:92:E9
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/O17RWCi-pLi3YhhIrnMSmouAkuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.152.0-5.42.157.255
5.42.159.0/24
91.216.120.0/24
IPv6:
2a01:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
59:a5:12:88:c0:82:e2:c5:81:0e:3d:42:65:50:4d:e3:a6:a2:
b1:51:80:92:15:de:f0:0d:48:65:d9:a5:dd:1c:da:b5:4a:2d:
87:42:6b:57:97:0a:41:17:a9:76:05:6c:1d:35:b0:18:b3:06:
92:7f:73:a5:26:9f:ea:3f:92:1f:79:9a:3c:e0:a9:2e:82:0f:
91:5d:97:7b:55:53:f8:82:fa:c2:9b:bb:f6:8a:59:0d:d8:38:
b6:db:25:75:0f:72:51:77:a6:11:f3:9e:e6:15:36:6e:a4:fb:
62:f7:4b:35:a9:95:c2:5e:54:d4:d7:bf:1c:7e:87:e2:42:0a:
64:59:51:43:ec:d6:60:38:64:45:7e:47:41:12:34:ed:5b:24:
97:9b:d0:12:04:02:a3:05:aa:f1:9b:86:b5:b3:b8:d4:0b:a3:
52:84:6a:68:19:9c:c3:9b:64:11:74:fa:b6:ab:20:e0:88:68:
e8:66:83:d0:30:29:09:07:e2:b1:f9:f9:f3:af:87:91:bd:9a:
f2:59:36:c9:8d:31:2e:40:33:ba:10:82:93:60:b7:cd:87:f2:
8d:d5:b9:86:56:1d:73:94:ed:66:32:82:b0:07:9c:1d:6c:c8:
56:43:02:03:cd:17:fd:f0:f4:85:1a:56:22:e1:75:8b:59:dd:
0c:ff:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:42:18 2024 by rpki-client on console-ams.rpki-client.org