Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/RB5rJUyUM52eUmPRz0a_eatOfko.roa
File: RB5rJUyUM52eUmPRz0a_eatOfko.roa (raw, json)
Hash identifier: QxwNHPerJiQon3Bpp8jf1klRGrhgX+zu2J+tNoJnO2w=
Subject key identifier: 44:1E:6B:25:4C:94:33:9D:9E:52:63:D1:CF:46:BF:79:AB:4E:7E:4A
Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Certificate serial: 018CC26D7AC55A9028740593C06A98428EE1
Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/RB5rJUyUM52eUmPRz0a_eatOfko.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13058
IP address blocks: 185.240.52.0/22 maxlen: 24
2a0c:7280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7a:c5:5a:90:28:74:05:93:c0:6a:98:42:8e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=441e6b254c94339d9e5263d1cf46bf79ab4e7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:c0:8b:a4:e8:b4:fd:c6:71:0e:fd:df:f9:
62:01:ac:ca:a9:e4:20:74:8c:3f:e7:e8:3f:80:8a:
d4:d7:0c:b3:a3:8d:90:37:93:d4:a3:a0:2f:98:e8:
a1:f2:53:35:f1:73:d9:08:53:b0:1e:ab:a6:76:ca:
2b:0f:f5:40:52:38:ea:b8:37:ca:1f:3b:48:09:17:
f6:b1:f1:d3:09:92:92:08:2c:97:94:2e:ed:7c:32:
6a:f3:63:1b:07:6a:1f:e6:50:8f:91:e5:0f:de:67:
eb:4a:1d:18:fd:e4:31:c9:58:be:28:50:f6:71:0d:
5e:97:ab:b6:82:16:a6:9f:90:5a:7e:12:ed:51:0c:
39:b0:61:f6:3f:b4:4b:4e:e1:a7:0f:4a:4a:2f:79:
e1:52:cf:4b:b0:1d:8a:9c:f9:36:ad:65:bc:ea:a2:
d4:f2:a3:eb:61:7d:ab:bc:e3:11:1c:6c:e4:4a:f5:
67:67:a8:74:67:21:bb:ce:0d:a4:f7:c6:df:dc:c0:
5a:16:6c:79:48:c3:10:51:88:81:1d:26:ef:85:6a:
59:95:c5:53:ed:7f:39:93:c1:df:d9:81:28:91:26:
b4:68:09:5f:8f:89:80:99:de:3b:f2:0f:d1:a6:ab:
1b:70:16:1c:de:85:81:fe:52:42:3f:12:c5:c7:57:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:6B:25:4C:94:33:9D:9E:52:63:D1:CF:46:BF:79:AB:4E:7E:4A
X509v3 Authority Key Identifier:
keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/RB5rJUyUM52eUmPRz0a_eatOfko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.52.0/22
IPv6:
2a0c:7280::/29
Signature Algorithm: sha256WithRSAEncryption
7d:3f:59:c4:89:34:de:9d:50:84:85:00:50:eb:d2:43:bd:c5:
1e:2f:5b:25:82:41:62:85:d6:2c:92:ce:ea:0e:d9:d9:39:bc:
5d:b7:31:f9:2a:50:24:a6:e5:d6:02:80:47:3a:41:34:9d:32:
0e:57:28:6b:9e:3d:32:2a:83:50:83:88:d3:eb:e7:6f:04:7a:
12:e4:1c:11:1e:60:f6:e1:e2:26:8f:18:92:7d:60:fd:95:c9:
39:3c:95:aa:ad:c1:bc:4a:b1:d1:ae:ed:c0:ac:7d:04:8f:ce:
e2:e4:01:c4:4c:21:13:e1:a7:c6:76:13:40:7c:ca:a9:87:51:
96:3d:d2:e5:36:7d:34:52:2b:90:db:bf:95:1d:59:91:68:21:
41:83:1f:fb:75:5b:26:4d:b7:3e:d1:a0:d1:9d:2a:f8:a5:35:
3f:8a:fc:18:5c:45:a7:5c:5f:ad:56:a8:84:ce:60:6f:e5:6f:
4d:64:ab:90:7d:55:2e:30:48:e0:56:0a:a9:17:84:cc:fa:89:
0d:a2:81:3c:b4:1a:6e:d2:d4:fc:45:ac:b9:d3:3b:f1:1b:aa:
6e:b7:ea:54:c9:10:44:36:55:1a:1f:a6:8e:c6:fb:89:52:a3:
4a:c7:a2:eb:d4:9b:65:ed:03:e0:e4:9a:b7:b6:37:ed:ce:44:
56:e8:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 06:18:55 2024 by rpki-client on console-fra.rpki-client.org