Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa
File: 5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa (raw, json)
Hash identifier: 0L7zcIsQzAQExt8Ppd8j9ZjtXt0OdZ16Wz2ipROlkqE=
Subject key identifier: E6:20:2F:ED:05:80:E4:D3:1F:C0:75:A2:E7:2D:62:26:30:5F:C1:46
Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Certificate serial: 018CC94E25064955878B4CA751E30DAC96A0
Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa
Signing time: Tue 02 Jan 2024 08:33:10 +0000
ROA not before: Tue 02 Jan 2024 08:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201720
IP address blocks: 185.56.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:25:06:49:55:87:8b:4c:a7:51:e3:0d:ac:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3
Validity
Not Before: Jan 2 08:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6202fed0580e4d31fc075a2e72d6226305fc146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:3e:83:5b:fd:f0:70:1c:ce:a8:af:04:d7:
b4:77:ca:5c:1d:d3:72:de:07:68:a0:2f:a5:d5:7c:
3a:56:6b:e6:12:91:39:79:d9:c2:62:fb:f7:09:e4:
c1:2b:42:35:cf:05:9e:d1:bc:bc:de:80:7a:c3:6c:
95:9d:ab:cb:82:20:88:40:97:34:97:8d:ed:ff:2e:
4f:ac:8e:d4:c4:18:3f:c2:17:c6:6a:ec:13:0d:d5:
65:81:9a:83:b1:60:2b:23:12:c3:c1:1f:f3:b4:76:
3c:dd:41:42:de:26:f8:e6:02:86:98:6a:65:7e:8a:
e4:af:56:e1:d6:49:a1:eb:8f:44:6f:36:c9:43:4e:
d9:2b:4b:49:19:63:a3:24:80:1e:cd:99:3a:bd:47:
8d:69:c2:b3:85:d5:1b:86:49:9b:e9:c9:25:cb:41:
d9:19:d9:3f:87:84:9b:48:60:91:91:78:05:58:18:
b4:53:06:30:f8:78:39:ed:0c:ac:ba:64:a2:cc:01:
b5:f4:fa:ab:9d:8d:83:4a:7c:d3:59:78:38:ff:ba:
8e:43:c6:c4:1d:19:d2:7f:76:10:c9:78:36:b7:35:
9b:d5:f6:3a:fe:3b:9d:51:b7:bf:a7:e9:c4:c7:99:
3c:be:40:f9:8b:c9:5f:0d:c6:65:4f:29:9c:54:89:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:2F:ED:05:80:E4:D3:1F:C0:75:A2:E7:2D:62:26:30:5F:C1:46
X509v3 Authority Key Identifier:
keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/5iAv7QWA5NMfwHWi5y1iJjBfwUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:8e:ab:e2:65:23:2a:40:3a:ba:9f:6d:e3:fc:28:da:b0:0e:
09:57:55:e6:59:70:d6:61:95:49:8b:a2:7f:0e:88:fe:1d:f1:
3f:79:24:55:8a:fe:bc:53:79:29:42:f2:01:4f:80:14:d5:d0:
2b:a5:78:75:e4:04:eb:fa:79:2c:4d:ed:4b:ce:45:b6:91:a7:
a5:da:fe:69:7f:6c:43:9f:25:20:14:58:71:a4:48:a6:38:3a:
00:4f:50:6a:7b:07:81:8a:44:af:14:d4:5d:74:6f:40:a1:bd:
00:a4:95:62:5e:f4:25:42:f0:31:5f:1f:1e:69:38:11:5c:bc:
9a:2d:96:c6:08:98:63:5f:30:0f:66:8e:b5:e3:08:1c:af:73:
f0:a2:70:ee:85:47:54:38:48:f7:f5:2f:96:cd:e5:ab:24:6e:
89:bd:b9:ac:71:03:0f:f5:78:92:38:cf:ff:b4:f0:00:0a:31:
5d:e5:10:7e:7d:be:05:1b:a7:52:28:28:f3:4d:35:c7:b4:7c:
ee:06:7a:5a:b8:e0:87:a5:55:82:77:dc:db:5f:6f:a4:ef:18:
8c:28:76:11:87:78:29:e6:ad:e8:c0:61:58:5d:cb:f0:31:f0:
b2:eb:82:cc:a1:39:55:4e:58:05:74:06:fd:af:8a:ec:85:de:
5e:9a:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:20:57 2024 by rpki-client on console-fra.rpki-client.org