Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Tpxk4Mpp3kyZc9hC5tEP9ubk9k.roa
File: 5Tpxk4Mpp3kyZc9hC5tEP9ubk9k.roa (raw, json)
Hash identifier: f4ZukZN/IIv1hXwa4eOIW+CZbGnSfPuUN7unmS8d+14=
Subject key identifier: E5:3A:71:93:83:29:A7:79:32:65:CF:61:0B:9B:44:3F:DB:9B:93:D9
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018E9E334A4998D38B4BF23AFD06D7C89CD0
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Tpxk4Mpp3kyZc9hC5tEP9ubk9k.roa
Signing time: Tue 02 Apr 2024 09:45:45 +0000
ROA not before: Tue 02 Apr 2024 09:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198411
IP address blocks: 5.226.16.0/20 maxlen: 24
45.157.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:33:4a:49:98:d3:8b:4b:f2:3a:fd:06:d7:c8:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Apr 2 09:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e53a71938329a7793265cf610b9b443fdb9b93d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:2c:aa:2f:29:4e:a7:7b:08:6f:3d:6a:42:
41:d7:c1:69:94:4c:e8:e1:bb:88:a9:ca:3c:f5:8a:
18:fb:99:d9:24:07:45:7e:3f:d8:e3:23:76:76:36:
c1:b8:f8:3c:bc:15:21:ec:68:b1:12:d9:5f:a2:bc:
ec:da:80:54:d0:77:a8:76:5b:2b:9f:d9:c0:fa:4e:
4f:ee:b9:e2:5d:6c:e8:88:6d:bb:c8:61:de:3c:92:
c0:b7:a9:05:79:ae:2c:96:82:8c:02:83:ae:7e:fe:
29:47:15:88:89:19:77:f2:c0:cd:9e:5d:02:92:5c:
b9:78:f5:45:48:33:b6:b8:c0:ed:93:9a:eb:c1:41:
7a:77:02:c7:ce:a1:50:41:4a:d8:b6:bc:ae:84:da:
c3:17:ea:60:71:68:d0:67:7f:91:08:a5:e5:b2:cf:
08:92:f9:e9:94:ed:47:46:f5:85:1c:9a:b1:30:df:
bb:f1:43:3d:75:f2:e6:6f:e8:98:9b:53:e5:4a:e7:
ab:01:5e:1b:c6:cf:a0:bb:ba:35:fb:e4:14:2c:d2:
a1:56:4f:08:b4:01:3f:b1:40:0b:6e:9c:0c:19:8a:
32:36:e3:eb:e2:60:58:a1:6a:c9:0c:21:45:5f:57:
e7:89:28:ce:ff:07:3b:4c:f8:3e:b0:e1:f6:86:75:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3A:71:93:83:29:A7:79:32:65:CF:61:0B:9B:44:3F:DB:9B:93:D9
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/5Tpxk4Mpp3kyZc9hC5tEP9ubk9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.157.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d5:83:45:26:60:36:ab:34:30:c5:4f:eb:9e:76:3d:6a:88:
94:01:98:d3:5e:a8:7b:a1:2d:5b:8d:80:10:9c:0c:02:89:d6:
a3:fe:b4:90:43:b8:d4:fe:fc:f6:ed:2c:c9:08:72:d3:5a:d2:
58:ef:e6:f4:89:6f:15:b2:3e:90:48:d9:69:a6:d2:e3:f2:e4:
4c:ff:8d:7e:bc:31:8d:b8:9c:4e:99:4c:b6:4c:59:e1:34:02:
3b:a9:37:c4:4d:2a:2c:a4:2e:0b:0c:a5:e4:31:60:ea:ab:96:
ee:e1:18:bd:f2:44:ee:82:83:82:6a:a6:cc:db:a0:ef:6b:0b:
36:d0:39:c8:a3:90:fb:55:91:b5:c7:d4:ad:67:3e:d2:69:7b:
cf:a1:4a:e8:cc:a0:a5:83:65:fe:77:02:ab:97:a9:69:fc:14:
53:c8:5b:07:9c:7d:09:8f:91:c6:77:67:01:27:32:10:7b:7b:
70:3f:1e:56:91:1f:7f:d4:ac:87:f7:89:e1:06:36:86:5a:2e:
b6:25:09:c5:77:76:78:f6:7b:59:09:ef:41:bf:d3:f1:3a:89:
69:b1:fa:0d:18:8a:b8:e6:a3:c7:76:ae:38:fc:e9:32:ec:7f:
01:6e:15:d3:ed:27:02:08:06:d6:d9:45:da:c4:c2:9f:f5:14:
cc:86:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:55:09 2024 by rpki-client on console-fra.rpki-client.org