Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/mUHpKpgIJv5Z7b4f5k-AIrOy7wo.roa
File: mUHpKpgIJv5Z7b4f5k-AIrOy7wo.roa (raw, json)
Hash identifier: 3v+krM60PZL7fMklCq0NXyM0t0NqQ6Rwc4qRzcofPuY=
Subject key identifier: 99:41:E9:2A:98:08:26:FE:59:ED:BE:1F:E6:4F:80:22:B3:B2:EF:0A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 018E17E97AFEB47EDFA172B7E950FF545DFE
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/mUHpKpgIJv5Z7b4f5k-AIrOy7wo.roa
Signing time: Thu 07 Mar 2024 07:56:01 +0000
ROA not before: Thu 07 Mar 2024 07:56:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.80.0/24 maxlen: 24
5.35.81.0/24 maxlen: 24
91.218.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:e9:7a:fe:b4:7e:df:a1:72:b7:e9:50:ff:54:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 7 07:56:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9941e92a980826fe59edbe1fe64f8022b3b2ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:d6:ae:2e:9c:46:7f:13:93:9a:ee:df:bb:
dd:02:f3:13:7b:b4:f3:c2:58:78:a9:c5:b7:b6:c3:
f3:db:24:16:ad:37:e0:16:52:98:b1:94:3b:7f:e7:
f8:39:ad:37:78:34:3a:0d:a8:f3:5e:36:48:c9:cc:
88:c6:23:5e:98:93:02:7c:ef:04:98:ad:d3:b7:c6:
23:35:d7:db:f8:5e:ed:81:32:28:6a:81:bd:7a:cd:
db:95:07:61:3b:69:4d:9b:50:fb:6f:59:b0:75:f8:
92:91:06:81:dd:e5:a9:0e:dc:93:cd:ad:9f:89:ba:
8a:57:cd:5d:e0:3b:01:f5:5b:0b:cf:e3:70:13:53:
c7:c3:d7:3c:8a:16:e3:3e:4f:9f:1f:20:8c:d1:b8:
ed:ca:44:77:2d:77:39:a1:67:f8:e9:58:0c:f6:67:
a0:9f:4e:30:82:c8:24:83:51:04:62:9a:71:5c:88:
70:32:c8:e7:c2:58:8f:65:cb:b7:99:3f:cd:9a:f7:
e2:84:67:42:7d:9a:81:a8:ec:2c:5f:8d:e2:00:06:
de:51:aa:33:be:2e:9d:02:d8:9f:94:11:80:f6:31:
30:ac:c6:29:11:2a:65:12:e8:06:be:61:03:51:5c:
49:85:33:63:70:17:f3:44:1c:e4:5d:22:7a:a9:f2:
3d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:E9:2A:98:08:26:FE:59:ED:BE:1F:E6:4F:80:22:B3:B2:EF:0A
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/mUHpKpgIJv5Z7b4f5k-AIrOy7wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
91.218.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:40:27:81:fd:93:37:39:7b:e2:70:65:f8:62:01:be:2d:b9:
93:eb:2e:88:27:2e:96:d1:3b:c1:5b:56:8f:60:ff:5f:65:35:
7d:a1:30:8a:d9:e7:be:05:93:d6:2e:f1:cc:b4:95:1f:be:e0:
03:cd:21:42:28:e9:4c:9a:b9:66:b3:f0:5c:59:e7:65:7c:79:
59:29:b0:26:79:66:b8:00:d7:61:7b:ab:ea:13:64:ed:a1:a3:
64:90:a2:e3:3e:a9:03:09:48:af:4e:11:bd:0f:79:67:0b:c0:
63:c7:e5:0f:c3:c4:2c:8e:47:3b:20:59:7c:85:17:d3:27:ef:
2f:0c:82:80:e5:c4:4e:e7:a3:35:d2:1d:9c:11:55:ec:00:00:
43:2a:44:73:a9:8b:7d:21:71:9c:48:e4:2a:82:69:a6:2b:e2:
55:1d:f2:12:94:d4:2f:37:15:e9:04:e4:3d:28:9e:01:2a:2e:
2a:af:4f:49:c7:81:14:a0:06:70:3d:83:fe:bd:d8:26:ce:e7:
68:fc:a8:10:28:fc:da:89:35:f3:0a:45:f3:42:d4:c1:79:29:
d5:cc:e5:57:d1:00:f4:0a:0f:2d:6c:f5:e1:5f:8d:ea:0b:d8:
ba:03:1f:3e:6b:e5:4a:f3:e7:5a:e7:ce:03:73:23:7c:05:2b:
73:14:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:28:19 2024 by rpki-client on console-fra.rpki-client.org