Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/5YR5HSWJecRq47NtC_Vf71ZRuRM.roa
File: 5YR5HSWJecRq47NtC_Vf71ZRuRM.roa (raw, json)
Hash identifier: jrSx1MZNn7clX31lni/jOsDXl3gTl7+5V8tzmXD5qPE=
Subject key identifier: E5:84:79:1D:25:89:79:C4:6A:E3:B3:6D:0B:F5:5F:EF:56:51:B9:13
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 018F152BA6055C806C165A7457CBF18607ED
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/5YR5HSWJecRq47NtC_Vf71ZRuRM.roa
Signing time: Thu 25 Apr 2024 12:12:13 +0000
ROA not before: Thu 25 Apr 2024 12:12:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202712
IP address blocks: 45.89.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:2b:a6:05:5c:80:6c:16:5a:74:57:cb:f1:86:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Apr 25 12:12:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e584791d258979c46ae3b36d0bf55fef5651b913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:2b:99:e2:b9:8a:da:04:1f:11:fd:a0:6f:
83:a4:17:c4:4f:d5:2e:26:c9:3e:94:b0:cf:5d:90:
d4:c1:98:2f:52:6a:94:cb:73:2a:ab:49:a0:7f:83:
9a:fe:87:6c:c6:b1:e9:5c:1b:0e:4c:ba:52:f7:a2:
ce:2b:ad:68:93:67:95:d3:5e:64:73:7f:d4:93:b7:
e5:f9:6e:69:d7:d5:d5:fa:07:d3:75:9c:42:88:dc:
a8:0c:20:ec:05:d5:2f:fe:ec:1a:31:0d:31:3e:9e:
12:26:3d:29:48:8e:ad:aa:b9:6b:8a:92:35:bf:a7:
a3:5e:8f:38:0b:98:8c:de:c6:e3:8b:b5:72:06:43:
8b:35:77:07:db:0b:a2:25:52:5b:58:16:94:10:7d:
f5:12:ef:88:08:d6:3f:bc:d4:51:5b:72:ba:a9:7d:
23:17:65:17:a5:0b:f9:5f:c2:2c:e4:97:79:9a:e1:
be:3e:44:c9:2c:9a:3d:7c:e7:ec:3f:37:f9:4f:7d:
d2:9d:de:b4:8a:9f:d8:39:91:71:a4:d0:86:82:35:
64:a7:93:e2:90:b1:7a:85:31:ff:93:1d:11:40:62:
f8:d1:4a:b8:71:d3:c3:ba:48:e6:c9:2f:eb:d2:1b:
2f:69:3b:80:35:f7:ed:ce:ab:b2:05:51:f1:ad:8d:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:79:1D:25:89:79:C4:6A:E3:B3:6D:0B:F5:5F:EF:56:51:B9:13
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/5YR5HSWJecRq47NtC_Vf71ZRuRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.10.0/24
Signature Algorithm: sha256WithRSAEncryption
52:cc:ad:03:50:a7:8e:01:28:6c:e7:fc:1f:55:3e:9f:45:e3:
3a:2e:ae:66:60:55:79:5b:b8:8f:b9:8b:32:b7:c8:5e:95:4a:
cc:18:ca:c5:5d:8c:e6:75:32:ac:f3:1c:81:f2:bb:60:96:19:
49:0b:c4:68:83:2f:a0:17:c4:6c:db:50:47:5d:a4:8a:c0:24:
8f:45:9b:8e:81:bb:44:c1:74:e4:1a:c0:14:0c:80:32:e8:52:
7b:7c:4f:42:99:55:33:c9:ac:c0:da:1b:37:f6:1f:65:e7:26:
ff:7a:6a:c2:51:67:ea:fa:ae:dc:fd:53:0e:26:66:cc:ec:51:
c8:8b:90:cb:b9:47:c5:88:66:02:d9:31:c3:76:fc:f9:43:d1:
b1:44:e8:c6:e4:1e:4b:1f:2f:53:00:11:67:c9:21:f7:5f:95:
e0:7f:f6:56:87:6a:c8:34:8e:39:cc:ef:6a:3a:47:cf:49:6f:
d6:15:80:dd:f0:54:75:35:59:39:27:ce:22:de:48:dd:f2:6d:
fa:14:50:a6:cc:c6:b8:04:fc:33:df:42:7c:f7:0c:6d:63:d7:
5e:9f:51:d7:c2:62:bf:3f:9e:19:93:9c:ec:48:65:c8:53:3d:
b3:08:f8:2d:51:7e:5e:4d:97:87:cc:7c:aa:62:48:3c:5a:24:
43:1f:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 20:31:40 2024 by rpki-client on console-ams.rpki-client.org