Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/BY0mp35V8IiF78k0CNlzh6k_CwM.roa
File: BY0mp35V8IiF78k0CNlzh6k_CwM.roa (raw, json)
Hash identifier: 8tJCwrooq1JMgVpN/LiDfr59dCm6rkLhjyyKgjDp00c=
Subject key identifier: 05:8D:26:A7:7E:55:F0:88:85:EF:C9:34:08:D9:73:87:A9:3F:0B:03
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 018CC500144D25375D5166840024D38FF9B2
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/BY0mp35V8IiF78k0CNlzh6k_CwM.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39743
IP address blocks: 185.5.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:14:4d:25:37:5d:51:66:84:00:24:d3:8f:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=058d26a77e55f08885efc93408d97387a93f0b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:68:ee:1a:9f:05:8a:a6:71:fc:02:2f:b5:
a0:06:8f:9c:ce:b1:36:df:df:83:2c:ea:ef:72:94:
3b:8c:5e:58:d9:6a:84:f3:91:9c:c0:f6:49:20:51:
95:00:85:33:d4:8b:e2:6f:63:dd:8e:99:02:c7:8b:
23:88:33:ea:60:04:d2:ad:5d:84:53:40:13:a3:19:
a7:1e:2a:b9:bc:a7:92:84:20:e9:5b:2a:aa:f2:4d:
85:1a:6a:9c:3b:4a:30:77:fa:cc:14:e9:61:e6:7c:
86:30:7b:28:14:11:c2:6c:c7:40:9f:b3:47:13:34:
fd:5f:09:78:90:67:b5:ce:ca:d7:86:57:dc:1d:12:
26:dd:21:af:59:51:b3:97:7e:f3:e9:54:5d:06:03:
4e:78:e3:42:26:a1:49:78:85:ec:4f:af:21:c1:38:
f2:62:10:e4:97:b0:cc:90:cc:d7:cb:cd:cc:71:50:
88:e4:ff:00:0c:5b:c1:17:39:39:de:c2:18:a2:02:
1c:76:26:12:25:a2:9c:d9:a0:43:b7:5a:f4:5a:5a:
50:0a:cb:7a:43:13:dd:e2:08:f4:eb:6a:b6:23:47:
5b:d7:6f:50:3f:8f:5e:e1:56:76:eb:5b:2f:70:0d:
35:46:8e:01:73:70:d4:b4:46:3c:81:66:23:51:dc:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8D:26:A7:7E:55:F0:88:85:EF:C9:34:08:D9:73:87:A9:3F:0B:03
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/BY0mp35V8IiF78k0CNlzh6k_CwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.46.0/24
Signature Algorithm: sha256WithRSAEncryption
70:51:0e:77:82:00:6b:b7:b8:4c:75:ed:d1:4f:49:17:63:7c:
4a:8a:a3:d9:fa:a5:c2:27:7c:c8:19:6e:35:04:49:2d:2c:27:
ed:db:60:5e:51:1e:a8:8b:b4:b1:53:b1:1f:36:2d:74:70:7e:
a5:9f:8c:11:e9:25:d7:e4:50:56:e2:b0:a8:33:69:58:07:44:
74:c4:6a:66:6b:86:40:38:f7:eb:ce:23:9d:78:3e:35:e4:11:
40:09:ef:e7:29:ca:5d:d5:df:2f:39:77:4b:b8:a8:c1:6d:ef:
e3:da:aa:25:0c:34:2a:86:7b:89:2d:cc:30:bf:0f:64:ac:b0:
18:14:fc:27:51:7c:e2:80:e0:76:92:55:e3:60:18:50:05:a4:
b1:1b:41:41:6a:a0:58:dc:bd:70:47:2e:82:e1:e4:e0:90:89:
02:4a:74:0e:3e:8c:01:43:8a:25:7c:92:89:63:1c:04:05:f2:
1b:19:e7:36:b5:c8:c2:f9:93:8c:5a:78:f9:5d:b0:d6:95:6f:
13:41:fa:ae:0b:9b:cd:50:e3:c5:7e:9a:28:fc:12:ec:c3:fb:
32:93:e6:97:14:c9:0a:54:d9:89:07:77:28:7d:11:d0:14:84:
d2:7e:dc:47:8d:f1:e5:3f:94:af:fd:1b:94:25:70:1b:8f:48:
8e:f1:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:44:40 2024 by rpki-client on console-fra.rpki-client.org