Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/H9ilEsUA3MYBEElHkw2hj0eJfc4.roa
File: H9ilEsUA3MYBEElHkw2hj0eJfc4.roa (raw, json)
Hash identifier: Urz279i5qMq0teG4p9FW1+aF+qJe4ql2b4LYw5EFWLU=
Subject key identifier: 1F:D8:A5:12:C5:00:DC:C6:01:10:49:47:93:0D:A1:8F:47:89:7D:CE
Certificate issuer: /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial: 018CC7270330D057220CCF1BD987BDFA860A
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/H9ilEsUA3MYBEElHkw2hj0eJfc4.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199644
IP address blocks: 185.5.14.0/24 maxlen: 24
185.5.15.0/24 maxlen: 24
185.5.12.0/22 maxlen: 24
2a02:c740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 15:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:03:30:d0:57:22:0c:cf:1b:d9:87:bd:fa:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fd8a512c500dcc601104947930da18f47897dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:cd:c1:d2:c1:06:c6:79:0b:84:f8:a3:88:
2d:d0:5b:07:44:ce:81:d6:c7:49:9b:86:9e:f4:77:
9a:4f:33:6a:c0:14:dc:2d:c2:07:9f:69:d5:2f:60:
6a:ff:4e:bd:e3:e4:50:11:d3:cf:a5:20:82:da:ab:
5a:9e:14:7d:53:0b:69:d3:06:9c:1f:4b:e4:36:06:
5e:cf:eb:14:8f:a3:d0:2d:d4:14:6c:d2:1e:d5:d2:
51:08:99:3e:73:fa:4a:fd:12:5a:99:4e:d2:e3:db:
b2:1f:24:80:71:22:9e:53:ea:c1:5c:35:37:43:88:
d5:71:ac:06:a9:f1:8c:56:d3:38:ed:2d:ca:16:f5:
f9:90:8f:e7:eb:cc:07:d6:3e:81:75:bf:c3:f4:16:
dc:9b:54:06:80:e8:47:00:c3:85:a3:f3:25:2f:1c:
de:c2:9a:cb:eb:4e:7d:59:a4:3c:be:29:e5:8f:a5:
15:6d:3a:8f:be:f1:25:b5:63:4b:fb:e3:c2:b0:bb:
a2:b3:c6:bb:48:58:6c:47:6a:30:59:a0:d5:bc:f0:
00:c3:9c:64:34:d5:fb:f4:ed:63:19:d6:b3:47:78:
cd:e7:f3:74:9b:90:76:6d:9f:f2:64:7c:d2:57:61:
a7:18:8c:b4:37:dd:cb:d6:96:9e:7b:ef:63:29:76:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:A5:12:C5:00:DC:C6:01:10:49:47:93:0D:A1:8F:47:89:7D:CE
X509v3 Authority Key Identifier:
keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/H9ilEsUA3MYBEElHkw2hj0eJfc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.12.0/22
IPv6:
2a02:c740::/29
Signature Algorithm: sha256WithRSAEncryption
50:fd:75:21:81:8e:56:7d:72:52:14:50:8e:09:51:9e:d9:c2:
ee:4f:03:99:14:af:45:4f:d4:72:74:ec:ea:d2:42:98:95:ca:
e1:2a:5e:63:1f:f8:0a:7c:2f:22:15:23:05:4a:e5:a3:82:87:
1f:ce:95:ca:b1:98:34:b0:39:9c:12:38:e2:0b:ac:83:68:2b:
12:56:8d:7b:08:62:7f:d0:1b:c1:a4:67:61:42:4d:e2:d4:ca:
ef:49:c4:69:a4:ab:00:c9:a9:57:ff:a3:30:a9:0c:c2:53:0c:
43:3b:41:21:0a:46:75:27:9f:14:d7:06:fa:18:be:92:b6:7e:
4b:6e:f4:43:4b:c0:12:37:7f:ef:55:2f:17:a0:d0:7e:6e:ef:
bb:71:49:a2:4e:cf:bb:3f:09:18:47:82:ee:e6:8a:51:f5:76:
99:21:61:d3:13:a5:89:55:40:6e:c2:b6:5c:c4:24:8b:69:e2:
6e:12:32:68:87:08:be:6d:bf:d7:c7:46:65:1f:c7:5e:b6:b7:
11:21:2e:e9:56:cf:c5:ff:7b:67:c7:6e:27:dd:db:ba:c3:0c:
c1:4a:07:81:40:a6:8e:bb:f7:e3:4e:41:4c:ec:96:60:a3:f3:
1e:1a:14:56:8e:5d:c7:64:54:0b:e6:8e:72:7c:12:d7:a0:8c:
77:5d:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 22:59:36 2024 by rpki-client on console-ams.rpki-client.org