Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/5OyVQW2sBLnJX0nNBzVLSCiFeHg.roa
File: 5OyVQW2sBLnJX0nNBzVLSCiFeHg.roa (raw, json)
Hash identifier: eWzzqB3br4Tei99WFB4rriFZ8voH36Trqg6kK0oD/Cg=
Subject key identifier: E4:EC:95:41:6D:AC:04:B9:C9:5F:49:CD:07:35:4B:48:28:85:78:78
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 018CC2DAC7AFFB66C5003D1862BE27026A82
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/5OyVQW2sBLnJX0nNBzVLSCiFeHg.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205798
IP address blocks: 193.141.109.0/24 maxlen: 24
193.141.121.0/24 maxlen: 24
193.142.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c7:af:fb:66:c5:00:3d:18:62:be:27:02:6a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4ec95416dac04b9c95f49cd07354b4828857878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:fe:7d:c8:c4:47:18:9e:db:27:02:73:40:
05:8b:45:b2:b6:da:a2:b1:1b:46:e7:41:e2:1b:b0:
23:4c:25:48:c6:2e:05:95:77:00:ce:ca:e2:82:c9:
16:98:b4:dc:83:d8:20:33:95:e8:27:b1:f7:e8:88:
fc:39:cf:35:84:00:d7:75:2f:46:a0:24:07:a0:38:
9b:7e:22:da:f3:99:00:a3:81:09:75:fe:be:c3:4e:
c2:4d:0d:f6:f8:52:f3:4e:3e:81:37:9d:7a:6b:27:
4b:e1:65:b2:96:42:18:da:0c:3f:4a:69:b2:98:74:
24:e2:48:bf:ab:3a:e3:fd:b7:5b:38:19:85:3d:e5:
2e:59:ea:58:85:69:06:b2:75:8d:e3:c9:17:cd:b4:
5f:16:e3:61:5f:6b:9f:6e:9b:52:f1:5c:32:7f:3a:
a1:ad:52:13:df:69:87:5e:59:b4:d1:15:91:58:24:
49:07:f5:2a:84:5f:cb:32:64:a0:9f:a3:9a:c6:70:
3b:f9:f9:dc:29:0f:de:71:29:98:b7:26:5c:db:25:
ad:8e:68:f4:61:93:c9:3a:f3:96:f6:7f:de:20:02:
ca:8e:a1:3a:24:91:07:05:36:61:18:e6:4a:a6:d1:
1a:10:bf:75:d9:46:92:f4:44:05:a0:3f:f2:29:1b:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:95:41:6D:AC:04:B9:C9:5F:49:CD:07:35:4B:48:28:85:78:78
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/5OyVQW2sBLnJX0nNBzVLSCiFeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.109.0/24
193.141.121.0/24
193.142.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:dc:47:d2:c4:d6:1c:48:16:8f:58:16:d6:f7:c3:9a:c6:
5a:55:f7:ce:c0:d3:8c:e9:cb:2f:65:33:cd:d6:7f:63:48:62:
b6:78:15:85:e8:9e:bc:d3:bd:35:e4:15:35:f3:2b:22:93:61:
e8:a0:56:ed:b7:ae:2e:a1:70:49:49:bb:5e:9f:ff:64:9e:ef:
62:b6:d1:38:8b:4c:a9:da:1d:e6:d1:85:fb:a2:91:49:c4:14:
b2:00:6f:f5:ae:b4:17:dd:ba:5d:df:8f:4c:28:6c:64:4a:87:
46:a2:57:01:e3:79:9d:40:0a:67:15:80:68:9c:6e:08:34:9c:
2c:04:dd:48:a1:4a:f0:6e:36:94:25:c1:37:e4:a4:cb:b8:56:
d2:5e:e9:b2:be:6b:d7:34:aa:21:62:d6:bf:df:e9:df:92:d6:
ea:5b:55:c2:80:b4:35:ea:70:f9:4d:52:c6:02:69:f5:ff:67:
69:7c:ef:bf:e9:7d:6a:34:3b:25:7f:83:3b:61:36:50:3e:88:
1a:cf:52:76:4c:64:c1:f6:23:ad:52:52:90:74:1d:5f:f6:55:
c1:91:c1:e4:c8:4e:3e:66:4d:72:e5:93:9b:8a:99:bc:77:dc:
82:03:8f:2b:2e:76:e0:b4:00:8b:55:ba:61:e4:73:74:bb:0c:
c1:86:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:18:37 2024 by rpki-client on console-fra.rpki-client.org