Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/ceVpMi83Ouzj0k0OUoXtWVYvVyo.roa
File: ceVpMi83Ouzj0k0OUoXtWVYvVyo.roa (raw, json)
Hash identifier: NCcGwg4vs22ylHAitRu9L+NQzWgpWCUGXo7cq+6CYOs=
Subject key identifier: 71:E5:69:32:2F:37:3A:EC:E3:D2:4D:0E:52:85:ED:59:56:2F:57:2A
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 018CC86F3A3DB362E18F1A697C494220152E
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/ceVpMi83Ouzj0k0OUoXtWVYvVyo.roa
Signing time: Tue 02 Jan 2024 04:29:41 +0000
ROA not before: Tue 02 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57244
IP address blocks: 192.166.124.0/22 maxlen: 22
192.166.124.0/24 maxlen: 24
192.166.124.0/23 maxlen: 23
192.166.125.0/24 maxlen: 24
192.166.126.0/23 maxlen: 23
192.166.126.0/24 maxlen: 24
192.166.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3a:3d:b3:62:e1:8f:1a:69:7c:49:42:20:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71e569322f373aece3d24d0e5285ed59562f572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:0b:bd:24:fd:f8:b9:85:78:ce:2d:60:d2:
f6:1c:e1:9f:0d:2d:30:78:b4:1f:5a:d6:d9:fa:65:
0b:a1:f5:ec:ac:75:6a:ee:e7:38:f9:9d:bf:77:a2:
8f:6b:88:fb:ff:e5:a1:f8:0c:ba:7c:7d:81:96:47:
fd:19:e1:46:be:33:fe:91:92:9f:df:ab:41:7f:8c:
03:e5:9b:a4:84:d3:9c:54:55:e9:e5:2b:79:58:c1:
ed:17:9b:39:72:6f:ba:83:98:e3:6d:27:4d:66:b4:
3e:cb:63:41:75:dd:5f:de:a8:f4:0a:e8:14:b1:02:
e6:45:58:0b:b9:43:4d:94:e2:8b:78:fc:6c:74:58:
7d:bb:58:b5:1d:82:e4:37:90:1f:ee:fa:d0:10:f5:
c0:8e:37:83:5f:48:90:6c:9d:68:c3:f1:b8:68:34:
8c:3d:10:36:8d:36:c8:cc:fb:4a:f2:ea:3e:23:2f:
0e:e6:0c:e8:5f:be:7b:50:4b:cd:37:6c:82:a7:89:
a7:7f:c9:70:87:a2:02:88:cf:99:c8:8a:2c:20:7a:
ed:f3:93:13:d5:dc:57:03:49:95:9f:ff:32:cf:e4:
01:df:a6:15:c0:8e:0a:2f:9c:67:18:10:61:47:33:
21:b2:30:d1:8d:15:0c:52:d7:55:3c:0c:3d:cc:3f:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:69:32:2F:37:3A:EC:E3:D2:4D:0E:52:85:ED:59:56:2F:57:2A
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/ceVpMi83Ouzj0k0OUoXtWVYvVyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.124.0/22
Signature Algorithm: sha256WithRSAEncryption
31:aa:a5:cd:f3:d2:ee:bd:26:b3:c9:2e:c8:fa:02:29:24:66:
21:62:e5:01:60:09:e3:4e:c1:08:86:be:32:f6:36:ba:98:8b:
d2:60:2e:bb:bd:e0:00:dc:37:18:ac:d7:b7:80:bd:01:7f:02:
38:c8:ab:17:0e:c9:89:07:35:2b:28:21:65:0f:79:43:46:c5:
c6:6c:28:a1:ae:cb:13:05:79:6b:91:11:27:3c:7c:d6:9f:cc:
48:96:e3:f7:d2:a4:66:eb:b2:c3:e3:b7:68:b0:17:34:92:4c:
58:93:e4:9a:69:3e:de:0a:1f:5d:53:f8:93:1a:20:04:a7:73:
ce:d9:d7:a5:fd:f2:11:f1:a8:55:d1:3f:a8:0e:aa:1e:fe:00:
22:5e:85:6d:65:ca:de:58:98:b1:ec:78:9b:4b:57:0f:2a:50:
b9:d5:25:db:72:d5:da:a2:24:06:33:9c:eb:69:ec:c1:40:c4:
1b:c8:e1:15:57:63:9c:45:fb:36:18:5e:63:64:5d:fa:21:9b:
c2:d6:17:c1:f2:35:a3:20:73:c2:57:19:41:f0:eb:71:26:d0:
bb:9d:56:98:18:d6:32:69:3d:e6:40:1b:4f:12:fe:6d:90:53:
cc:c2:b0:6a:dc:56:6f:5d:3f:74:62:ec:5a:d9:47:88:48:ef:
5c:28:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:45:24 2024 by rpki-client on console-ams.rpki-client.org