Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa
File: iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa (raw, json)
Hash identifier: yU8lXGJCLTB9K3+97zOL7j/6oevs6suWud2yUV91lCU=
Subject key identifier: 89:46:F1:B1:C7:82:9A:34:E2:08:FC:F9:B5:F6:71:70:21:BE:F0:DB
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB4E61723A33C7421B77C257FF143
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202676
IP address blocks: 82.159.143.0/24 maxlen: 24
82.159.163.0/24 maxlen: 24
5.40.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b4:e6:17:23:a3:3c:74:21:b7:7c:25:7f:f1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8946f1b1c7829a34e208fcf9b5f6717021bef0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:80:53:9e:f9:45:19:6e:82:75:f0:bb:ee:
0f:27:2d:20:1a:e1:76:1d:78:c0:a5:95:1a:00:1b:
be:17:d3:45:c1:14:9b:6a:41:9d:a9:7d:58:f8:6d:
8e:fe:08:4d:72:bf:20:67:11:eb:ca:16:cc:e4:7a:
44:bf:75:31:80:96:fb:54:8a:6d:37:b6:fe:2d:9d:
84:fe:17:66:c1:ba:90:c5:10:dc:47:5e:f1:a5:09:
07:cb:c3:ef:d9:f1:74:7e:37:36:c3:fe:32:8e:36:
90:45:23:67:b9:09:8d:8c:48:e3:64:db:ea:16:31:
fb:7f:ce:30:e9:77:ef:b0:0a:28:9f:b8:d9:62:46:
65:9a:df:f1:03:62:e3:15:fc:a5:fc:1a:32:12:08:
be:75:3f:47:0b:e2:5a:7f:10:86:c6:10:2b:8e:29:
cc:78:0e:7e:9a:0c:ea:a8:5c:19:9f:2d:08:95:f8:
9c:e6:83:c3:96:42:4b:5a:2b:eb:a4:0f:5f:aa:e9:
9d:fe:d2:24:a8:ca:28:36:41:1a:bd:91:b0:60:5b:
99:cd:3e:ff:17:6d:bf:7b:c4:13:09:b5:cf:1d:de:
a7:25:e1:90:a9:56:d4:c6:2f:cd:0a:bb:0d:eb:cc:
68:8a:44:c1:98:45:2a:b5:6f:f9:7c:b6:b5:07:4b:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:46:F1:B1:C7:82:9A:34:E2:08:FC:F9:B5:F6:71:70:21:BE:F0:DB
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/iUbxsceCmjTiCPz5tfZxcCG-8Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.150.0/24
82.159.143.0/24
82.159.163.0/24
Signature Algorithm: sha256WithRSAEncryption
70:90:7c:fe:a3:22:20:5d:e7:75:4a:fd:03:c6:4a:68:26:8f:
05:99:99:77:ce:16:b7:c3:13:d7:15:2b:4e:04:f3:f4:1e:bb:
b8:88:27:c8:df:70:f9:67:e8:b2:c8:30:66:79:e9:b9:e8:e2:
03:cc:32:b8:5d:a9:ca:d3:a9:c2:fd:80:96:86:5f:f0:4c:4a:
e7:40:df:c2:cf:57:ce:78:4a:78:7b:75:26:25:c0:f9:16:8b:
a6:ae:e6:ca:76:f6:22:35:f5:1c:5e:56:91:f3:88:ba:1b:d7:
84:ed:44:76:88:09:68:16:8c:16:02:ea:a7:ab:ed:51:8a:0c:
ff:0f:87:98:be:3b:13:7a:93:ba:e6:c8:e3:c2:5a:36:3f:f6:
3b:f4:85:58:b0:f5:2b:a5:cf:ad:0d:9b:b6:dc:24:19:3a:9c:
9d:98:1c:dc:20:6a:8f:31:b9:f5:2f:02:4d:37:d5:b9:62:59:
18:4f:9f:54:0a:4b:77:1d:d2:c7:27:90:8f:02:c2:10:1f:6e:
33:e0:40:ca:cb:a0:81:64:0e:e6:11:01:80:98:fa:48:a7:33:
3d:19:45:53:4f:19:be:74:cd:6c:ae:1c:0c:9e:3a:34:60:91:
8d:53:29:a0:08:27:e6:30:17:e2:21:6d:6d:8b:cf:0e:22:94:
8c:6d:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:59:09 2024 by rpki-client on console-fra.rpki-client.org