Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/luOABzTvJ_X4UcXX8-7ogQhOxzI.roa
File: luOABzTvJ_X4UcXX8-7ogQhOxzI.roa (raw, json)
Hash identifier: gIx5rG/8rxLrfXms7U0pLR8kL7qpl5uapCq+ukUEdnM=
Subject key identifier: 96:E3:80:07:34:EF:27:F5:F8:51:C5:D7:F3:EE:E8:81:08:4E:C7:32
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 018CC7276D14BBCE10746FCE510BF0D3F7AC
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/luOABzTvJ_X4UcXX8-7ogQhOxzI.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202025
IP address blocks: 5.8.253.0/24 maxlen: 24
5.8.252.0/24 maxlen: 24
5.8.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6d:14:bb:ce:10:74:6f:ce:51:0b:f0:d3:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e3800734ef27f5f851c5d7f3eee881084ec732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:fc:ef:23:c4:41:ec:45:aa:a0:28:99:91:
3c:4d:72:ae:38:5e:11:46:d9:bc:5d:50:c9:b5:65:
fc:84:88:e3:0a:93:0c:0e:16:35:f5:91:bd:cc:a6:
61:a8:ea:46:e6:86:c2:39:33:85:53:c6:b0:2b:63:
3c:06:3f:34:4a:5d:a9:f7:fc:b4:53:5b:9d:d0:3c:
88:15:b8:1f:fd:0c:3d:db:36:0b:0d:0d:64:84:d5:
f7:b2:68:9d:56:32:96:1f:fc:7f:8f:06:0b:0d:a6:
13:3d:45:25:09:4c:4f:5f:59:98:e1:fd:b1:5c:16:
bc:8d:b0:25:8c:a6:8f:4d:dc:e8:87:4a:67:58:89:
b7:9f:f7:96:31:55:49:40:a8:bc:e9:22:7a:42:13:
30:74:b1:ff:4e:44:ba:e7:fb:de:9d:70:d0:ea:50:
88:c7:33:68:ec:7b:91:a4:cc:b4:82:a0:42:86:66:
6d:21:b1:f0:4a:1b:ae:f3:9d:be:d3:f2:26:ca:ea:
e5:4e:6e:80:8b:7f:c9:06:86:bd:75:75:8f:b0:43:
88:88:28:cc:42:d7:08:85:71:91:62:97:1a:fc:42:
98:17:01:9f:db:78:d9:06:0e:1e:85:f0:9f:0b:70:
8e:1f:9f:58:0a:ae:d6:ed:61:74:36:ab:5b:d8:ec:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E3:80:07:34:EF:27:F5:F8:51:C5:D7:F3:EE:E8:81:08:4E:C7:32
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/luOABzTvJ_X4UcXX8-7ogQhOxzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.252.0-5.8.254.255
Signature Algorithm: sha256WithRSAEncryption
74:6c:c8:8f:0b:cf:6c:70:69:f7:b1:d9:bf:d7:88:c2:64:ab:
59:9a:a8:f7:8c:f7:93:5b:7e:e1:b1:74:3b:84:49:7f:23:2f:
39:3a:ab:aa:74:ab:67:bd:9b:4a:f6:04:fb:f2:3f:05:be:16:
03:45:cf:a9:fd:a1:7e:89:77:d5:96:09:e9:fd:c4:34:d0:7e:
6e:56:32:10:fc:69:4d:d0:55:94:4a:b5:2d:95:f0:76:56:b9:
11:51:06:c3:d1:e6:62:c4:58:50:54:fc:a9:aa:13:9c:88:f5:
b0:e8:77:20:44:5a:02:19:d2:fc:da:6b:3f:29:4b:44:bb:8d:
f8:56:87:47:84:f4:79:be:e7:cf:cf:c3:77:56:bf:32:98:87:
65:d8:fc:58:1e:a6:a6:38:f6:0a:47:35:fd:f0:5f:ed:89:37:
b5:c8:43:64:84:5e:c0:5e:52:86:aa:ec:a0:6c:36:76:a3:04:
34:3c:b8:66:21:af:6e:a3:fc:af:86:81:9e:a9:b5:5b:a8:b0:
af:43:1d:4a:b8:59:03:35:f2:aa:ee:3c:e8:96:b9:32:3d:2d:
35:5d:da:73:b4:c2:7d:74:52:ba:6f:48:8b:9b:68:cf:5d:d4:
5d:65:d2:85:fc:e5:b6:fb:95:26:06:3a:8c:45:c5:25:52:40:
c1:74:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:33:58 2024 by rpki-client on console-ams.rpki-client.org