Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa
File: LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa (raw, json)
Hash identifier: Ktf2MnMqyy+5h6asitUxeOYJEXYzKdFkLmEbXzMZl9k=
Subject key identifier: 2C:90:B2:43:D3:C3:0A:45:35:13:3D:F8:39:9F:C1:B6:4C:A5:50:54
Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial: 018CC26CF359B3E8D0A465D5C12E71D2EBB4
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 5.22.145.0/24 maxlen: 24
2a00:18e0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f3:59:b3:e8:d0:a4:65:d5:c1:2e:71:d2:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c90b243d3c30a4535133df8399fc1b64ca55054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:a5:5b:6c:10:65:78:23:f6:5c:95:6d:68:
c5:2c:30:8c:fd:53:83:91:7d:84:e8:00:5f:8d:ab:
8f:7a:f3:f8:69:3a:5e:cf:64:55:1e:da:f2:71:2c:
e5:f4:8b:5e:3d:3a:71:a2:08:1e:a6:4e:c8:80:e0:
8d:85:b9:97:03:ca:09:01:09:0a:3c:2c:46:a5:af:
e6:00:ed:6f:b6:88:3f:9a:5b:aa:42:70:13:3c:01:
65:60:04:53:33:b0:bb:fc:79:28:81:c2:c7:dd:e0:
5e:26:81:97:7a:3e:0a:37:5a:dc:b6:ec:c7:af:1b:
37:c9:bd:65:0b:f3:48:f0:c3:0b:f7:4f:fc:60:e6:
33:4b:79:72:92:7d:ae:0d:8c:c5:2d:79:69:2b:8b:
e1:95:d6:56:2a:7c:f4:6d:33:b3:9c:2e:9c:84:64:
02:00:ed:ba:25:b6:3a:9a:c7:52:61:55:6f:b6:0b:
c8:fa:26:ca:09:76:2a:28:5e:0f:2c:f7:3d:9a:dd:
fb:57:d6:03:b4:ae:bf:59:b6:ba:ba:21:99:00:b1:
2e:50:3b:7d:82:9b:42:05:92:7c:ab:82:d5:b6:16:
5b:48:36:a0:e4:1d:e9:1b:39:b6:dd:fd:21:b6:92:
fc:b1:24:70:09:9b:b9:b5:5a:93:56:23:2e:2d:c3:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:B2:43:D3:C3:0A:45:35:13:3D:F8:39:9F:C1:B6:4C:A5:50:54
X509v3 Authority Key Identifier:
keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.145.0/24
IPv6:
2a00:18e0:5::/48
Signature Algorithm: sha256WithRSAEncryption
62:11:4a:19:6c:82:25:2a:79:b0:9e:1b:6f:5e:82:6f:9d:f9:
75:07:aa:80:b5:b6:ba:f6:ce:8b:be:2c:f0:4f:1e:cd:af:6c:
8a:71:19:29:d3:e5:49:5c:fb:b1:86:7e:1d:33:6d:d3:4b:e4:
76:85:30:60:62:24:52:21:86:96:fd:8f:dc:8d:e5:8f:1f:e2:
ab:b6:4a:5b:b2:0e:5c:ba:e0:9a:29:c7:92:d3:8e:2c:58:96:
ea:f4:76:99:e0:c0:82:30:57:c8:23:d6:59:d1:e6:e4:a1:24:
78:87:36:d1:d3:55:13:8a:0c:bb:f7:ee:6f:5f:dd:f8:f3:74:
77:17:92:a5:a3:76:55:54:3b:d2:48:28:c4:47:bb:3a:5e:01:
51:08:1a:8d:9b:9a:fd:9e:e0:f4:f2:2e:fa:e2:62:73:6f:4d:
1d:c4:d4:23:8b:af:f2:c1:12:08:85:f6:85:eb:64:8e:2f:c6:
9b:ec:a4:86:56:4e:46:17:c0:ea:ee:ac:ac:59:46:a3:97:9f:
f0:20:a0:7d:98:6f:c1:c3:3e:8d:91:89:b0:80:eb:f5:bf:e4:
6b:c9:e0:43:89:a9:43:72:c6:e7:b5:4e:f0:99:23:63:c6:e1:
ff:ca:53:62:ca:e7:1a:0c:8b:a3:c8:28:95:4e:7b:1e:62:24:
49:d3:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:25:27 2024 by rpki-client on console-fra.rpki-client.org