Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iM5kKl3uHtEnhQGR2t8o-Tcb7Po.roa
File: iM5kKl3uHtEnhQGR2t8o-Tcb7Po.roa (raw, json)
Hash identifier: G6OJ/BvGc57Oz5ZNjaYIeXacDU46wIYAFtepba7ETKY=
Subject key identifier: 88:CE:64:2A:5D:EE:1E:D1:27:85:01:91:DA:DF:28:F9:37:1B:EC:FA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80122B573AAC4D9371550BE655C1426
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iM5kKl3uHtEnhQGR2t8o-Tcb7Po.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15483
IP address blocks: 159.148.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:22:b5:73:aa:c4:d9:37:15:50:be:65:5c:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88ce642a5dee1ed127850191dadf28f9371becfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:01:da:d9:05:57:80:ea:6b:ce:92:88:37:
e3:8b:ac:81:87:ce:29:59:89:7a:a8:76:2a:06:d5:
57:de:f4:04:4f:f7:4e:53:0c:ec:df:56:f1:da:ed:
ba:f8:e6:35:0e:6e:b5:47:d0:dd:ea:c6:ab:18:c8:
76:46:8b:0d:7d:03:89:64:ec:ec:4b:a4:8d:e5:72:
34:9d:07:8a:ce:00:26:6e:84:d0:fc:ea:ca:38:eb:
80:c3:2f:82:6c:9e:04:1a:77:bc:c5:61:7d:77:a9:
07:48:78:d5:fe:63:87:10:ef:1d:52:04:20:a1:9e:
eb:fc:1c:f5:20:f7:f2:96:c9:2b:98:c6:e7:13:ca:
e9:6a:99:ee:3e:69:7a:ea:32:92:6e:c3:a9:9e:ae:
27:70:2d:91:2f:c7:28:ba:a3:33:6f:8c:ab:6d:c1:
a5:4d:d9:e5:9d:3d:78:08:c4:11:d8:07:de:d0:73:
6c:29:16:47:c5:8d:c4:54:b2:a1:5a:78:f5:54:28:
70:a9:37:62:fd:a5:19:11:63:5b:d8:f6:d1:ea:3e:
30:7b:33:f3:d1:6c:3d:54:18:ef:7f:41:74:d8:ae:
4d:79:83:82:0d:b8:13:bd:25:70:5c:3e:81:68:43:
0d:a4:1b:fa:fe:18:63:2a:7e:c7:5f:a8:11:fd:72:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:64:2A:5D:EE:1E:D1:27:85:01:91:DA:DF:28:F9:37:1B:EC:FA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/iM5kKl3uHtEnhQGR2t8o-Tcb7Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e1:25:46:a2:83:40:ab:1e:01:26:28:f8:fb:bd:85:a4:b4:
3e:c3:2f:ad:29:8f:ad:c9:7c:1b:35:db:4d:f2:88:9b:09:e2:
16:cc:0d:f4:56:9f:16:92:27:5f:34:bc:9a:07:3d:89:fe:3c:
c5:d0:28:53:51:54:ab:74:e0:77:b5:6c:6f:5e:81:93:26:52:
ba:06:bd:64:2e:68:b7:c5:ea:76:e5:68:0e:69:1d:98:75:9d:
56:28:60:08:1d:fb:dd:c0:e3:63:e0:df:07:4c:76:0a:bf:ff:
af:87:95:85:55:eb:93:a2:0f:05:81:de:b4:69:e2:d8:be:45:
cd:98:f2:ec:62:ed:b2:a8:ff:d9:35:f5:b8:32:24:54:50:18:
f4:b6:96:7b:d9:28:d3:2f:59:85:28:1a:32:fc:be:a4:2d:19:
a1:e6:f8:b5:a4:50:48:ef:94:d1:f9:71:80:cb:91:22:88:83:
59:35:25:d3:c6:79:2b:22:1b:68:e8:93:32:b1:14:03:58:cc:
e2:31:90:f1:79:9b:6f:c5:d3:c3:2c:c3:dd:08:e2:64:8e:17:
35:19:46:53:6f:df:ac:47:30:3b:62:15:16:81:4f:49:32:3d:
cc:b4:5c:cc:a2:52:6b:09:cc:b8:15:0c:9a:8f:b4:53:23:61:
64:78:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:30:18 2024 by rpki-client on console-ams.rpki-client.org