Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa
File: n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa (raw, json)
Hash identifier: dWbv1GG/jQzKpma9gu6kceYWhj/EHTcaQc0fgb99c/Q=
Subject key identifier: 9F:94:82:C5:F0:41:39:26:D5:F8:4D:E0:A6:E1:A2:D4:9E:4A:B5:A5
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 018CC2DB3CCAFC132A76D7188A0411724D59
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.183.0/24 maxlen: 24
2a03:52a0:183::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3c:ca:fc:13:2a:76:d7:18:8a:04:11:72:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f9482c5f0413926d5f84de0a6e1a2d49e4ab5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:d1:c3:54:80:e0:f4:0a:64:9e:c2:1e:a7:
da:59:56:23:ee:b6:95:9a:d9:5d:84:67:73:7c:a8:
84:cd:d4:c1:4e:11:05:4c:63:5d:dd:26:73:e0:60:
2f:76:a0:15:77:a4:09:05:98:4e:aa:4b:a9:fc:ba:
cc:8c:02:c3:1f:30:d6:d8:ee:dd:8d:9f:35:75:91:
2b:c9:81:95:d5:57:52:24:0d:95:41:a6:e3:65:0f:
ff:38:ee:35:4d:a2:18:41:20:6e:49:11:90:b2:3a:
07:1d:2d:ed:5a:0d:6f:1f:b5:5a:3d:6c:5f:1f:5f:
12:c2:f4:6d:15:42:e8:fa:56:e3:5a:95:02:3e:2d:
44:4d:68:ca:c7:9d:da:63:55:7e:9c:24:ee:ea:10:
82:03:80:93:8a:c1:4a:4a:27:e7:65:3f:b6:fe:d8:
7f:3d:06:42:90:0d:68:f6:3b:29:7b:63:61:27:fc:
71:64:75:a3:51:4f:f7:28:85:fe:8d:7b:ae:f6:8f:
80:45:ed:0b:64:67:94:f4:bb:be:82:77:aa:75:70:
3e:f8:94:1c:93:cc:7f:56:f6:aa:ee:d1:19:2f:22:
bd:19:f5:40:80:af:5f:36:82:54:1a:31:b3:5b:93:
a7:0c:02:f2:cf:98:90:ce:21:65:5d:c5:10:7b:0e:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:82:C5:F0:41:39:26:D5:F8:4D:E0:A6:E1:A2:D4:9E:4A:B5:A5
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.183.0/24
IPv6:
2a03:52a0:183::/48
Signature Algorithm: sha256WithRSAEncryption
7d:e8:11:90:db:30:2a:f2:d6:3e:6f:cc:a7:91:29:92:63:35:
2e:80:31:d3:87:41:4e:04:54:35:3a:e6:37:d7:d3:fe:63:30:
09:91:bd:06:d2:0c:fc:93:2b:71:91:cd:84:0f:1e:7e:8d:43:
bf:82:22:aa:ed:e8:88:5c:c0:e5:70:e7:41:a2:91:e6:f8:0b:
f3:ce:5f:e5:a0:a0:79:30:49:3c:42:be:50:c8:ef:30:0b:86:
6d:74:54:86:78:7a:57:d4:99:9d:cb:c2:8d:ac:8c:b1:07:a9:
44:50:f5:f4:50:2d:55:4d:a4:66:7b:d5:ad:a8:1b:e3:4e:27:
76:b2:04:ad:c2:a6:73:36:9a:50:55:4e:0c:77:55:9f:87:0d:
bf:41:ae:64:27:5f:42:53:4b:dc:77:67:e6:a5:f0:49:03:48:
52:31:c0:b2:30:6b:2c:ca:f2:9f:d8:7d:db:90:de:cb:51:2d:
6f:0a:91:4e:72:aa:40:b1:2e:f6:a6:49:a6:3f:73:eb:e0:47:
03:94:68:4b:2b:8a:c9:95:e8:b0:0b:1b:b2:4c:a9:66:85:ed:
71:4e:42:fd:01:41:16:05:3b:70:7a:a9:67:ce:cf:17:9e:32:
ee:eb:de:4b:af:3e:d8:19:1a:d4:d2:2d:e3:bc:cd:d9:a4:e3:
5e:00:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:21:55 2024 by rpki-client on console-fra.rpki-client.org