Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5YeJiQGTU37epF0QAub40mJdfns.roa
File: 5YeJiQGTU37epF0QAub40mJdfns.roa (raw, json)
Hash identifier: WLYpxpQSD2ODKgGDnZfNXhtRXrehjv2cUl5exInHrXc=
Subject key identifier: E5:87:89:89:01:93:53:7E:DE:A4:5D:10:02:E6:F8:D2:62:5D:7E:7B
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018EE0A53435E0AC88237A7E5412B040E67A
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5YeJiQGTU37epF0QAub40mJdfns.roa
Signing time: Mon 15 Apr 2024 07:25:06 +0000
ROA not before: Mon 15 Apr 2024 07:25:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:a5:34:35:e0:ac:88:23:7a:7e:54:12:b0:40:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 15 07:25:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e58789890193537edea45d1002e6f8d2625d7e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:42:a1:23:7e:a4:81:c2:2e:f3:2f:0e:b7:
de:7f:e7:28:88:13:dd:aa:d1:53:90:bc:d2:5e:02:
db:93:79:4b:85:19:7e:61:f9:0c:c9:17:73:69:36:
21:52:a6:90:73:d6:7e:30:5e:e6:3e:0f:16:e7:f7:
13:9b:a4:89:ac:00:57:71:c6:12:5b:b0:fd:ae:ea:
b3:eb:af:8d:32:07:a9:56:7d:43:02:95:56:76:2c:
55:f6:2e:c3:6e:87:81:6c:c4:0c:91:6e:df:0a:7f:
ba:30:f9:fb:0a:24:c6:cc:ef:5b:ad:b8:9e:52:7a:
72:d7:94:3e:41:b5:0e:54:7d:66:52:16:84:fd:b5:
c7:37:53:8e:c5:d4:d3:f2:af:84:16:16:00:5a:84:
3b:fa:6e:89:b5:68:8f:9d:af:bf:26:7f:5a:6f:b0:
5e:de:9a:f4:df:25:e0:1f:fc:d0:dd:08:8f:1a:1b:
ed:7c:0d:9a:eb:62:a4:f9:8c:c7:e6:9b:69:02:21:
25:cf:8f:2e:23:05:f1:f9:9d:b8:72:b3:bf:e9:72:
f1:51:03:31:17:81:27:38:34:fa:f7:d9:15:53:d7:
90:6f:91:cc:40:e7:e2:b9:4b:b2:a0:8b:14:d2:68:
6a:bf:1f:02:75:84:12:55:0a:82:64:a0:5c:ff:e7:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:89:89:01:93:53:7E:DE:A4:5D:10:02:E6:F8:D2:62:5D:7E:7B
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/5YeJiQGTU37epF0QAub40mJdfns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
12:72:6f:c5:eb:17:08:97:26:72:a5:e0:24:c8:bd:85:2e:ac:
c1:bb:15:d2:7c:d1:f3:84:07:cb:9b:7c:6a:22:0f:66:6d:a1:
2b:13:d4:ff:4e:2b:b0:2e:6e:44:5f:6c:37:55:ef:73:ab:d4:
5b:56:f5:03:95:19:3c:b5:c8:42:e1:18:c7:98:f4:9f:7d:b8:
41:d8:87:06:af:f2:39:9f:09:f6:ff:ed:d5:d5:d4:0f:b0:83:
4c:c0:23:1a:63:e6:ab:63:25:04:f0:9a:df:63:89:bf:41:2c:
f6:0d:1f:87:66:00:37:36:6d:da:da:6c:79:f8:d4:14:d2:b9:
f7:55:9f:7f:1d:89:04:f7:fc:7a:03:a9:b0:17:01:09:c1:72:
d4:3e:da:25:1e:22:54:ed:4f:40:cc:80:17:b6:11:36:f8:e9:
e6:75:18:74:95:28:9e:85:55:af:be:f9:20:82:9f:40:38:43:
0b:a0:fd:35:7a:7e:e8:2f:96:68:7b:c0:03:ca:c9:4c:6b:3e:
39:e2:3c:d8:e1:9f:ae:b6:2c:45:7b:a7:54:4d:41:81:d4:cb:
16:b0:b3:30:94:ba:24:5a:07:96:8f:81:7d:0c:7b:3f:f9:7d:
54:5e:99:e8:88:20:c6:53:0b:69:5d:46:16:56:a3:19:58:c7:
e9:4a:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:37:10 2024 by rpki-client on console-ams.rpki-client.org