Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/5G3qdHaQBrJcxSz7QxnWpt2MqRE.roa
File: 5G3qdHaQBrJcxSz7QxnWpt2MqRE.roa (raw, json)
Hash identifier: Vrr7ey/JQPv6LW5Bar3B+KccjP4H1f5SgFKY2zv2vKk=
Subject key identifier: E4:6D:EA:74:76:90:06:B2:5C:C5:2C:FB:43:19:D6:A6:DD:8C:A9:11
Certificate issuer: /CN=78f29e87382159ca5e81387d7ee77e512fad1636
Certificate serial: 018CCA299CE4B72C678EA009F6718FF6941E
Authority key identifier: 78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/5G3qdHaQBrJcxSz7QxnWpt2MqRE.roa
Signing time: Tue 02 Jan 2024 12:32:53 +0000
ROA not before: Tue 02 Jan 2024 12:32:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51505
IP address blocks: 194.154.32.0/19 maxlen: 19
2a14:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:9c:e4:b7:2c:67:8e:a0:09:f6:71:8f:f6:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f29e87382159ca5e81387d7ee77e512fad1636
Validity
Not Before: Jan 2 12:32:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e46dea74769006b25cc52cfb4319d6a6dd8ca911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:ef:b0:97:3e:ec:59:4a:6e:1d:a1:ef:9c:
78:4d:25:5f:68:4a:8c:e3:58:a4:27:a1:60:9c:db:
88:37:c1:8b:22:7b:d7:e8:0d:c3:bd:74:de:7b:a8:
92:0d:93:a8:2d:8a:21:e2:85:57:98:16:48:20:c5:
ea:dd:6f:15:f4:f5:cc:cd:c2:bf:7b:75:60:a6:63:
6f:8c:d9:0f:8d:20:77:5c:f2:33:1a:f5:4f:ad:6b:
19:7f:30:0d:7d:e3:2f:db:c8:7b:e8:c5:6b:4f:45:
8a:35:2e:5e:93:db:57:ab:85:15:81:d2:01:1b:87:
92:ed:e2:0e:96:b2:19:64:8a:f6:6a:5d:a3:13:4e:
3f:55:99:9d:ff:4a:7a:49:1d:d8:5e:b2:de:9a:56:
34:99:25:6f:e1:1e:d0:36:56:1a:a6:8c:16:2c:7b:
63:02:1a:70:c9:0b:ee:cb:d7:12:c1:0a:23:81:da:
2c:81:fb:85:3d:6e:c1:47:d9:aa:b1:c0:69:40:d1:
90:50:3b:0f:c1:3c:62:89:0e:cf:12:90:1f:b1:77:
f7:48:5d:45:ee:89:a0:7f:79:28:8e:41:14:3a:1d:
10:76:c4:ea:20:53:13:86:da:ba:78:55:2f:5c:8a:
75:35:2f:6b:18:42:d3:dc:d8:42:b3:8e:d7:80:27:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6D:EA:74:76:90:06:B2:5C:C5:2C:FB:43:19:D6:A6:DD:8C:A9:11
X509v3 Authority Key Identifier:
keyid:78:F2:9E:87:38:21:59:CA:5E:81:38:7D:7E:E7:7E:51:2F:AD:16:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePKehzghWcpegTh9fud-US-tFjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/5G3qdHaQBrJcxSz7QxnWpt2MqRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4b48b-462e-45a6-860d-82f89cba26d8/1/ePKehzghWcpegTh9fud-US-tFjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.154.32.0/19
IPv6:
2a14:6700::/29
Signature Algorithm: sha256WithRSAEncryption
60:c7:f3:90:ab:71:34:49:c5:78:c7:0e:0d:ad:0d:14:53:1e:
84:e2:d1:62:6f:f7:dc:4b:cc:8b:d5:c9:f2:cf:cf:2b:d5:19:
6e:74:5d:a7:e7:28:7e:79:63:41:cf:79:23:5b:b6:5d:b8:cd:
42:2b:24:4b:b5:3a:c9:a8:f0:46:19:16:e6:cd:39:8b:1a:c4:
ee:ce:f0:5f:9d:11:31:02:1d:22:df:c0:33:e8:ba:24:71:f5:
52:50:dd:2c:9b:03:c5:b8:96:98:dc:04:c8:bf:54:61:10:7d:
3f:60:da:ed:aa:43:7f:a9:73:7b:33:23:f4:f1:f4:b0:09:c2:
cf:2d:b5:3e:a0:56:98:ec:b0:f1:9c:7a:83:ad:9d:30:74:05:
ea:58:2f:8a:c2:68:f8:05:aa:7b:1f:a1:19:bc:40:b8:02:77:
eb:04:37:46:34:5f:82:7b:9d:91:42:f0:d4:d5:b0:34:c7:25:
25:6b:b4:c7:26:34:2a:fc:21:88:16:6d:15:9a:52:29:5f:0d:
1e:db:01:d4:43:b6:49:a4:c9:a1:53:3e:74:45:8d:ec:ad:ea:
b8:81:e5:13:69:3e:af:ac:d8:8a:9b:70:b3:3f:96:7d:c2:bb:
13:92:cb:25:f7:75:00:bf:95:6d:03:5c:4b:96:5e:9e:c8:f0:
f6:65:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:36 2024 by rpki-client on console-fra.rpki-client.org