Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pacwnEUiXxxMgx61K-EdNhkxbh8.roa
File: pacwnEUiXxxMgx61K-EdNhkxbh8.roa (raw, json)
Hash identifier: L70ktTTgR54aqppBgG694bsX1DCl4NJk2GKoRQMaqQQ=
Subject key identifier: A5:A7:30:9C:45:22:5F:1C:4C:83:1E:B5:2B:E1:1D:36:19:31:6E:1F
Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial: 018CC500CBF6B6EF68AEF3E5587ED88A247C
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pacwnEUiXxxMgx61K-EdNhkxbh8.roa
Signing time: Mon 01 Jan 2024 12:30:12 +0000
ROA not before: Mon 01 Jan 2024 12:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59518
IP address blocks: 5.158.201.0/24 maxlen: 24
5.158.205.0/24 maxlen: 24
5.158.200.0/21 maxlen: 24
5.158.200.0/24 maxlen: 24
5.158.204.0/24 maxlen: 24
5.158.206.0/24 maxlen: 24
5.158.203.0/24 maxlen: 24
5.158.202.0/24 maxlen: 24
5.158.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:cb:f6:b6:ef:68:ae:f3:e5:58:7e:d8:8a:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Validity
Not Before: Jan 1 12:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5a7309c45225f1c4c831eb52be11d3619316e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:ae:a6:42:20:6b:b3:47:00:fb:44:c6:bf:
92:26:42:71:04:3c:ca:47:a3:92:57:c6:e7:54:29:
ea:ce:e7:6c:56:78:cf:e3:33:f8:cb:5b:1c:1b:52:
ed:32:2d:f1:0b:ba:57:d0:02:e7:3e:55:65:df:10:
41:24:6f:55:d5:3c:de:ca:5f:22:a2:6d:aa:9a:ca:
7e:c1:bd:c9:82:35:e6:77:b1:34:6d:a7:7a:f2:e6:
03:05:48:03:30:ba:8e:ce:e8:90:fd:3c:94:dd:e3:
0d:54:8f:f2:20:ca:32:b0:4f:3c:4e:d1:3c:ee:ce:
b0:af:01:b3:10:63:d7:ff:bc:73:55:f3:8d:44:3a:
11:5f:51:a6:da:6e:36:dd:2a:7e:0a:71:05:95:f4:
38:8c:9a:7b:50:0e:da:c6:a5:93:40:95:03:52:c9:
74:10:4c:f4:56:7b:38:ae:c2:d7:4f:9f:06:4d:62:
63:4c:ae:81:1b:b0:b6:4f:fd:2f:40:c7:12:b6:89:
fa:98:89:26:23:bf:ff:0c:6d:39:81:3a:26:7a:cc:
10:af:4d:2e:63:64:8b:d0:d4:2f:80:6d:76:d2:c9:
08:a6:43:ae:2f:20:59:94:02:3d:69:af:63:17:40:
9e:a0:41:6b:e5:ec:f2:29:a5:ef:03:d1:04:00:d9:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:30:9C:45:22:5F:1C:4C:83:1E:B5:2B:E1:1D:36:19:31:6E:1F
X509v3 Authority Key Identifier:
keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/pacwnEUiXxxMgx61K-EdNhkxbh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.200.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:93:49:58:ed:09:d4:5d:15:a6:4a:cc:f9:df:c7:c0:ef:26:
89:25:21:81:0f:2f:fa:e6:b3:df:04:7d:06:86:18:c5:9b:97:
f6:4f:c3:af:87:6b:65:33:94:56:99:ae:66:d4:c4:c6:ed:f6:
8f:08:9a:1d:2e:1f:e6:86:ab:df:9e:79:e3:49:45:40:ce:ac:
b3:f9:b6:af:f9:cc:d8:a0:17:3e:43:a8:61:69:ea:88:7d:7b:
e7:e6:0d:d3:1d:be:27:6a:d5:3a:83:40:fe:1d:85:a9:85:ab:
e7:d7:f9:0a:7f:67:be:c2:0d:3d:c4:47:d9:14:f7:39:4e:48:
66:84:00:d9:8e:1c:37:48:06:52:b6:29:82:f4:0f:7b:d2:9a:
8d:99:53:a1:da:95:1a:f7:a2:6b:d5:e5:0c:c4:1f:3e:fb:4a:
99:10:6c:2c:e3:95:7f:a0:e9:12:36:f4:f7:61:91:ee:e7:b9:
c2:0c:46:cd:eb:36:3d:7c:bd:16:28:38:9f:79:14:34:97:a2:
a8:29:3a:00:b9:59:a1:42:c1:f6:a7:02:06:f4:7f:53:6f:02:
d0:a6:04:8d:ac:2e:30:2e:d3:80:29:a0:f6:b1:3c:84:de:4f:
7a:fe:fd:90:37:89:39:8e:61:c7:66:2b:9b:f7:61:a8:39:41:
7c:79:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:46:01 2024 by rpki-client on console-fra.rpki-client.org