Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/5tJ2W2uwWc0n9FkAYcLf3oGDcOA.roa
File: 5tJ2W2uwWc0n9FkAYcLf3oGDcOA.roa (raw, json)
Hash identifier: D/nzFRW7ke30VxAfckoxafQTkQZ3F6WQy7ygmwyfEfk=
Subject key identifier: E6:D2:76:5B:6B:B0:59:CD:27:F4:59:00:61:C2:DF:DE:81:83:70:E0
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 018CC72769481E1A7B4C1B87D44745C245EF
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/5tJ2W2uwWc0n9FkAYcLf3oGDcOA.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49769
IP address blocks: 185.153.156.0/23 maxlen: 23
185.153.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:48:1e:1a:7b:4c:1b:87:d4:47:45:c2:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6d2765b6bb059cd27f4590061c2dfde818370e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:a4:07:6e:72:dc:2d:f4:cb:0d:76:8a:db:
bf:14:34:b3:32:7b:35:66:42:69:a1:e7:a6:25:29:
89:78:ed:e9:61:e6:b2:78:85:0f:be:01:98:ff:fd:
ec:ff:8c:2d:b7:b4:da:c1:da:45:2e:97:8b:87:fa:
22:9c:41:fb:87:6e:61:c7:bc:c9:d6:7a:14:fa:93:
8b:99:37:15:a0:89:b4:dc:26:a3:73:5f:bb:9e:8c:
cc:c8:ac:ed:41:4b:76:28:ae:58:11:35:28:a3:d8:
79:24:44:f5:16:a7:ea:57:39:6c:21:8e:a2:70:38:
12:73:f4:95:2e:a4:12:c0:45:ce:75:58:24:8c:e2:
49:91:3c:a4:f3:d5:1d:c0:c5:c0:b1:e8:99:2b:88:
6d:a6:69:67:28:8c:4c:e6:74:f7:e5:ba:ca:63:99:
9f:8f:76:c9:87:c6:f9:59:46:aa:54:1d:f6:37:48:
00:6d:24:b8:6f:d3:60:ba:e9:e0:df:5e:a0:de:48:
64:de:d1:23:fc:57:15:d1:65:f8:ab:84:86:6a:e3:
e1:62:c2:83:82:d4:7a:5e:00:12:c9:1a:89:9d:65:
78:f7:ad:4c:dc:9b:dc:dc:0d:d8:3d:55:33:01:28:
0c:51:24:77:cd:5c:56:c2:a3:0c:90:84:b2:07:7a:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:76:5B:6B:B0:59:CD:27:F4:59:00:61:C2:DF:DE:81:83:70:E0
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/5tJ2W2uwWc0n9FkAYcLf3oGDcOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.156.0-185.153.158.255
Signature Algorithm: sha256WithRSAEncryption
1c:91:95:c2:a5:a4:5c:25:27:c6:41:69:ff:76:fe:f1:88:8d:
cf:89:7e:65:b3:2a:96:62:dc:6a:b7:d1:e8:1f:60:e6:b6:a9:
d4:d4:7d:29:41:ee:a1:1c:2a:eb:a9:88:8c:4c:e2:39:36:04:
4a:44:36:f1:2d:9a:42:1c:cc:5a:b8:87:51:88:60:b5:f3:16:
2c:21:79:90:ea:5d:b6:56:f0:76:68:88:5c:50:65:09:93:7a:
2e:55:49:5d:3f:17:67:09:fd:2e:02:19:41:cf:eb:41:82:7e:
63:cf:78:61:cd:f9:b5:a5:4f:78:25:11:c1:3a:75:11:9c:be:
d9:23:85:bb:13:58:ac:26:f9:89:aa:07:ce:32:a8:d0:f2:f2:
24:95:69:8d:ca:e1:35:36:6f:27:fc:6b:9c:cc:7f:d9:ca:a0:
38:83:78:57:cc:5e:6f:23:5d:6b:dd:27:0b:c3:c5:8a:b7:8b:
c2:ab:42:02:42:02:75:2e:00:ea:19:62:59:b3:a1:59:b6:5e:
af:c1:91:12:c7:ca:52:a7:36:18:13:15:3c:dc:1f:6b:bc:d2:
37:89:90:88:2f:bc:87:fc:6d:4a:64:d6:23:3b:20:04:8f:83:
df:e7:51:31:8b:ab:13:eb:b3:78:e7:ef:d9:ab:a6:f0:30:d7:
f2:6c:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:33 2024 by rpki-client on console-fra.rpki-client.org