Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/7yLSjr7pnPXqU33LDOP8RM1T0qk.roa
File: 7yLSjr7pnPXqU33LDOP8RM1T0qk.roa (raw, json)
Hash identifier: monYW257XXYUhLGzLMp9GWW5F73CJEbtIr9Q8erBfCw=
Subject key identifier: EF:22:D2:8E:BE:E9:9C:F5:EA:53:7D:CB:0C:E3:FC:44:CD:53:D2:A9
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018CC649E357AD69FA220BE7A64783216742
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/7yLSjr7pnPXqU33LDOP8RM1T0qk.roa
Signing time: Mon 01 Jan 2024 18:29:40 +0000
ROA not before: Mon 01 Jan 2024 18:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201678
IP address blocks: 5.195.16.0/24 maxlen: 24
5.195.16.0/22 maxlen: 22
5.195.17.0/24 maxlen: 24
5.195.19.0/24 maxlen: 24
5.195.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e3:57:ad:69:fa:22:0b:e7:a6:47:83:21:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 18:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef22d28ebee99cf5ea537dcb0ce3fc44cd53d2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:68:9d:67:b1:51:34:7e:19:2a:96:35:0d:
78:20:e2:0e:24:1e:99:b7:51:56:21:c5:9d:19:47:
27:33:d8:7b:29:f1:8d:32:e3:43:66:4f:a0:2c:2b:
ef:e9:d0:38:ea:3a:51:62:c8:08:74:0a:bd:7e:1b:
f2:75:9f:e2:af:9b:37:b7:95:f2:06:48:de:85:98:
87:df:a0:34:73:ed:d8:02:87:cc:2e:4a:53:08:46:
43:86:6c:18:80:2f:69:18:dd:e8:ee:eb:ec:8c:70:
07:65:5c:a9:a6:2b:82:16:b4:1d:ed:fe:81:c2:c8:
db:0e:2b:13:1c:5e:b0:92:52:da:b4:14:f0:27:ab:
2d:f0:d4:9b:a3:82:f4:a1:cf:9a:ae:37:c9:88:55:
60:54:90:af:70:2d:20:fd:b9:06:86:fe:e0:66:d6:
1c:45:ec:34:6f:17:8d:7a:eb:fa:08:7d:49:bb:87:
5a:16:02:52:5f:ab:6c:df:d2:b2:32:e8:50:5b:d9:
68:c5:ce:56:93:0b:c1:e9:d9:0e:45:35:29:47:16:
a9:fd:2b:95:2f:05:81:92:ca:a0:e7:3c:e6:29:9e:
dc:47:70:72:13:ba:c2:57:31:db:03:2f:59:97:45:
7d:f3:b2:13:db:69:38:cf:02:09:b7:2b:32:6f:cc:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:22:D2:8E:BE:E9:9C:F5:EA:53:7D:CB:0C:E3:FC:44:CD:53:D2:A9
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/7yLSjr7pnPXqU33LDOP8RM1T0qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.195.16.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e2:21:da:51:8c:6e:4f:87:23:a2:a5:b8:e9:f7:3d:b5:d0:
9c:09:1a:c1:57:f2:e7:6a:3f:e8:dc:53:f9:cb:3d:82:1d:09:
50:23:ac:35:7d:fe:8a:14:5d:72:81:8e:aa:7e:88:7b:39:04:
62:b1:61:ce:96:a5:0d:5a:95:47:5a:c0:14:b8:f0:af:83:83:
e6:87:a8:94:37:39:5e:4e:a7:41:8d:5f:f3:25:9e:47:0e:74:
1d:27:3f:8e:a4:99:a0:ab:62:d1:2e:b8:34:45:e9:d2:5e:03:
00:6c:ff:1a:7c:7b:52:bb:1c:db:b6:9d:c1:2f:f1:bc:ef:4a:
d5:9b:a7:ab:b9:ba:79:2f:a8:10:62:5c:65:f6:9a:e0:0f:84:
ef:02:21:34:13:02:15:8c:5b:d6:ab:04:83:0b:01:8c:36:cb:
4b:51:7f:e5:3e:7a:36:43:ac:7b:ce:b4:b4:9a:5b:12:7f:6a:
91:c1:d3:ee:ba:63:21:2f:41:a9:04:3e:63:2a:fb:e5:0b:af:
aa:a6:f1:5a:35:22:fc:49:e2:be:0d:4f:ca:f4:36:e1:4f:ce:
62:b7:5d:0b:ad:b6:9e:91:67:9d:9e:53:8f:b3:bf:44:b8:21:
aa:f3:63:98:49:90:3e:53:47:9a:de:05:50:e1:db:89:a8:cf:
ca:67:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:12:16 2024 by rpki-client on console-fra.rpki-client.org