Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/AM_EW6nM-JjZ8otIJ5Z-rT61GqI.roa
File: AM_EW6nM-JjZ8otIJ5Z-rT61GqI.roa (raw, json)
Hash identifier: zF3vNeQ2qXvZ/ajEteGniLBJRY7+sT6yVcb8d2b2+gI=
Subject key identifier: 00:CF:C4:5B:A9:CC:F8:98:D9:F2:8B:48:27:96:7E:AD:3E:B5:1A:A2
Certificate issuer: /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Certificate serial: 018CC870EA77BD6B0F821CD3B5FD95123161
Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/AM_EW6nM-JjZ8otIJ5Z-rT61GqI.roa
Signing time: Tue 02 Jan 2024 04:31:32 +0000
ROA not before: Tue 02 Jan 2024 04:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6779
IP address blocks: 185.13.48.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:ea:77:bd:6b:0f:82:1c:d3:b5:fd:95:12:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Validity
Not Before: Jan 2 04:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00cfc45ba9ccf898d9f28b4827967ead3eb51aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:dd:dd:6a:5b:8a:1d:85:47:3d:d9:f7:99:
8e:18:85:24:73:dd:a1:87:d6:4d:c8:cc:17:a6:94:
61:65:e1:24:ba:38:e5:f4:d8:d7:7d:04:d5:b9:5e:
f3:62:d1:5b:fb:57:a8:16:05:b3:6a:11:77:11:97:
7c:07:a8:77:c2:70:b3:42:9f:24:ba:c8:70:12:ac:
0d:9f:15:d7:55:03:fa:40:79:aa:4c:28:12:32:f3:
25:7a:75:3c:99:a6:8f:0e:21:61:27:1d:f1:9d:36:
e2:41:be:ca:23:3f:d1:90:e8:bb:9e:31:a4:2b:1f:
c8:fe:b0:88:af:20:64:44:95:c5:87:96:a7:98:19:
b5:66:af:70:3b:c4:80:47:2d:c2:72:b1:80:12:53:
92:b6:57:88:21:8f:aa:73:64:c1:8f:3b:af:9c:ea:
aa:c2:48:93:45:c8:ce:37:32:d2:69:3e:37:6f:f6:
86:1d:4d:10:4a:1e:e9:c7:17:7f:35:24:47:82:fc:
85:73:f1:fd:a9:f6:fd:48:57:56:4c:33:f6:f0:08:
48:4d:f1:91:8d:48:6c:db:59:0d:a6:3e:b4:64:56:
f5:31:d5:33:2c:47:e9:b5:c2:34:00:98:11:4c:2c:
20:54:18:7c:62:fc:12:e9:e5:91:9b:48:ad:49:45:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:C4:5B:A9:CC:F8:98:D9:F2:8B:48:27:96:7E:AD:3E:B5:1A:A2
X509v3 Authority Key Identifier:
keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/AM_EW6nM-JjZ8otIJ5Z-rT61GqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.48.0/23
Signature Algorithm: sha256WithRSAEncryption
90:52:79:f0:46:8a:11:b8:ba:73:c8:1b:e2:5f:de:45:94:c8:
99:0d:69:e7:1c:4e:9a:7d:7c:04:03:65:df:1e:9c:9c:aa:c3:
19:3e:35:86:ce:d7:60:8b:aa:dd:86:08:be:10:32:f6:2b:b2:
c9:37:18:ce:40:39:40:ef:5d:06:e5:6b:4c:6b:47:7f:dc:de:
88:99:2d:f4:a2:d2:d1:62:de:e4:5b:04:09:8d:a0:3e:e1:7a:
02:ef:d4:c6:fb:bb:3b:eb:7b:6c:b8:bb:f9:03:66:77:fb:37:
29:2c:8f:07:ca:43:07:6f:89:1f:83:f9:dd:27:69:f3:66:ba:
81:fd:9d:f2:b3:3d:34:1b:78:b0:55:f3:8e:8d:71:ff:d9:8e:
ca:9a:07:f7:e8:b8:0b:e5:b4:df:74:ba:3b:ff:23:42:88:84:
f9:41:8d:de:39:7e:1c:89:97:34:ef:4b:35:a3:20:5d:71:d8:
18:01:99:3e:88:04:53:7d:e2:8e:36:f9:4b:55:e6:3b:d4:64:
61:2e:bb:c4:2a:2f:08:2c:19:b7:54:f4:56:36:c7:f8:c8:0c:
8f:f4:ef:91:79:e8:f7:a1:89:c7:f8:f9:0e:42:f7:0d:f0:c5:
4e:46:15:03:6a:b7:f5:60:31:52:4f:fd:27:36:f5:01:77:d3:
ea:48:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:32:33 2024 by rpki-client on console-fra.rpki-client.org