Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/ae0S7hv--1jhGRx9HNsA_h3Lbi4.roa
File: ae0S7hv--1jhGRx9HNsA_h3Lbi4.roa (raw, json)
Hash identifier: kpcdlB47zU4lveGcerC0MQgT7FNdziu/PA8HrB8AeTs=
Subject key identifier: 69:ED:12:EE:1B:FE:FB:58:E1:19:1C:7D:1C:DB:00:FE:1D:CB:6E:2E
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 018CC5DC3E1218AC8DFF7A0078B9F0C55953
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/ae0S7hv--1jhGRx9HNsA_h3Lbi4.roa
Signing time: Mon 01 Jan 2024 16:29:54 +0000
ROA not before: Mon 01 Jan 2024 16:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56523
IP address blocks: 91.224.224.0/23 maxlen: 23
185.38.220.0/23 maxlen: 23
2a04:7840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3e:12:18:ac:8d:ff:7a:00:78:b9:f0:c5:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Jan 1 16:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69ed12ee1bfefb58e1191c7d1cdb00fe1dcb6e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:dc:df:13:74:ba:34:29:14:7b:16:69:ca:
2f:5b:d3:54:15:dd:7c:0d:55:c9:6a:14:6e:db:0a:
13:64:04:c8:34:e7:32:1d:24:3e:f5:c8:e9:21:8e:
c0:3f:95:85:58:c0:99:c9:8b:a7:47:d6:88:e1:17:
fd:70:3e:54:ff:79:38:c5:c9:7c:04:66:61:77:62:
c6:23:66:c4:c5:1f:a7:2e:66:22:a5:10:81:aa:1e:
70:70:cc:6a:aa:2e:71:9a:fa:5d:b5:85:64:d5:30:
3b:fe:d8:7e:f7:17:bd:85:63:83:e2:8b:32:3b:6c:
1f:d9:54:cf:5c:47:67:73:53:c3:a6:44:41:8b:6a:
44:04:0f:1e:4f:5a:82:e6:88:5a:39:22:58:96:a8:
9d:6f:a9:aa:22:9f:ae:53:27:81:16:c7:1d:fd:b8:
d2:b8:51:b1:24:a2:11:31:e5:a6:f4:9c:47:35:ae:
50:fd:4c:8a:7c:0a:65:aa:fd:83:af:a0:34:df:6a:
c1:eb:91:53:60:8b:5a:7d:20:d0:82:a8:ce:5f:01:
0c:d8:e0:9d:d1:20:86:a0:4a:d4:f1:27:6f:7e:5f:
db:c9:40:44:54:d6:24:a5:1b:06:3a:54:c9:d0:33:
a5:12:ec:6a:67:98:40:da:78:91:32:f2:90:e4:03:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:12:EE:1B:FE:FB:58:E1:19:1C:7D:1C:DB:00:FE:1D:CB:6E:2E
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/ae0S7hv--1jhGRx9HNsA_h3Lbi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.224.0/23
185.38.220.0/23
IPv6:
2a04:7840::/32
Signature Algorithm: sha256WithRSAEncryption
47:bc:93:9c:74:dd:a2:25:f0:9f:8f:0c:90:49:8b:a5:2c:8c:
63:3f:d6:d2:fe:9d:0f:6a:ee:56:04:38:e9:1a:2d:74:2b:6b:
bb:c6:37:5d:f5:21:0c:00:e8:c8:39:45:5c:f9:63:f1:b4:0d:
f8:95:7e:fd:14:e3:9c:c1:1c:d2:e8:f1:8d:b1:a3:fd:7d:f4:
10:1e:b3:59:58:69:f6:e4:a4:95:02:58:52:6e:bd:6a:3e:a5:
f8:74:6b:34:1e:6c:4b:1c:34:cb:cf:62:3a:d8:59:c0:2d:24:
d1:6a:0a:fc:51:fe:45:cc:df:76:de:22:5e:d2:57:0d:db:75:
2e:3d:f8:00:50:cb:87:5c:8e:7a:4e:db:ac:c6:93:00:30:2a:
10:de:55:f9:25:92:20:66:a4:09:c7:66:16:44:09:9c:0f:09:
49:96:ab:b7:f7:25:3c:ec:b5:3f:4d:a5:f1:75:44:7f:d3:16:
42:56:c6:cc:dd:78:e6:a2:65:82:b2:75:5c:f4:e3:fd:7f:b1:
ff:2b:96:24:78:0c:63:72:d5:66:67:a3:b3:1a:e9:69:86:80:
c6:78:68:4f:0d:75:7d:a6:4e:93:a4:f1:22:ab:85:72:6e:1a:
1d:bd:e1:bc:8d:e3:60:6d:d0:d6:bf:97:ed:4b:d9:16:62:b3:
64:1d:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:39 2024 by rpki-client on console-fra.rpki-client.org