Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/5cLIwV281Dptl_O9KGbZE0jtOB8.roa
File: 5cLIwV281Dptl_O9KGbZE0jtOB8.roa (raw, json)
Hash identifier: +ke4U7Wb6DV51k+Fm72efiDbPXHpR7Ymq1yDypgDVj0=
Subject key identifier: E5:C2:C8:C1:5D:BC:D4:3A:6D:97:F3:BD:28:66:D9:13:48:ED:38:1F
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 018CCA2A1563F66A8D41469CF9D40F45CEDB
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/5cLIwV281Dptl_O9KGbZE0jtOB8.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202254
IP address blocks: 185.24.83.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:15:63:f6:6a:8d:41:46:9c:f9:d4:0f:45:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5c2c8c15dbcd43a6d97f3bd2866d91348ed381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:1c:c1:2f:34:3f:1a:6a:01:a0:ec:0d:2b:
97:30:9b:79:87:b9:10:01:cf:d8:f4:e2:b1:d3:0b:
62:39:38:75:f9:00:61:b6:8c:41:b9:15:93:38:b8:
77:98:05:0b:ec:5a:0b:5c:0a:a8:e5:5a:65:2c:c2:
a3:e5:f2:d8:1d:a1:94:e3:f4:01:3d:11:a6:1a:d9:
71:83:cd:b4:a5:1f:4d:81:fe:86:3c:2a:27:d6:2b:
14:18:ff:3e:81:43:e5:0a:78:e2:68:dc:53:6c:5f:
31:9c:ab:37:9b:64:1c:89:74:c1:05:e6:84:02:c8:
c7:f2:ee:66:c3:a3:82:9d:7e:e5:19:10:04:21:bb:
97:15:e2:41:bc:2e:59:e5:17:da:82:63:26:50:40:
16:71:bc:80:57:d0:be:8a:17:8f:f7:d7:59:ab:d6:
b7:1b:4b:a8:84:f1:0f:44:c8:f8:b5:61:41:fd:6a:
8c:f2:5e:9f:aa:1e:68:26:88:e2:78:c6:17:3b:30:
a6:3c:bd:26:0a:49:e1:fa:63:1c:82:ed:8f:39:15:
47:fb:e4:15:9d:8a:ee:6a:a4:bf:5b:a1:c7:04:14:
17:f8:ef:40:ea:31:a8:3d:74:93:81:20:32:8b:cb:
58:58:29:98:c3:2e:13:a2:d5:3a:b1:41:5a:cb:9d:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:C8:C1:5D:BC:D4:3A:6D:97:F3:BD:28:66:D9:13:48:ED:38:1F
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/5cLIwV281Dptl_O9KGbZE0jtOB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:9a:cb:89:98:aa:a9:4a:93:0a:5b:36:45:bd:5b:70:00:5f:
b5:0f:cd:dd:a2:9f:4f:6a:26:d9:4f:a2:7b:e6:e7:ee:c5:80:
84:45:83:8b:89:57:ed:0b:fc:06:83:d5:91:56:4d:91:a4:9f:
ca:10:98:bc:da:dc:a8:53:63:53:8d:0d:a2:ba:79:c0:a8:d6:
23:0b:0d:c9:1c:91:8e:a0:e5:67:14:7a:04:a5:24:de:39:c2:
78:0b:c5:54:3d:6a:df:e7:da:02:1d:72:0e:99:a6:c1:55:6f:
f0:ac:d1:4e:d3:5d:2e:73:12:7a:87:f2:78:b4:66:fc:48:2b:
26:03:65:ff:c0:2f:10:b1:54:14:fa:17:81:e6:c5:c8:4a:ea:
fe:b3:c1:c9:04:1a:dd:07:83:ad:c3:79:d0:ee:2b:f0:f4:5b:
a3:16:16:b3:3f:2a:83:14:49:f5:2c:f2:d1:ae:c3:34:ea:56:
ce:9a:80:56:72:e8:9c:5e:2a:c5:9e:d3:6d:66:f1:03:56:c1:
1c:bb:2b:e9:04:87:0b:13:e9:ba:4e:3a:af:2d:15:1e:ea:09:
4c:34:61:97:52:da:13:95:e2:2a:3d:39:0e:d8:19:81:b9:27:
0b:94:51:8e:db:b6:52:b8:e8:c0:40:d9:9c:8a:36:d1:5c:54:
64:1a:fc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 23:59:18 2024 by rpki-client on console-fra.rpki-client.org