Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/4BhWYI7VFCD6IljkMyhMGsAo-PM.roa
File: 4BhWYI7VFCD6IljkMyhMGsAo-PM.roa (raw, json)
Hash identifier: KnCPZNh1eHhwVsp8r50f8AtVDZJCQfpipSMt2LPyWSo=
Subject key identifier: E0:18:56:60:8E:D5:14:20:FA:22:58:E4:33:28:4C:1A:C0:28:F8:F3
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 018CC26D6BA02A91B8645FAC4220D2EFC7BC
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/4BhWYI7VFCD6IljkMyhMGsAo-PM.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61163
IP address blocks: 94.158.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:a0:2a:91:b8:64:5f:ac:42:20:d2:ef:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e01856608ed51420fa2258e433284c1ac028f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:da:c9:a0:b1:b2:e8:06:b8:cb:46:55:dd:
ee:5a:ba:b1:9e:5c:50:9c:77:02:e8:fc:4f:a7:22:
fa:b3:11:ff:96:7d:58:bd:95:41:b2:ca:8e:48:f6:
a8:cf:a7:95:ee:66:00:18:17:79:79:cb:f6:8c:26:
78:1f:35:b2:55:5b:23:b6:b7:69:9a:a8:4d:9e:dd:
ba:63:dc:17:27:9b:05:59:8c:e4:b5:ee:0b:b0:0b:
b2:d9:fa:30:d3:e9:d8:60:20:0a:91:62:a2:24:87:
00:28:58:4b:25:51:14:c2:68:1a:af:1c:a2:f5:2e:
16:72:20:40:17:a5:11:04:2e:e9:81:c8:34:12:c5:
3d:1b:e9:7d:c3:40:ba:19:62:12:d5:dd:bc:8d:0e:
d1:b6:33:8b:b4:5d:77:84:a4:57:e7:79:4d:e5:c6:
d7:48:72:53:c7:43:61:83:4e:93:e1:f9:39:6d:b7:
9f:da:df:b8:f4:99:4c:3b:67:0c:c1:65:f8:04:b7:
b7:71:f9:bb:4f:13:26:7e:5a:38:0a:15:35:1d:46:
80:82:82:75:b1:ce:61:9e:8a:f1:76:8c:3c:bb:c1:
a5:d0:b9:58:fc:6f:a0:25:12:99:c7:ae:47:1e:5b:
72:78:ce:d4:18:fe:45:58:62:ce:2b:7e:59:26:50:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:56:60:8E:D5:14:20:FA:22:58:E4:33:28:4C:1A:C0:28:F8:F3
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/4BhWYI7VFCD6IljkMyhMGsAo-PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:bc:1d:ba:90:88:22:d0:f4:f1:28:a3:b7:f8:cd:ff:1d:7f:
e7:f1:d7:56:9d:6a:59:2a:f2:bf:15:98:94:47:06:87:cb:0c:
77:15:e7:08:56:72:60:a8:7b:56:27:5f:43:f3:61:ba:7e:88:
5e:11:a2:ec:1c:8c:b6:9b:ad:b9:04:29:f6:d2:5c:74:47:e7:
b7:54:ef:49:81:08:56:a6:de:14:98:9a:cc:66:e7:a1:6e:21:
d9:48:95:3c:6e:87:f3:48:8b:65:46:44:17:40:49:3c:d6:41:
1c:f4:c7:02:7b:08:6b:f4:72:7a:36:ce:65:69:8f:f7:5a:c1:
c7:b9:e7:6b:04:33:37:a0:3a:cf:f6:18:c9:8b:59:32:70:64:
ae:dd:cb:b7:9c:36:d1:79:48:d1:4c:8a:d1:52:e5:e9:a8:a9:
4c:1e:70:da:10:c7:4f:59:df:2a:48:06:62:3d:62:6e:96:d0:
03:9a:80:17:4b:31:c6:0e:2c:b6:c1:6e:91:2a:b0:64:58:d0:
a8:d5:cc:77:45:18:62:22:df:41:e5:83:78:5d:95:75:b8:8d:
e0:e7:12:c3:d6:0a:50:0e:9b:ad:ee:da:2f:b6:c5:57:75:75:
c3:0f:42:91:d0:1d:d0:f0:d2:54:d6:d4:07:63:ae:6d:17:43:
9d:00:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:20:40 2024 by rpki-client on console-fra.rpki-client.org