Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/H-pgjFcQeQzLJxX020KIAa5fs4c.roa
File: H-pgjFcQeQzLJxX020KIAa5fs4c.roa (raw, json)
Hash identifier: NCo1lK95914RKJd8/j7poyn6ltsC13NWqAmFrixBkRE=
Subject key identifier: 1F:EA:60:8C:57:10:79:0C:CB:27:15:F4:DB:42:88:01:AE:5F:B3:87
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 018CC42461FFA67273A25B8AEC7D683554CD
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/H-pgjFcQeQzLJxX020KIAa5fs4c.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 195.88.162.0/23 maxlen: 23
91.211.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:61:ff:a6:72:73:a2:5b:8a:ec:7d:68:35:54:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fea608c5710790ccb2715f4db428801ae5fb387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:1a:0f:f8:4f:2f:77:f2:11:63:0d:97:06:
b1:98:b7:00:10:c4:2b:fd:89:b3:41:b0:30:46:0b:
1c:3b:1c:7d:e4:02:05:2d:97:f0:4c:4d:7d:f4:c2:
ee:33:82:03:ec:97:36:25:72:4b:be:03:3c:e2:03:
47:99:96:58:a2:a3:ac:3b:29:ef:bd:65:94:93:d8:
33:8b:71:7d:fe:d4:f0:c2:2d:2e:3a:f1:53:84:f0:
61:37:a0:0b:6d:15:5e:8f:7f:f6:56:f2:14:93:57:
a3:0e:81:ab:77:20:c0:33:cf:5c:d7:08:75:54:ca:
ab:89:2b:1b:e3:46:ad:ac:6b:87:f7:6b:f8:b2:75:
e3:06:e7:25:31:94:c2:ac:ad:c3:44:ab:e3:53:31:
09:13:f9:2e:a8:19:91:4a:0c:df:48:bf:3d:73:25:
b8:ac:a0:dd:ce:bb:0c:de:f7:9b:23:bd:36:ca:8a:
5d:6a:fd:37:7f:3b:05:01:bd:7b:0a:98:df:78:ba:
e8:0a:54:16:15:a6:df:2d:f1:ea:f7:38:44:03:8c:
89:43:29:bc:42:e7:ab:e1:21:64:85:ab:45:2b:03:
ed:a3:60:01:55:e9:a5:43:d4:73:3b:86:42:b1:2a:
a4:21:7b:66:45:c4:17:b3:7d:30:8c:e4:9c:bf:8c:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:60:8C:57:10:79:0C:CB:27:15:F4:DB:42:88:01:AE:5F:B3:87
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/H-pgjFcQeQzLJxX020KIAa5fs4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.25.0/24
195.88.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:a6:66:22:42:2f:b6:fa:e9:4b:44:fe:6c:c3:54:35:c0:38:
c3:7c:d6:aa:96:18:04:e2:b6:0c:76:69:44:b3:c3:c2:c0:4e:
4f:f9:f8:37:8d:24:21:6b:30:55:eb:65:6e:bd:e5:c1:fb:de:
9c:0f:d1:31:ed:7c:4f:ab:b6:94:26:e5:3a:bb:4e:ae:3c:ed:
a2:54:bd:a3:04:c4:52:e9:ad:db:3c:ea:86:d2:98:54:9c:45:
6b:fe:97:bf:c7:30:3b:54:3d:9a:70:c9:9b:fb:82:45:43:d8:
25:b7:2a:84:14:66:77:62:71:8b:65:80:08:18:f7:a9:e9:a0:
f7:75:5f:06:6b:8a:f8:be:b5:de:6e:b3:94:5b:bf:2a:05:52:
59:39:69:cb:36:6b:94:a7:c2:ea:b1:f9:a0:5e:27:fb:2a:ea:
26:99:6d:81:6e:54:27:58:13:f3:59:60:79:90:d9:b7:2f:33:
f8:2c:20:bf:3a:a4:43:a0:cf:e7:1f:2a:56:37:cf:71:77:6a:
a0:cb:3f:11:09:b8:fa:ba:ad:ca:3a:b0:c8:ee:41:0f:3d:22:
6c:fb:3d:fa:ab:bb:66:14:a1:ca:39:ae:b1:52:7c:b1:92:91:
bb:00:e2:33:29:57:78:5f:a4:2e:de:7e:00:76:c3:73:52:0c:
06:24:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:25:36 2024 by rpki-client on console-ams.rpki-client.org