Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0Ptc5e04MYpFcKgbu4B-inPt8V8.roa
File: 0Ptc5e04MYpFcKgbu4B-inPt8V8.roa (raw, json)
Hash identifier: hTx7CCmhdtcKGzDzeh/vfs+Vc/5S0Dh0Jau9lgTpZno=
Subject key identifier: D0:FB:5C:E5:ED:38:31:8A:45:70:A8:1B:BB:80:7E:8A:73:ED:F1:5F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC9ECBFE3ED2CDA00D452782062F39
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0Ptc5e04MYpFcKgbu4B-inPt8V8.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211059
IP address blocks: 5.178.1.0/24 maxlen: 24
5.10.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9e:cb:fe:3e:d2:cd:a0:0d:45:27:82:06:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0fb5ce5ed38318a4570a81bbb807e8a73edf15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:67:48:74:95:19:0e:f4:1f:55:b2:02:eb:
17:a3:eb:74:d5:58:f7:76:b9:f6:a6:87:26:29:2c:
69:54:46:0b:55:6c:1c:80:86:39:08:18:08:5d:cb:
e5:a3:ca:bf:5a:5b:fb:89:04:cf:5e:70:cf:a6:d5:
7d:77:14:44:1c:c8:d3:ef:7c:ac:d3:1a:7e:31:c7:
b2:53:cd:6e:f6:b7:17:ca:31:92:2d:b7:81:e2:56:
67:41:06:3a:20:fd:90:2b:1c:5f:24:b1:81:a5:48:
3e:48:fc:57:a4:4a:3f:3a:94:b4:e8:a8:22:a9:d5:
60:62:3e:d5:1d:f1:da:42:37:8e:21:ad:96:e8:07:
a5:e2:35:d2:42:20:4e:54:56:b2:e3:f2:5d:43:fa:
8b:49:eb:92:73:41:41:ac:38:9c:7b:8a:82:8f:e1:
9a:e4:8b:3e:a7:41:6c:1c:49:a4:cf:09:29:b4:41:
5a:40:6b:39:8f:0f:5e:12:cb:93:37:41:57:37:4d:
c2:cb:f6:70:21:65:9d:b7:fa:2f:f5:a5:c3:c4:e6:
0f:9e:4d:18:59:5e:b4:da:d0:4d:1f:f8:53:30:1b:
d4:3e:8a:a0:c8:1a:1f:39:42:70:9d:e7:77:82:c0:
b9:72:95:f0:ff:ce:1d:12:32:e6:59:d4:a6:86:0b:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:5C:E5:ED:38:31:8A:45:70:A8:1B:BB:80:7E:8A:73:ED:F1:5F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0Ptc5e04MYpFcKgbu4B-inPt8V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.250.0/24
5.178.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:b0:de:dd:75:38:1a:36:4a:7b:55:4e:23:63:71:a6:95:
24:68:03:c0:ab:14:60:a7:49:fb:18:27:23:b0:9d:98:ff:99:
e6:5c:6b:e6:09:f7:be:92:89:d2:94:4b:e0:5e:47:98:d9:44:
3c:1e:71:e7:89:6a:3a:13:c6:0a:3b:d9:58:37:cf:f8:a6:b2:
ce:95:44:2c:5f:4a:80:76:30:e9:02:9d:15:f6:45:6b:0d:73:
8a:ef:5e:76:20:f9:ec:6e:47:cd:3d:51:74:79:d1:47:88:be:
61:38:a6:b4:ac:9d:6b:2a:ac:b6:79:13:01:53:c6:07:8f:19:
71:98:bb:c9:b3:49:31:97:f3:6a:eb:90:4e:41:17:80:ab:d7:
f0:8a:db:58:0d:a8:39:cd:f9:b3:74:44:ce:29:2b:e5:d0:40:
f1:68:d4:f3:d6:df:39:67:26:13:bf:84:41:3e:e9:00:33:4a:
bc:e4:0d:da:a7:ef:57:d8:d2:8c:42:bb:60:33:52:13:1e:69:
f7:89:39:41:d0:00:16:1c:da:49:38:1a:88:61:b8:bb:a7:bd:
02:20:98:32:6d:42:6e:5d:80:4b:10:6d:77:3a:6d:a3:f2:6a:
83:10:44:8a:ff:02:1e:58:2a:d3:2c:7e:19:d5:41:5a:1e:39:
b1:c9:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:57:22 2024 by rpki-client on console-ams.rpki-client.org