Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/_59yrsTAdvA_yCYswtWo2yOq7Hc.roa
File: _59yrsTAdvA_yCYswtWo2yOq7Hc.roa (raw, json)
Hash identifier: yA6pGpVs01vdmBvMoqKUFzRc+ZMeMuh+mELpQGlgtKw=
Subject key identifier: FF:9F:72:AE:C4:C0:76:F0:3F:C8:26:2C:C2:D5:A8:DB:23:AA:EC:77
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 018CC7269585E16C44309842D01B1A6085E8
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/_59yrsTAdvA_yCYswtWo2yOq7Hc.roa
Signing time: Mon 01 Jan 2024 22:30:43 +0000
ROA not before: Mon 01 Jan 2024 22:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198608
IP address blocks: 5.57.48.0/21 maxlen: 21
185.168.244.0/22 maxlen: 22
2a01:4c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:95:85:e1:6c:44:30:98:42:d0:1b:1a:60:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Jan 1 22:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff9f72aec4c076f03fc8262cc2d5a8db23aaec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:cc:9f:25:10:8d:f3:a6:ec:33:10:42:81:
ac:23:64:96:84:3f:9c:0e:0a:61:77:dd:fb:59:88:
96:9e:e0:b6:c9:44:60:8b:a3:9b:94:19:76:d2:a7:
4e:a2:83:47:d8:4c:51:b4:7c:37:d7:0e:2a:ff:15:
7b:5c:5f:89:8f:77:a9:48:2b:d4:70:2b:24:5b:c0:
39:65:c6:a4:b8:0b:46:4b:83:d7:96:cc:6b:3f:ba:
87:48:f4:b7:c6:7d:db:ea:e1:b9:d4:a4:b8:19:2b:
04:3b:4b:dd:d3:23:3a:6c:75:f7:4f:7b:f8:0a:3c:
bd:52:18:be:e7:bb:33:c3:b4:ed:82:5a:d8:7a:7e:
ff:9e:fc:9d:2d:e8:2f:11:53:fb:bc:e6:92:90:ff:
4f:61:d0:f6:fd:5c:53:1c:c0:91:c7:d3:83:6b:f4:
a1:68:fb:10:1e:c3:20:23:23:cf:0c:fd:53:e1:ec:
a0:ce:44:4a:af:b3:f7:a6:9a:62:04:8b:c1:cc:6f:
25:a5:19:43:99:2c:0f:b8:20:b9:c1:ab:3d:2f:b3:
fe:08:b2:6f:fe:ba:0a:95:29:77:af:ee:1f:ec:3b:
ce:c3:7c:08:3f:b5:6e:92:6a:d9:b3:a8:20:1c:12:
d1:7e:c9:56:87:62:ac:59:59:1c:e2:2d:c6:7f:55:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:72:AE:C4:C0:76:F0:3F:C8:26:2C:C2:D5:A8:DB:23:AA:EC:77
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/_59yrsTAdvA_yCYswtWo2yOq7Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.48.0/21
185.168.244.0/22
IPv6:
2a01:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
88:87:fd:41:2f:a5:10:5f:d3:e3:3b:6c:cf:4f:b1:de:8b:24:
1f:4a:5e:49:de:bb:d5:be:98:a0:1c:77:00:4a:f9:4d:0f:3a:
e1:5b:17:90:bf:c9:76:bd:ce:a7:c6:91:d3:3b:e9:f4:60:13:
ec:4c:85:f8:2b:90:f3:1a:39:72:06:3c:b8:d5:f9:80:bf:4d:
fb:86:ad:14:7d:22:2d:ea:0e:43:46:14:49:fb:3b:e0:a2:4d:
ae:8f:fc:51:5e:7b:6d:45:ac:da:dd:9e:80:a0:ad:8f:78:ae:
cf:84:d9:89:4a:7a:cc:61:35:bf:65:94:d6:11:7f:46:d9:b8:
96:c4:d6:dd:d5:f9:eb:84:dd:0b:22:d4:0b:ab:1e:16:89:36:
05:9a:e4:9d:27:80:24:67:a1:cb:02:5b:aa:64:b4:81:d4:c7:
c4:18:1b:f9:5f:ff:c5:8c:76:da:33:48:27:c8:19:d7:c5:7e:
91:d2:fd:ef:a1:e8:d5:98:89:41:96:57:40:53:58:78:6f:17:
85:2d:47:80:19:3c:fa:b0:fe:41:9c:e7:4a:44:d5:a3:20:a5:
22:3e:07:10:6a:ab:22:85:56:74:f1:be:42:bb:a8:ef:f4:af:
44:db:7c:57:9f:8c:2e:7b:f9:4a:fd:00:36:43:58:08:d3:ca:
d2:14:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:00:02 2024 by rpki-client on console-ams.rpki-client.org