Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/v5haocw9WXy_b3brXQQXl9ceHnI.roa
File: v5haocw9WXy_b3brXQQXl9ceHnI.roa (raw, json)
Hash identifier: pLfRXlwEcQqbD7qxdfEspHVVOAYsw4CIvUAY818VcGU=
Subject key identifier: BF:98:5A:A1:CC:3D:59:7C:BF:6F:76:EB:5D:04:17:97:D7:1E:1E:72
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018E4113DED32249C71B092FD74F8BCCA875
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/v5haocw9WXy_b3brXQQXl9ceHnI.roa
Signing time: Fri 15 Mar 2024 07:46:45 +0000
ROA not before: Fri 15 Mar 2024 07:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 5.178.3.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:13:de:d3:22:49:c7:1b:09:2f:d7:4f:8b:cc:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 15 07:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf985aa1cc3d597cbf6f76eb5d041797d71e1e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:63:52:2b:c2:00:70:fb:ab:c7:4c:ea:2e:
65:9a:91:e9:2f:b8:d8:f0:82:ca:c7:c1:8f:5d:f7:
1f:8b:c7:20:a3:e6:98:19:36:f7:20:5d:4f:00:eb:
4f:79:c9:83:5c:42:8f:16:9a:87:93:90:a3:ad:7e:
42:1f:4d:bc:79:7d:d4:23:12:6f:7a:4b:25:d4:a3:
53:0c:ba:f2:72:40:26:29:9b:c1:f3:3d:e7:70:38:
dd:fe:bf:42:af:ff:b2:fd:5e:55:ba:cf:0c:39:be:
ed:75:72:2a:a4:34:39:01:b8:e8:08:d2:6b:d2:ca:
3a:96:1d:5a:9f:fa:b3:ff:79:01:ed:2e:3d:78:49:
c2:b7:98:05:a6:b2:26:34:bf:af:8b:e4:25:1d:6a:
5d:5d:00:07:ca:57:60:04:47:c3:ec:c3:3e:f5:24:
fa:b1:8e:36:59:6d:31:31:91:2d:15:c6:42:07:97:
69:97:e9:fd:e6:42:a3:7e:a1:ce:83:2a:ef:c7:58:
df:3c:11:28:02:de:a8:04:bb:e2:f0:01:de:f1:ef:
b1:0a:5c:c6:49:21:e2:49:3f:b8:94:86:95:9c:74:
af:44:74:57:46:2e:e2:15:d7:4c:c4:5e:a6:87:6f:
75:91:57:48:a6:08:e7:bd:7c:9f:39:1e:86:e2:82:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:5A:A1:CC:3D:59:7C:BF:6F:76:EB:5D:04:17:97:D7:1E:1E:72
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/v5haocw9WXy_b3brXQQXl9ceHnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3d:e1:69:cc:63:1e:3f:fa:80:5c:56:5d:75:bf:d1:e7:f7:
1f:08:01:30:6e:00:05:40:7e:f8:3b:53:6e:72:e8:40:2d:8c:
a4:51:a2:88:d6:24:fc:4e:7d:9e:0f:d0:96:41:c7:16:9f:70:
c8:a3:d5:34:da:0a:2b:b7:b3:4d:34:89:b2:bf:ab:1d:a3:84:
22:6f:f2:36:7a:81:54:9e:a9:89:1a:0f:9e:50:8c:fb:d4:6a:
7f:77:01:70:d0:4d:6d:47:aa:18:88:81:e0:28:f6:7a:14:67:
97:a5:bd:0d:88:32:72:64:26:0b:4c:5e:47:78:ad:2e:dc:2c:
3b:04:34:22:cd:2e:5c:90:f9:2b:bb:c2:cb:e1:d2:55:0d:63:
c3:fa:68:1d:c2:5a:f0:da:60:cb:6e:0e:07:1c:1f:8e:a3:5f:
29:85:78:de:d4:2e:0f:0e:7e:b2:ea:c2:b2:65:8f:2e:bb:e4:
79:d9:b4:7b:a1:04:a3:d6:38:7e:d4:e0:db:38:87:79:3d:30:
9f:53:3d:44:ce:f9:75:ab:06:3f:d8:25:09:21:59:32:13:6e:
78:11:3e:76:58:04:2b:4d:e2:0e:11:94:f7:69:5c:4c:eb:7f:
9e:d9:1d:fb:62:59:2f:99:ee:de:1c:73:28:6c:78:e9:bf:f9:
6a:e1:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:38:42 2024 by rpki-client on console-fra.rpki-client.org