Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/p0UnklHT7AYiN5pDFR_gtRKYHnI.roa
File: p0UnklHT7AYiN5pDFR_gtRKYHnI.roa (raw, json)
Hash identifier: bOavOiYH2nkgwWIUrE7ZQfh8h4hS3dTPbD/djKvp10I=
Subject key identifier: A7:45:27:92:51:D3:EC:06:22:37:9A:43:15:1F:E0:B5:12:98:1E:72
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018DCBC41A4339F8FF17F86F69D67E5E2ED9
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/p0UnklHT7AYiN5pDFR_gtRKYHnI.roa
Signing time: Wed 21 Feb 2024 13:04:03 +0000
ROA not before: Wed 21 Feb 2024 13:04:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 185.226.56.0/23 maxlen: 23
185.226.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c4:1a:43:39:f8:ff:17:f8:6f:69:d6:7e:5e:2e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Feb 21 13:04:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a745279251d3ec0622379a43151fe0b512981e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:63:f7:6e:05:b2:1e:22:67:a1:9e:4c:3e:
30:8e:95:d6:4d:d3:54:9d:29:be:14:98:c4:30:37:
d0:db:3b:85:b1:cd:4f:0e:89:d9:d5:89:86:83:55:
7d:d2:c4:53:e5:f0:aa:5e:2b:43:fa:bb:7e:ac:ae:
6b:08:e3:ca:e0:ea:ec:a7:c0:15:84:d6:53:50:1f:
5f:e3:ec:63:6e:99:99:0e:86:01:28:d1:f1:fb:d3:
a4:d6:51:6f:da:6c:13:ce:f0:fb:2b:b7:f5:80:cc:
c1:00:3e:a2:1c:7d:e4:3a:a4:9e:88:6d:69:8e:9e:
2e:f2:e5:2d:c1:8e:80:88:19:b1:2c:b7:c2:7c:91:
1d:8f:73:e3:3a:98:62:63:50:87:cf:31:b0:c4:fd:
ae:97:ca:70:21:43:22:b1:b3:01:e5:18:75:e4:bd:
be:0b:d7:8e:c8:73:29:93:ae:06:03:45:75:b9:fd:
2e:6c:43:fa:0b:14:e5:29:b2:a5:ab:ed:b5:d0:56:
4c:88:01:4e:aa:08:9d:9e:6a:a0:db:70:54:cc:aa:
f0:67:cb:a7:d2:82:e5:14:c8:85:fa:c3:bd:31:3d:
34:82:bf:08:ed:44:25:dc:be:9e:b9:b0:7d:57:ae:
f4:73:b1:f0:05:d4:e3:3f:68:91:44:23:a5:58:a7:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:27:92:51:D3:EC:06:22:37:9A:43:15:1F:E0:B5:12:98:1E:72
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/p0UnklHT7AYiN5pDFR_gtRKYHnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.56.0/22
Signature Algorithm: sha256WithRSAEncryption
82:2b:05:d5:ff:14:37:33:4e:74:a2:03:51:da:d6:a7:e7:35:
54:a7:cb:58:a5:69:3a:c4:09:d3:bf:cf:99:10:52:45:94:ed:
49:06:62:3d:1f:bc:ed:3b:c5:66:f8:cb:b1:2b:23:54:e7:f8:
d7:4c:46:af:60:14:93:b2:72:08:57:80:5e:17:0b:30:88:d9:
68:4f:d7:01:59:c5:80:c4:d1:05:10:89:5c:01:15:6a:ed:8e:
66:05:e7:31:21:f9:85:88:00:50:59:53:53:a1:5a:9e:6b:19:
ee:42:a0:e9:31:28:c2:09:8c:10:f5:4f:9f:8b:1a:70:5b:30:
9f:01:0b:47:5d:f5:a3:fa:13:bd:ea:3b:13:e7:d6:d4:a9:b4:
6e:9a:b2:9b:20:58:97:c4:c7:67:be:6c:67:01:00:47:f7:67:
89:ab:1a:f5:a5:63:a5:39:8d:05:f9:59:e6:c8:db:9b:c4:f4:
fe:80:09:1f:6c:99:4d:59:1f:17:f8:3b:c8:29:86:55:cd:81:
9d:20:3a:7a:0c:f7:84:f5:e0:22:fd:e2:d6:f6:45:3e:14:8a:
9b:0c:6c:bd:00:ce:fb:30:dc:99:b5:2e:ba:2c:ff:d1:c2:8f:
ee:c7:0b:22:5c:42:5a:33:c8:ff:0c:6d:60:c9:3b:49:94:e0:
71:aa:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:16:25 2024 by rpki-client on console-ams.rpki-client.org