Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/B5_PLFMTMr-Yi226cY7EfZbK4RE.roa
File: B5_PLFMTMr-Yi226cY7EfZbK4RE.roa (raw, json)
Hash identifier: inoWc64rSb5YZSj/JHl212KOGSILy6MwoGnq5lXP7vk=
Subject key identifier: 07:9F:CF:2C:53:13:32:BF:98:8B:6D:BA:71:8E:C4:7D:96:CA:E1:11
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018CC94DB1E179E0ED76DD2203E922D1679A
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/B5_PLFMTMr-Yi226cY7EfZbK4RE.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 185.138.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b1:e1:79:e0:ed:76:dd:22:03:e9:22:d1:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=079fcf2c531332bf988b6dba718ec47d96cae111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:90:e9:5f:5c:15:e6:14:02:0d:d0:ff:25:
9f:c3:a2:14:f2:1b:7a:00:b6:8b:89:10:3f:e6:d7:
dd:7e:51:4d:a4:a0:fa:c7:b3:36:73:c5:f3:58:b3:
3b:94:d8:14:73:16:89:7a:1f:69:fb:0c:81:4c:ed:
08:5b:16:b2:b8:40:f0:09:4c:76:08:4a:a6:92:b6:
53:44:38:bd:91:51:ba:4f:4a:d6:ed:e6:e0:8b:91:
75:73:21:78:a7:42:a6:96:23:6f:fe:f8:44:45:62:
53:e7:b9:32:e0:c5:98:59:25:82:24:92:70:86:c1:
3e:11:f7:e1:02:80:01:da:7d:94:47:42:71:b6:3b:
36:e0:ad:44:f3:7e:f0:52:de:1a:f6:30:3e:1f:75:
e5:4f:e3:67:34:f6:e4:e8:53:ce:40:3f:39:ca:de:
92:5f:1b:ab:f0:3a:9d:b9:f5:e4:e4:a4:4c:1d:61:
39:19:d8:4f:8b:12:d3:ae:9e:c5:e3:9d:de:97:7d:
06:65:c4:8d:2d:51:00:cf:12:dd:6d:96:cd:20:9c:
d3:1d:7b:c9:ba:bd:58:c2:de:2f:9b:7a:2f:d5:4c:
e0:53:b2:9f:ae:b3:88:0c:39:52:74:82:e2:57:0b:
eb:30:96:6c:80:f0:a5:39:be:4c:1b:f0:df:83:c7:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9F:CF:2C:53:13:32:BF:98:8B:6D:BA:71:8E:C4:7D:96:CA:E1:11
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/B5_PLFMTMr-Yi226cY7EfZbK4RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.234.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3f:a4:32:c1:2f:95:6b:77:be:2c:a6:c8:d8:ff:a4:8a:40:
e3:25:ae:db:fe:17:70:69:d6:43:74:18:79:52:57:29:54:38:
62:a8:cd:f7:34:8b:04:25:03:87:32:12:b5:15:55:f6:bd:d6:
a7:12:da:43:ba:b0:0c:21:dc:33:d1:37:35:14:09:ad:3b:c5:
ec:e8:8e:02:52:34:fc:fa:8f:bd:ce:1e:29:6d:a5:a4:ad:c7:
86:53:db:4e:eb:55:f7:c1:75:a9:b2:0d:b7:34:a8:27:17:b8:
8b:c3:59:d9:7d:78:e4:10:ce:d1:8d:5f:92:b4:ab:63:49:7c:
ef:8c:8d:f1:7f:3f:ac:d1:51:2a:c2:d8:81:3a:98:13:0d:14:
ee:89:da:41:31:80:64:dd:bc:19:dc:ff:31:7a:13:09:64:a7:
a1:9f:1d:ad:af:dc:85:c4:1c:f3:a5:50:80:5e:ca:11:b0:9b:
39:04:57:95:b3:0d:f6:6b:8f:b4:7d:f3:fb:e8:b1:fd:70:be:
22:27:22:eb:ee:ca:b6:14:c3:00:c5:86:1e:52:f2:17:d6:40:
87:46:87:9b:26:97:3d:b0:0d:28:72:97:46:a2:12:bc:ea:67:
e6:a0:03:5d:10:c0:20:ec:60:6d:98:7b:8e:28:5d:24:c6:a9:
c9:25:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:19:56 2024 by rpki-client on console-fra.rpki-client.org