Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/rC5kAcWcD53ijFkkHykysR6fU1M.roa
File: rC5kAcWcD53ijFkkHykysR6fU1M.roa (raw, json)
Hash identifier: Amsw3BnPXnevq8EAqY4ZzeS3KGuDGr9IgvnXU/Yzkg4=
Subject key identifier: AC:2E:64:01:C5:9C:0F:9D:E2:8C:59:24:1F:29:32:B1:1E:9F:53:53
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0191B6F03B49E87E9D51B0F8C783359771D2
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/rC5kAcWcD53ijFkkHykysR6fU1M.roa
Signing time: Tue 03 Sep 2024 08:11:22 +0000
ROA not before: Tue 03 Sep 2024 08:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 185.36.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:f0:3b:49:e8:7e:9d:51:b0:f8:c7:83:35:97:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Sep 3 08:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac2e6401c59c0f9de28c59241f2932b11e9f5353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:e5:b6:dd:2d:6a:c0:1f:89:1d:9e:ff:04:
ff:ea:a4:99:47:53:f7:b0:e9:62:5c:cb:bb:c7:aa:
b6:02:7e:80:7d:b8:16:4c:ff:d2:8a:c7:f3:a4:ce:
24:c2:8f:59:19:8a:ce:ac:ed:bd:41:94:bd:e1:a8:
a1:54:10:95:51:ef:22:fb:5b:8f:3d:09:a5:a9:19:
52:ff:bf:09:10:83:78:5b:98:7e:2d:a3:f3:bc:cb:
93:95:fe:3c:61:ca:b7:c0:31:f0:f3:b5:d5:1c:20:
d1:4a:1d:c6:c5:cb:66:96:cd:ba:c7:41:5d:9e:fb:
03:84:80:c8:22:27:e1:ad:d1:36:42:8f:50:6f:66:
a5:49:ea:89:02:8e:39:d7:d9:c7:4f:51:4c:7f:f2:
b3:c1:28:b4:d3:75:f9:38:b4:1b:ac:48:41:00:c8:
6d:ed:a2:b6:7f:46:94:4a:a8:bb:7b:41:e5:1f:df:
2d:bf:9b:cc:1e:4d:8d:9a:0e:05:27:f3:2f:a2:eb:
3a:6c:da:d7:0b:0a:28:94:39:13:ba:f7:bf:a5:46:
35:49:5d:3d:1a:83:2d:16:b4:df:49:fe:7f:d4:d4:
58:b8:66:68:e4:47:3e:fe:bb:0e:06:a3:15:e4:81:
ef:91:00:ba:cd:71:20:6e:63:41:65:2a:d4:0a:d3:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:64:01:C5:9C:0F:9D:E2:8C:59:24:1F:29:32:B1:1E:9F:53:53
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/rC5kAcWcD53ijFkkHykysR6fU1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.125.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fd:5c:e8:d8:10:a3:f0:ec:b3:1a:dd:63:ed:b7:5e:12:bf:
49:4d:8c:f6:90:bb:e3:f1:1a:2f:11:d7:28:d4:51:8a:e5:34:
ef:7d:48:29:61:74:5d:eb:8f:20:64:89:14:ac:db:37:3b:b0:
9f:b6:29:e6:ca:8d:15:b4:ce:d8:8c:c8:df:69:ff:ee:75:67:
d3:27:36:52:d7:96:1c:52:4d:0a:fc:cf:75:10:06:58:2c:77:
1a:37:8f:30:72:ab:ba:d7:64:09:5d:bf:2d:70:ef:ba:fe:72:
4c:b3:f6:2c:82:af:3c:87:9b:86:85:b7:59:f9:88:bb:b2:11:
22:cc:11:48:02:8e:d2:73:6b:0d:1e:1c:af:ce:0f:08:88:d8:
9b:03:da:d6:2b:db:87:bd:30:d3:e6:81:4d:0b:4e:53:75:d9:
b3:73:10:6e:cb:5b:06:e7:89:3c:1b:1c:72:69:0e:08:86:92:
c2:e4:83:68:bc:69:6d:67:ea:a9:d7:75:63:bb:57:e8:61:92:
23:37:ca:0b:9a:bb:29:10:f0:ae:90:b7:bf:65:95:50:02:10:
9e:b1:d4:fd:e4:00:5b:24:ae:bb:87:07:ea:50:6d:5b:9f:a1:
d1:08:b4:ac:d5:fd:0c:2d:40:df:b0:8b:a2:2a:37:1c:fd:1c:
b9:65:37:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:20:07 2024 by rpki-client on console-ams.rpki-client.org