Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/a10ZoFaAcHWW69zubUZfCCxJ35s.roa
File: a10ZoFaAcHWW69zubUZfCCxJ35s.roa (raw, json)
Hash identifier: y2LTVKH3XrftCFwLRs9xof+t08o3UzSWUliAIKxWKdA=
Subject key identifier: 6B:5D:19:A0:56:80:70:75:96:EB:DC:EE:6D:46:5F:08:2C:49:DF:9B
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 018CC424D4AF827A574DAA8A19F9625ED02F
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/a10ZoFaAcHWW69zubUZfCCxJ35s.roa
Signing time: Mon 01 Jan 2024 08:29:57 +0000
ROA not before: Mon 01 Jan 2024 08:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8468
IP address blocks: 151.236.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d4:af:82:7a:57:4d:aa:8a:19:f9:62:5e:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 1 08:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b5d19a05680707596ebdcee6d465f082c49df9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:cb:d8:6e:79:8e:3a:3d:c6:31:2a:64:f0:
38:a0:be:96:4c:c0:1e:78:31:ff:36:cc:41:3c:50:
43:88:43:c3:27:0c:1e:01:50:90:ec:b0:9e:d4:2f:
d1:2f:b9:ce:91:81:96:b6:f6:e3:30:36:60:e6:86:
1c:d7:c6:d8:a7:04:e3:b1:b7:6f:cb:15:f0:3c:c4:
d0:e1:cf:65:cf:f9:6d:97:f9:f5:df:9f:fe:99:98:
a9:1b:e6:d8:68:44:4f:24:c0:c6:9d:58:6f:c2:d5:
e8:62:10:e8:3f:25:9d:02:7a:81:97:2a:40:21:75:
c5:eb:df:46:6e:2c:24:7b:53:f6:05:fc:19:06:00:
31:ff:c2:bc:2a:80:bb:45:0c:2a:40:f5:88:0d:23:
99:a6:b7:f3:55:55:bf:b0:a5:2f:c3:55:68:bf:55:
59:4c:ce:35:35:7d:59:3b:c4:6b:c8:8b:93:5a:2b:
69:aa:c2:b7:5c:f4:71:fa:70:52:54:b6:bd:2c:f1:
2e:67:99:5b:46:eb:41:1f:f6:14:9c:5b:be:03:95:
73:c4:ed:e1:39:84:f6:cb:e4:b8:5a:3d:63:f8:05:
d3:ce:ac:7f:d5:b3:91:2b:64:c0:69:b6:1a:00:2e:
45:e2:cd:54:64:42:36:a0:4c:b7:9f:a5:11:0c:26:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:19:A0:56:80:70:75:96:EB:DC:EE:6D:46:5F:08:2C:49:DF:9B
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/a10ZoFaAcHWW69zubUZfCCxJ35s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.208.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:73:79:84:7c:22:e3:d0:e4:5d:71:e5:24:61:45:9f:c7:3d:
ea:c1:e9:b8:c0:a9:c0:e9:72:af:23:34:8e:04:ec:69:04:cd:
f8:b6:d0:4f:6b:19:38:41:62:68:33:54:05:9d:fe:7c:e3:13:
13:66:7d:b9:92:29:29:c8:35:b2:67:c2:57:9f:da:34:2b:73:
f8:a8:c1:1b:99:f1:f2:90:43:66:aa:82:43:6e:a4:b3:f0:54:
4c:9e:6b:fa:59:07:90:67:c7:77:18:80:6f:a7:b4:ed:15:33:
b3:7e:e9:1f:c3:cc:e6:aa:ea:4f:1b:97:55:eb:63:59:e5:c5:
48:91:54:cf:6d:09:85:93:a4:bd:61:38:0b:18:9b:84:49:0a:
90:6d:f2:61:65:76:ae:c1:02:2a:73:82:94:1c:f4:6a:bb:34:
d2:e3:4f:83:af:c8:e6:26:63:a3:f0:5e:73:da:e4:ba:f0:b8:
16:6b:84:10:6a:72:bf:7f:4c:16:d9:5c:d3:05:be:d8:c0:1f:
73:6f:77:fc:f4:1a:41:d1:b9:06:f1:76:46:6e:bd:93:ae:02:
c3:14:c4:2c:b6:e1:c8:d0:a5:c3:e6:52:12:51:d9:cf:07:89:
9a:a4:f1:54:52:d2:68:c3:1b:c5:5e:74:e8:59:2d:69:8d:41:
bc:09:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:31:21 2024 by rpki-client on console-fra.rpki-client.org