Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DArXryNOvutsgziMTcnrHqMpxY4.roa
File: DArXryNOvutsgziMTcnrHqMpxY4.roa (raw, json)
Hash identifier: IOw/By2fX89xxijdTax51uy8c8kvYLQCNXBrUkmVaYw=
Subject key identifier: 0C:0A:D7:AF:23:4E:BE:EB:6C:83:38:8C:4D:C9:EB:1E:A3:29:C5:8E
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 018DACCEAB7B0C760CA594C081DEC738CBFA
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DArXryNOvutsgziMTcnrHqMpxY4.roa
Signing time: Thu 15 Feb 2024 12:47:21 +0000
ROA not before: Thu 15 Feb 2024 12:47:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39888
IP address blocks: 5.83.39.0/24 maxlen: 24
5.83.41.0/24 maxlen: 24
185.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:ce:ab:7b:0c:76:0c:a5:94:c0:81:de:c7:38:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Feb 15 12:47:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c0ad7af234ebeeb6c83388c4dc9eb1ea329c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:93:87:45:a6:91:d2:5d:31:08:9d:34:a3:
0d:af:7c:5a:6d:9f:ca:8b:40:cf:09:eb:d5:33:80:
af:23:99:01:d2:3d:8a:4e:b0:4d:c9:79:3d:25:7d:
ef:25:87:1d:8a:4c:c3:94:6c:a6:f5:14:c0:5b:f2:
d1:88:80:b5:f9:21:86:c5:45:53:1c:9f:50:0c:46:
82:9c:83:e6:f8:6b:ab:bc:01:3e:95:ac:30:54:45:
e7:ba:d4:d1:a2:d8:3f:00:7f:0c:6e:8f:5c:c5:28:
2e:87:91:35:24:18:56:45:04:20:2f:c9:48:dc:b1:
a6:a5:86:2c:49:39:9e:4a:db:fa:23:51:4d:ee:40:
e1:67:ad:bb:81:fd:c0:88:4a:bb:a9:f3:ed:a9:8b:
11:d6:ff:f2:5b:97:33:af:56:a0:64:b9:33:57:9f:
03:0d:c7:da:b5:e3:65:79:00:45:21:0f:c8:14:1a:
54:a9:99:27:f2:6b:3a:5a:77:60:ca:9d:2d:59:f3:
a8:cf:f2:30:31:55:5a:97:13:59:bf:30:df:16:ef:
19:15:ba:26:9e:5e:e9:26:eb:79:c8:f5:d1:b8:ff:
62:0f:dc:8e:28:b6:1b:3b:45:be:56:94:e5:9b:4f:
1f:27:a3:bd:fc:70:7e:04:de:78:a9:3a:ba:34:58:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:D7:AF:23:4E:BE:EB:6C:83:38:8C:4D:C9:EB:1E:A3:29:C5:8E
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/DArXryNOvutsgziMTcnrHqMpxY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.39.0/24
5.83.41.0/24
185.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
12:10:92:b5:6a:23:bf:b2:cf:69:f4:f8:36:6b:f2:b8:10:04:
5b:64:e9:aa:b9:07:db:0c:19:95:28:f0:42:ba:7d:19:db:d7:
98:1b:bb:91:a3:ae:cb:4e:96:25:dd:04:8d:66:16:ca:84:98:
23:c4:5c:ed:d0:f8:83:be:93:b8:ef:0d:7e:ea:b4:f8:a5:02:
94:43:35:f2:a3:11:84:cb:81:06:54:6c:46:a3:90:26:12:f3:
19:94:cc:77:c9:a2:5b:31:31:d3:88:51:f2:02:cb:4d:4f:da:
d9:1e:3d:23:6a:6a:17:60:d8:b6:e2:fc:de:0e:cf:36:d9:4c:
2b:d0:3b:3c:35:65:1c:73:53:71:c4:b4:e9:b5:cc:e5:58:85:
da:f0:41:a0:9d:ca:55:b5:91:5c:90:24:41:fc:d8:c3:ed:15:
0f:33:28:00:09:72:17:dd:2a:31:51:7d:b5:2e:64:6f:5e:6a:
8c:03:6a:bc:98:8a:1a:e4:64:b1:fa:4a:0d:5c:74:fc:56:aa:
3c:a3:32:d2:19:4d:f0:59:4c:2d:38:d7:61:9d:03:ee:d1:ea:
d0:f2:02:1f:fe:31:07:e4:c4:36:54:2b:8b:cc:29:41:c4:4d:
bf:aa:68:03:8a:ed:26:d3:34:89:83:9f:e5:ef:69:d0:1e:76:
5f:e1:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 17:11:44 2024 by rpki-client on console-ams.rpki-client.org