Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/5N4L-oNx9slr14a8ejoVpV87yJQ.roa
File: 5N4L-oNx9slr14a8ejoVpV87yJQ.roa (raw, json)
Hash identifier: /r+tnDx559o97MNSrB4SFhb4krG8jJolePvhuiEHGRQ=
Subject key identifier: E4:DE:0B:FA:83:71:F6:C9:6B:D7:86:BC:7A:3A:15:A5:5F:3B:C8:94
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 018CC8DF0FFE8F675647EC9227C0F287FCF6
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/5N4L-oNx9slr14a8ejoVpV87yJQ.roa
Signing time: Tue 02 Jan 2024 06:31:50 +0000
ROA not before: Tue 02 Jan 2024 06:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12727
IP address blocks: 95.131.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0f:fe:8f:67:56:47:ec:92:27:c0:f2:87:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4de0bfa8371f6c96bd786bc7a3a15a55f3bc894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:ea:8c:d4:35:21:5d:27:e5:af:6c:e5:43:
05:81:48:b5:12:97:e1:f2:25:b2:0f:19:95:f4:4f:
0f:0a:5e:de:65:ec:70:1b:de:38:36:b7:88:f8:56:
82:f6:f3:b9:3b:0c:eb:9b:6c:7b:01:4e:5c:85:86:
1e:05:6e:b8:32:f1:54:c3:fc:9e:83:ea:d7:f4:42:
4f:a6:32:b4:5e:bd:6e:32:f5:41:58:79:1d:b6:8c:
bf:2f:f7:f5:d2:1d:ad:01:97:15:24:ce:91:f8:d0:
9e:68:bf:c9:f1:09:a9:01:e5:15:14:9f:ef:93:38:
2d:f2:de:f7:82:b3:1a:fd:4a:e8:1c:39:c5:77:58:
b4:04:47:77:7e:be:44:f7:ac:8d:36:95:43:02:5e:
9a:49:7f:a3:ca:52:61:40:e4:f6:1b:1c:66:84:32:
9a:29:04:0f:5e:63:26:75:88:46:16:ba:c3:88:ea:
20:c6:3e:65:b1:26:f7:c9:b1:eb:b6:b2:38:4b:68:
63:46:a3:0e:2f:e1:e8:66:8b:eb:25:e3:88:8a:9e:
39:de:d0:7a:ad:40:ca:7b:9c:15:07:0b:d7:c5:a1:
bb:1d:7e:1c:aa:0d:fd:64:48:99:8a:b9:fd:ca:d4:
35:45:c4:4a:ff:70:ab:c5:25:b6:7e:12:98:4c:78:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:0B:FA:83:71:F6:C9:6B:D7:86:BC:7A:3A:15:A5:5F:3B:C8:94
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/5N4L-oNx9slr14a8ejoVpV87yJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:0a:94:c1:2a:00:66:cd:33:89:d4:f6:79:25:09:2e:5b:e7:
83:c0:60:45:54:f2:7d:64:53:f3:a9:47:7a:09:12:51:de:10:
d3:ba:21:35:52:f4:f4:06:63:c0:db:82:f2:9f:61:4e:74:57:
61:77:6e:eb:75:24:b7:75:de:47:0c:64:97:61:bc:8d:08:ef:
dc:8e:9e:1e:81:f2:70:3f:59:85:b0:8b:f0:06:13:43:b0:b0:
76:e4:2d:26:14:4c:4a:a5:8b:99:f0:18:7f:22:15:ec:d3:6d:
a3:a9:1a:f6:bb:24:76:c2:ea:8f:14:6b:4b:e6:c6:f4:11:bf:
c3:c4:d1:3e:75:64:63:d0:32:91:f3:98:c1:50:e8:a5:77:78:
86:8a:a2:b8:ed:47:50:81:b0:d5:61:61:7e:73:5c:9f:c8:e8:
e4:af:01:49:56:0a:a3:f5:e3:25:3e:e7:a9:d5:3f:f1:fa:16:
26:17:e7:58:76:65:99:7d:9f:5e:9f:a5:38:44:f9:5e:25:39:
e0:2d:34:e7:65:7d:15:1b:b5:7e:08:31:f6:65:c8:6d:a2:a0:
3d:18:92:6a:b2:ae:8c:67:ef:31:be:86:2f:2f:5a:6d:ee:9a:
ea:39:da:ab:02:8d:58:7d:b4:ee:b1:92:c6:c1:62:b8:d7:4a:
02:6c:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:49:52 2024 by rpki-client on console-fra.rpki-client.org