Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4pmGSTE_Az9EeIcTCjpyeAudA0o.roa
File: 4pmGSTE_Az9EeIcTCjpyeAudA0o.roa (raw, json)
Hash identifier: UYN3VatGekc1qPlTJjHfDi3DNZWppAK6bFwSAECXPYw=
Subject key identifier: E2:99:86:49:31:3F:03:3F:44:78:87:13:0A:3A:72:78:0B:9D:03:4A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018F3EE6B037976AD2C05C718D624E591591
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4pmGSTE_Az9EeIcTCjpyeAudA0o.roa
Signing time: Fri 03 May 2024 14:40:56 +0000
ROA not before: Fri 03 May 2024 14:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60461
IP address blocks: 5.1.81.0/24 maxlen: 24
178.251.228.0/23 maxlen: 32
178.251.228.0/24 maxlen: 32
2a01:367:c1f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:e6:b0:37:97:6a:d2:c0:5c:71:8d:62:4e:59:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: May 3 14:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2998649313f033f447887130a3a72780b9d034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:41:76:5c:6a:11:f5:37:07:7a:d0:e9:c6:
71:1e:60:7c:66:b9:1e:d3:b5:88:78:5c:5f:f9:d3:
1a:b7:95:3b:5b:76:c2:cd:45:b5:4e:59:b8:dd:cc:
df:4e:29:8f:2e:4f:8c:8c:58:38:b1:9a:f2:df:a5:
0a:81:45:88:3a:d3:67:c0:75:ac:92:7d:cf:d6:09:
bf:e5:20:d8:30:e7:48:7d:05:e4:b0:59:10:35:8e:
0f:cf:49:3d:23:a1:65:9e:97:38:9d:ae:ed:c2:5c:
2d:f3:1e:59:86:27:43:0a:f8:b7:6a:fc:33:a8:17:
09:84:9d:4c:38:c3:fa:c0:54:e9:a2:0c:7a:18:08:
f8:af:c7:ac:ad:76:77:d4:24:01:ca:71:cd:3a:14:
41:b3:3b:be:84:dd:34:b4:29:65:c2:61:ba:36:fa:
ca:da:61:77:74:00:2a:ff:15:bd:b0:e1:5a:2c:21:
6a:0c:ba:ae:1d:90:2b:46:2a:54:c4:55:87:6c:e1:
43:aa:e2:ea:03:94:3e:86:48:b2:6d:0a:5f:cc:11:
a9:12:e6:96:03:81:b9:a9:9d:ee:d7:e5:08:50:4b:
aa:6b:d8:a4:57:7b:e5:04:31:58:05:74:aa:5f:f9:
7f:7c:39:ac:7e:49:86:9c:dd:7d:71:af:6e:07:24:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:86:49:31:3F:03:3F:44:78:87:13:0A:3A:72:78:0B:9D:03:4A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4pmGSTE_Az9EeIcTCjpyeAudA0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.81.0/24
178.251.228.0/23
IPv6:
2a01:367:c1f2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:a2:72:ce:11:b9:27:47:1d:d1:5c:3e:ff:17:11:4b:0d:6d:
4e:8f:b4:d5:4f:a8:3c:b1:38:99:94:79:4b:de:33:0c:67:5a:
aa:7b:64:c4:70:63:d6:34:64:89:5d:a0:8a:d9:a3:77:20:ec:
45:23:40:19:9a:b4:d4:13:7d:1f:4a:45:fd:eb:ee:49:55:e0:
ac:3b:03:73:66:e7:b5:80:18:6d:db:08:51:7e:9b:47:44:6c:
9c:8f:2c:41:7f:2b:4a:e4:68:9f:55:c1:2b:6e:50:d5:23:ef:
8d:7b:71:08:57:d6:84:13:45:a6:72:fc:f6:e6:a6:0d:74:44:
ad:25:a2:16:3c:f7:86:e5:cd:7c:54:3b:1d:73:a7:6a:3a:f6:
bc:d8:79:73:7c:45:00:bb:d8:3f:67:8a:87:c7:d3:22:2a:92:
37:ff:2b:0f:75:6e:20:a8:af:7a:65:fc:42:7c:41:c3:45:93:
ec:a1:22:6f:f0:1a:ae:f6:f1:d5:b2:43:36:16:f1:01:86:84:
0c:03:ae:fc:fe:81:41:4e:fe:f3:d4:a1:c4:8f:fd:ca:6a:4a:
b9:b1:9f:1f:2d:ad:cb:18:a7:6b:bb:e7:5f:b6:c1:32:82:46:
12:c1:40:90:38:8b:f4:80:69:9c:b1:b6:4e:7d:30:f0:35:e6:
aa:66:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:11 2024 by rpki-client on console-ams.rpki-client.org