Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/19eaTJG4LJ6bSrTVexEVOaMMR6k.roa
File: 19eaTJG4LJ6bSrTVexEVOaMMR6k.roa (raw, json)
Hash identifier: 6BxF/q/KvqNVyCncYlbU28NNCk4maNaBSRDOvIRaVxo=
Subject key identifier: D7:D7:9A:4C:91:B8:2C:9E:9B:4A:B4:D5:7B:11:15:39:A3:0C:47:A9
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 018CC6B7895D82C1D7AD57BA272FB50CD6CA
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/19eaTJG4LJ6bSrTVexEVOaMMR6k.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1880
IP address blocks: 192.67.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:89:5d:82:c1:d7:ad:57:ba:27:2f:b5:0c:d6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7d79a4c91b82c9e9b4ab4d57b111539a30c47a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:61:69:7e:80:0d:30:34:05:eb:c4:c3:b0:
d0:a6:33:f1:6a:c9:5c:e1:2d:b6:5f:9e:65:12:f0:
ca:3d:f0:12:4f:87:33:8e:e7:06:3b:6b:55:66:a6:
1c:89:18:5a:f2:19:24:90:cd:2b:d1:bd:f0:b9:1e:
25:96:e1:16:bc:30:6e:da:91:f9:be:c1:da:2e:48:
a0:7a:87:74:54:15:ac:49:a7:99:7d:ad:e0:b6:2d:
29:b4:52:c6:a2:f1:c4:b6:eb:10:34:3b:a4:8b:7e:
73:85:15:29:29:ca:91:55:7c:5e:37:a0:12:bc:d3:
4b:65:7b:51:75:65:12:d1:f9:47:e6:45:e5:9f:b3:
7a:96:5e:75:35:ce:09:40:b5:a5:e6:66:f7:22:22:
77:21:97:0f:11:53:97:58:90:17:e7:cb:df:c6:38:
3e:6c:33:91:c7:29:12:6a:1c:b4:12:86:17:32:d6:
1e:55:5b:7d:7f:50:ea:77:a4:f3:63:ad:69:41:a1:
72:8e:71:5f:9c:17:c4:7b:3f:5f:08:68:fe:dc:3e:
33:b9:13:e1:62:32:1b:be:a7:95:82:e3:cf:56:b3:
32:66:fd:17:96:26:0f:32:f8:6f:70:17:3f:0c:5c:
18:ba:bc:48:a0:f6:b6:58:b5:79:ff:ca:85:60:b4:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:9A:4C:91:B8:2C:9E:9B:4A:B4:D5:7B:11:15:39:A3:0C:47:A9
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/19eaTJG4LJ6bSrTVexEVOaMMR6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:34:1d:b5:34:8c:f3:97:d6:49:5c:4b:fe:2c:d4:f7:45:4d:
f9:ac:7e:31:ec:16:e9:87:bc:99:97:11:ae:be:86:ca:87:7b:
73:10:32:d9:07:05:1a:7c:39:23:7d:ac:a4:2f:1e:60:f1:e2:
03:54:e8:3f:17:7a:bf:16:7c:52:64:f3:f3:10:94:e3:25:76:
1f:37:98:b7:bd:4a:af:da:04:61:0a:dc:59:74:db:c0:c1:1e:
99:c5:e7:d5:46:b7:32:e3:08:19:c8:e2:af:45:b8:92:f2:20:
de:5b:c9:87:7b:55:39:00:cf:eb:ab:4c:3a:44:9f:8c:16:68:
41:2b:06:cd:6a:93:fd:74:8e:d1:a3:72:0d:3f:0c:d2:05:81:
f8:d9:50:9c:a9:30:b1:e7:d9:a2:6a:c1:80:01:5d:d7:fb:c6:
4d:41:17:36:f4:17:ac:13:2d:49:7d:5c:cb:f4:33:fe:4c:80:
47:45:1a:72:6e:de:7f:83:da:71:ae:1e:17:e4:b8:91:7c:73:
cf:37:97:e2:c2:1a:65:6d:83:51:86:f8:e4:07:47:ba:64:1e:
e9:29:9b:ef:e0:07:70:59:1f:6b:13:05:16:f4:08:6a:78:b4:
98:b2:b7:e7:06:9e:aa:a0:f1:90:a6:0b:5c:49:e5:e3:f2:44:
a4:ba:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:54:41 2024 by rpki-client on console-ams.rpki-client.org