Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/5bVviZbxaRhX7mvHtDQCGrUFUd0.roa
File: 5bVviZbxaRhX7mvHtDQCGrUFUd0.roa (raw, json)
Hash identifier: 22P6dYpCSeoLweEKlkaH16eahIRuiCQBsWF+ApxdUXQ=
Subject key identifier: E5:B5:6F:89:96:F1:69:18:57:EE:6B:C7:B4:34:02:1A:B5:05:51:DD
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0192F6862D0F99A9BFF966DAA6F621E8B464
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/5bVviZbxaRhX7mvHtDQCGrUFUd0.roa
Signing time: Mon 04 Nov 2024 09:34:01 +0000
ROA not before: Mon 04 Nov 2024 09:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28815
IP address blocks: 195.46.40.0/22 maxlen: 22
195.46.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:86:2d:0f:99:a9:bf:f9:66:da:a6:f6:21:e8:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Nov 4 09:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b56f8996f1691857ee6bc7b434021ab50551dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:36:33:00:fd:2d:29:73:d1:ac:7d:ce:c7:
87:ea:af:8a:2a:06:f7:7a:af:85:f4:0d:c5:c1:61:
98:f7:d1:50:02:ff:5f:9e:50:f9:ec:59:74:a3:a4:
fd:72:c6:d4:ea:2c:e7:f2:f5:ef:a7:68:ba:de:70:
48:b9:e7:62:99:25:8f:d3:fa:4d:49:f8:fe:65:81:
ea:b0:97:95:c6:61:6d:01:98:14:89:00:4e:3e:cd:
4f:ed:23:39:6d:23:af:45:42:a1:59:44:66:b5:2c:
1d:32:5e:b6:a7:ae:91:e7:ec:84:02:49:9f:ef:4d:
84:33:ff:6e:c6:6f:d2:27:c5:18:2c:7e:03:e2:af:
89:36:ef:3f:93:78:30:55:06:c6:01:37:c9:73:17:
53:99:82:4a:46:57:fa:bb:04:3c:1c:5d:18:7a:76:
b6:81:5b:7d:10:54:ef:40:fe:96:e0:9d:90:94:bf:
76:ee:42:db:49:3a:e7:39:93:df:38:dd:4b:27:8d:
6c:0a:63:78:73:10:1a:7e:c1:a8:15:e9:80:c3:e9:
75:d1:e4:48:d4:2f:8f:81:47:1d:cb:dc:bd:17:69:
5d:9f:3a:43:e9:a7:b9:cf:13:5a:53:45:68:f0:cf:
88:46:40:61:74:c8:39:fd:4b:39:7f:62:87:7a:b1:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:6F:89:96:F1:69:18:57:EE:6B:C7:B4:34:02:1A:B5:05:51:DD
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/5bVviZbxaRhX7mvHtDQCGrUFUd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.46.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:44:24:7d:8f:68:da:08:e6:28:a8:e5:56:34:83:0a:f4:62:
fa:cb:38:52:10:a6:e5:a1:13:10:54:68:03:37:c0:e4:24:35:
cf:93:d1:a5:df:f2:d7:5f:b4:d7:27:c4:f1:69:e4:e7:bd:3c:
33:b0:82:a9:72:61:da:67:c3:e7:25:05:5c:94:f1:ae:2b:70:
64:4d:5d:dc:e8:93:1b:1e:74:a5:d4:b8:63:36:fb:5c:33:2b:
b6:fb:85:0a:f1:5a:54:fd:80:75:5a:b3:45:fc:a2:26:36:4b:
c6:e3:1e:be:b0:b5:ae:ce:7f:04:77:7c:4c:71:e5:54:f0:9e:
cc:40:c2:d7:19:11:63:e0:17:ab:8b:a7:8c:39:2f:2d:8a:de:
f4:20:fb:c7:67:5c:56:0c:e2:3d:9c:df:97:30:1a:f2:09:40:
da:30:e9:42:e2:eb:68:02:e1:1d:ba:97:33:04:32:2b:70:bc:
9d:da:c5:a5:b7:cd:a5:9f:fb:aa:2b:40:02:c4:be:96:e9:88:
47:29:28:14:6d:f0:46:47:69:13:0e:ef:9b:7a:bc:17:e3:97:
6e:7d:da:c8:3e:5f:44:05:59:5a:f7:5b:3a:81:d2:4d:03:09:
07:13:14:48:25:d9:cd:49:c4:31:b3:50:38:22:2e:50:d5:d5:
76:b2:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:44 2024 by rpki-client on console-ams.rpki-client.org