Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dlHUJd2oCvV0rkv2J9HzgOf67-M.roa
File: dlHUJd2oCvV0rkv2J9HzgOf67-M.roa (raw, json)
Hash identifier: UBdTaptABLqI7BRxHRBJ+ek72dl2fx99TNE4FL7PnoM=
Subject key identifier: 76:51:D4:25:DD:A8:0A:F5:74:AE:4B:F6:27:D1:F3:80:E7:FA:EF:E3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC425523EAC4950AB4FA6EE8EEF88FA28
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dlHUJd2oCvV0rkv2J9HzgOf67-M.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1004
IP address blocks: 2.56.164.0/24 maxlen: 24
85.202.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:52:3e:ac:49:50:ab:4f:a6:ee:8e:ef:88:fa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7651d425dda80af574ae4bf627d1f380e7faefe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:d6:63:43:df:01:19:b0:7e:59:38:8c:39:
fd:c1:75:df:03:38:ef:7a:d9:13:82:96:3b:c0:6d:
fe:42:69:d0:d6:db:58:4e:d6:80:ba:22:8d:31:6d:
f7:2b:1b:f9:63:a6:62:91:0d:20:52:f9:8f:62:d3:
ed:04:b7:b4:68:29:c4:5b:76:b7:f3:ed:fc:ba:7d:
fd:e8:9a:2e:13:e6:7d:27:1a:02:a1:dd:1f:b9:66:
6f:ee:36:6e:6d:ab:52:55:29:1c:fa:3d:f1:19:b0:
13:c4:ac:dd:54:04:a5:80:44:ed:33:7a:81:3e:d1:
9c:e1:32:01:7c:04:6f:84:14:3b:d0:c9:31:60:72:
4a:ac:79:3e:74:37:a5:84:48:1c:fd:36:40:ac:9b:
ae:f2:fc:92:e0:7e:15:0e:68:9c:ec:5d:a1:0f:4d:
77:8c:cb:4c:21:99:b8:c7:48:fd:27:b0:74:f3:99:
7f:c5:bc:ea:8a:56:00:65:5b:29:ff:60:36:45:a2:
2f:53:7e:a6:c8:08:da:5a:c6:ce:2e:6f:c3:2e:d5:
ac:27:4a:de:f4:70:60:86:b3:f9:79:b6:a4:e2:a9:
58:92:86:2d:78:6e:3a:be:76:48:9f:d1:4f:eb:a6:
f8:3b:3a:5a:f8:4c:84:2e:73:08:bf:eb:2d:86:d4:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:D4:25:DD:A8:0A:F5:74:AE:4B:F6:27:D1:F3:80:E7:FA:EF:E3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dlHUJd2oCvV0rkv2J9HzgOf67-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
85.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b6:e2:a2:fb:54:04:cc:27:d4:03:d3:3b:c8:a6:33:0c:a8:
ab:54:53:20:df:83:96:b6:f5:eb:fa:8a:38:0c:2a:60:db:0a:
51:ea:ed:31:3c:3c:63:9f:31:00:02:99:55:8f:77:b6:ef:a2:
fc:e9:fb:8e:eb:de:1f:98:ed:94:3c:db:96:e0:4d:c2:c9:cd:
95:2c:6c:08:23:8e:cc:b2:51:7d:3d:46:eb:c0:e8:07:f3:3b:
13:32:e2:b4:74:37:c0:9d:71:a4:0b:53:62:9c:53:e1:1a:1a:
7d:f5:df:f7:59:ae:c0:9d:1a:80:20:71:11:15:4c:30:26:bb:
a9:20:4d:d9:0e:53:36:e0:08:a6:3f:09:61:5c:8b:ef:60:ed:
49:b9:8d:71:03:a2:7b:e9:2d:87:47:dc:61:da:fa:43:59:d9:
04:76:6f:47:12:1b:8d:72:3a:4a:1f:52:b0:db:1c:d0:31:5e:
c4:5f:80:ce:fb:08:a1:9b:cb:2e:f3:f6:fd:a6:ff:8d:ad:1f:
a4:bc:e0:1b:bb:d6:b5:8f:39:41:25:8e:0c:44:ac:aa:c4:d0:
bf:93:78:3d:b9:93:53:f2:6a:f4:b2:8a:34:2e:01:44:5c:eb:
5f:bb:dd:ea:77:78:05:aa:d5:6a:5a:44:57:d6:70:f0:4d:3e:
47:f1:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:31:01 2024 by rpki-client on console-ams.rpki-client.org