Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/eT4IkVwy3yFDym2XS0_v5TPjZsA.roa
File: eT4IkVwy3yFDym2XS0_v5TPjZsA.roa (raw, json)
Hash identifier: Jkm3QZaIE52Mhg4+O1Hp3CYaONVFzqPonNUVCAJ/rK0=
Subject key identifier: 79:3E:08:91:5C:32:DF:21:43:CA:6D:97:4B:4F:EF:E5:33:E3:66:C0
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018EA0313C5DB89159034C63D9CDFDD2121D
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/eT4IkVwy3yFDym2XS0_v5TPjZsA.roa
Signing time: Tue 02 Apr 2024 19:02:45 +0000
ROA not before: Tue 02 Apr 2024 19:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59253
IP address blocks: 171.22.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:31:3c:5d:b8:91:59:03:4c:63:d9:cd:fd:d2:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Apr 2 19:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=793e08915c32df2143ca6d974b4fefe533e366c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:6c:de:b1:df:08:37:fd:34:f2:1c:b6:0e:
1f:c5:e0:34:42:b8:0d:9e:42:42:f4:42:6d:1f:de:
e4:20:65:1a:ef:b9:9e:78:09:b8:4d:07:3d:03:51:
a9:12:0e:07:e2:c3:24:01:ac:f1:be:7b:98:d0:5a:
6e:51:40:b9:4f:24:ab:03:bf:e0:a5:21:d4:cb:a8:
6d:6a:6e:26:37:71:97:52:8f:0f:0f:b5:68:9a:f1:
30:da:91:92:f5:5f:cd:aa:17:4b:45:9c:25:3b:09:
47:57:1f:dc:96:5b:d7:9c:35:8d:d3:1d:2e:cb:1e:
d6:c7:31:6e:79:04:13:77:12:2c:50:e8:48:9f:c8:
b9:de:7f:d3:06:6f:79:46:82:a8:92:8f:f0:2a:1b:
25:7c:39:3a:3e:5b:65:da:65:07:4b:19:72:43:23:
5e:9e:7e:3a:04:0d:dc:4a:ad:c1:a7:c7:6e:c9:16:
51:eb:e6:a9:37:f3:99:08:a1:8f:5f:81:fb:46:31:
fa:ea:23:c9:95:5e:70:74:9a:0e:ea:76:52:29:3f:
63:40:ab:b2:6a:c0:36:c0:d0:d0:70:b3:de:77:7c:
89:b1:5d:cb:88:8e:a4:00:17:fa:60:e0:d7:8d:aa:
3c:d5:f7:2f:19:77:0a:5d:48:6b:56:dc:d6:26:70:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:08:91:5C:32:DF:21:43:CA:6D:97:4B:4F:EF:E5:33:E3:66:C0
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/eT4IkVwy3yFDym2XS0_v5TPjZsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:d0:03:c3:28:c5:3f:18:f1:53:1f:7e:9d:c8:c1:8d:b1:25:
5a:73:a2:bb:80:5f:43:a2:01:86:39:ab:80:83:5f:52:e1:78:
fa:58:72:73:33:54:01:dc:59:ee:cb:92:77:43:76:8f:0e:42:
3e:8c:e2:cc:d8:38:e0:f4:8e:e4:45:ae:5c:fa:d3:4c:3d:00:
31:92:57:54:df:74:e2:4e:a1:c4:13:d9:98:71:72:05:75:d2:
4f:10:47:04:7b:9d:90:cc:e5:fc:e6:3e:9e:bc:91:ac:79:85:
71:7e:c7:59:4e:24:dd:7c:bf:e6:6b:bb:63:50:a4:5b:37:8e:
22:8e:a6:54:be:1c:15:43:8c:af:73:95:67:9e:9c:3f:27:f9:
e5:7d:df:26:6a:30:e7:7b:c1:f3:ec:db:93:f1:82:56:fb:13:
f9:e2:59:8c:db:14:53:3d:6d:47:b9:85:e6:f5:9a:89:db:f0:
04:11:06:c6:e4:e2:85:aa:af:89:67:98:cc:e3:01:84:f0:91:
47:69:a1:95:78:fd:47:68:2a:cd:6e:8f:92:1a:ec:cc:d3:ae:
27:4d:a3:01:00:db:fe:b6:52:4d:33:b5:24:4f:51:65:c0:35:
52:49:6a:c1:d1:50:55:34:01:b4:f4:8b:d1:b8:e2:44:36:4e:
8d:ee:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:05:43 2024 by rpki-client on console-ams.rpki-client.org