Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/flmv3jVhx5mYoEtORh0CYB3yOoU.roa
File: flmv3jVhx5mYoEtORh0CYB3yOoU.roa (raw, json)
Hash identifier: yl1C5+lHLiLABF9IgF3maFdD+0lpUCDvrkOGpg7EZZs=
Subject key identifier: 7E:59:AF:DE:35:61:C7:99:98:A0:4B:4E:46:1D:02:60:1D:F2:3A:85
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0190C169CB89D5D5758F191CF9759CCA477C
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/flmv3jVhx5mYoEtORh0CYB3yOoU.roa
Signing time: Wed 17 Jul 2024 15:57:34 +0000
ROA not before: Wed 17 Jul 2024 15:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 5.63.144.0/21 maxlen: 21
37.130.224.0/21 maxlen: 24
146.185.16.0/20 maxlen: 20
185.2.136.0/22 maxlen: 22
2a01:5a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:69:cb:89:d5:d5:75:8f:19:1c:f9:75:9c:ca:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Jul 17 15:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e59afde3561c79998a04b4e461d02601df23a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:c7:31:17:f4:e7:82:3d:49:b3:e9:50:27:
31:55:98:4f:89:3a:45:8b:43:52:d0:a6:35:b5:b1:
af:9e:06:ff:b2:b6:76:03:bd:c8:82:63:30:43:84:
31:6a:10:d2:0d:34:a5:a8:cb:f1:91:2d:8b:28:2b:
b4:8e:5b:19:95:84:33:94:6e:f8:e8:5a:b1:bb:9d:
e3:74:53:8a:b7:bf:92:50:a3:37:38:74:b7:90:ec:
33:96:79:4c:2b:36:f1:16:81:76:14:1a:61:3f:66:
18:1e:7a:04:4e:79:4d:b5:d1:20:b8:5d:d1:ca:8e:
31:4d:a2:0a:b2:8e:92:c6:43:e1:f2:2c:52:6e:35:
00:aa:36:3c:15:24:71:dd:c4:e5:b4:5d:39:41:22:
5b:ce:5a:81:13:d4:fa:52:c6:cd:bf:a6:e5:0e:dc:
39:45:a3:1d:40:5a:dd:ae:ff:eb:a6:fa:e8:32:58:
cd:bd:73:8a:b8:6d:8a:0c:f5:57:49:ee:0c:30:73:
58:fe:a7:4b:1f:ec:86:0d:9f:3f:91:3f:41:45:4b:
0d:2e:e6:f9:d4:20:cb:b0:9c:31:61:0b:ad:00:d5:
70:e1:a1:fc:41:a2:9f:dd:1f:43:18:24:c5:e7:49:
c5:72:25:03:14:cc:26:1d:3a:cf:14:8f:d0:f9:4e:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:AF:DE:35:61:C7:99:98:A0:4B:4E:46:1D:02:60:1D:F2:3A:85
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/flmv3jVhx5mYoEtORh0CYB3yOoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.144.0/21
37.130.224.0/21
146.185.16.0/20
185.2.136.0/22
IPv6:
2a01:5a80::/32
Signature Algorithm: sha256WithRSAEncryption
0e:4d:6e:9d:31:d3:c5:11:da:a5:05:23:50:c8:da:f0:ad:e1:
ad:df:3f:3e:d5:3d:67:43:ff:09:af:a9:ec:0a:6d:15:fe:19:
6c:8c:1e:53:16:a1:dd:80:a9:75:43:0c:2a:19:36:cc:da:8d:
4b:cc:cc:3a:df:6a:3c:3a:16:b4:59:62:22:4f:8c:2e:64:ed:
d3:17:ab:a7:f4:24:42:07:7e:7f:1e:da:61:1e:45:f5:e0:54:
3d:14:a2:2c:a5:bb:2f:f7:41:1d:fb:99:86:c8:b5:e5:3b:bb:
11:24:dd:6f:88:62:70:bf:41:4c:0f:64:14:cd:8d:70:fc:e9:
71:d6:ca:f2:23:48:28:c7:ae:5d:a2:44:b4:9a:af:98:af:c4:
b8:a6:f8:e3:3e:14:39:2a:a2:56:26:9f:76:ff:3d:ca:46:df:
e9:18:02:0a:7b:70:eb:c3:91:7f:60:1c:6f:f5:8a:56:c9:be:
7d:be:73:57:ff:a4:75:ee:3b:20:79:1d:39:ef:a6:71:ed:a7:
52:65:51:48:fe:46:8f:88:74:4d:6e:c7:af:f9:27:b8:da:7d:
a7:d6:9d:c6:86:e4:9e:ee:4d:48:d3:ab:d4:37:d6:4b:f0:a0:
39:30:37:2c:15:ee:ed:22:34:ea:80:b2:48:96:5d:d8:3c:06:
87:cb:e6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:42 2024 by rpki-client on console-ams.rpki-client.org