Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/JlhRl0uLppmmLALr-hlGhPQ06ws.roa
File: JlhRl0uLppmmLALr-hlGhPQ06ws.roa (raw, json)
Hash identifier: qemfp1EDPxHNZUgskMQMESooUQzg2M+K/canaQ0Gj3Y=
Subject key identifier: 26:58:51:97:4B:8B:A6:99:A6:2C:02:EB:FA:19:46:84:F4:34:EB:0B
Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial: 018F2ECF4B8CADF88EB6E654DF98AFBB8C1F
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/JlhRl0uLppmmLALr-hlGhPQ06ws.roa
Signing time: Tue 30 Apr 2024 11:41:28 +0000
ROA not before: Tue 30 Apr 2024 11:41:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198247
IP address blocks: 185.60.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:cf:4b:8c:ad:f8:8e:b6:e6:54:df:98:af:bb:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Validity
Not Before: Apr 30 11:41:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=265851974b8ba699a62c02ebfa194684f434eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:21:a6:12:5e:5f:c5:da:d8:db:53:a6:4d:
26:49:f4:cc:f2:ca:46:8d:8b:8f:6b:59:99:12:05:
bf:52:f0:56:5d:26:a7:20:77:32:7d:c5:f0:13:2e:
45:3a:fa:3b:28:df:0b:89:5f:76:eb:4a:84:be:c7:
bd:27:29:e5:d9:d0:09:8e:ac:fa:a8:c3:65:db:ad:
c6:8f:cd:b2:04:56:af:36:db:9f:9c:9a:15:8c:29:
62:be:02:ff:3a:f2:16:d7:32:35:5d:79:15:45:0d:
4e:71:89:4c:52:9d:7b:07:bf:b3:33:19:93:2e:dd:
1a:ca:4d:02:3d:c1:bb:16:97:f6:1f:c1:d0:c5:67:
af:e3:bc:f5:56:c9:cb:35:ea:5b:22:f8:25:57:fc:
e5:4c:62:a8:60:ab:d0:82:ae:82:04:d1:b6:bf:af:
7d:d2:02:f3:43:ea:5e:37:bf:df:3e:77:c4:fb:f0:
6f:1b:62:78:22:39:af:e8:0c:c3:ce:a6:e7:b8:72:
4d:c3:e7:7d:68:be:bf:2f:36:88:e8:76:36:3b:96:
59:4b:ac:e6:c3:5b:12:06:e4:b1:b1:d1:4b:ec:c0:
5c:c4:52:7f:13:11:0c:d2:de:0f:7f:32:7e:a6:ad:
07:4f:13:f8:c5:e8:f9:70:b1:3f:12:d9:b9:e0:9a:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:51:97:4B:8B:A6:99:A6:2C:02:EB:FA:19:46:84:F4:34:EB:0B
X509v3 Authority Key Identifier:
keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/JlhRl0uLppmmLALr-hlGhPQ06ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.176.0/24
Signature Algorithm: sha256WithRSAEncryption
76:be:f7:22:91:e0:52:97:62:94:8f:db:7a:81:dd:9d:3c:ff:
72:77:b7:28:61:81:3b:c0:e0:bc:fc:85:27:62:37:00:71:ae:
12:cb:86:9d:3b:95:66:52:33:91:08:08:37:38:be:d4:f6:60:
f8:60:77:48:30:80:9b:b6:4a:5f:7e:95:d4:57:76:ed:4d:d8:
1b:4d:c2:05:ec:20:ac:08:e3:3c:8a:6b:69:95:b6:e0:26:8e:
c1:7b:a1:d6:05:55:f9:8d:ab:7a:09:c2:e9:63:0b:76:4c:a7:
48:f4:24:5e:c0:0a:37:59:a0:62:39:3c:67:49:a6:c3:aa:f4:
1d:f7:2a:8b:9f:66:15:0f:fa:a2:d3:27:d6:7b:1f:6c:24:67:
ad:83:19:a5:44:ec:c3:0f:f8:21:89:b0:f4:75:0d:e1:15:01:
b3:26:5c:fb:bb:23:16:77:e7:ef:9d:82:69:2d:32:c8:d4:7e:
8a:a7:dd:f0:d4:08:67:1c:ad:e7:02:eb:f8:54:f0:22:c1:94:
37:43:05:ef:e9:52:9c:89:21:7e:9e:51:90:f1:66:3e:8b:42:
3b:68:c9:a7:42:06:19:3f:72:12:49:42:7e:6a:93:78:54:8a:
5f:75:9b:ee:b2:4a:4b:d8:a2:f1:d7:09:11:39:61:b3:21:ae:
12:f4:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:29:31 2024 by rpki-client on console-fra.rpki-client.org