Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/1ShXaHmm_joriDms2mhzVaw3ZPM.roa
File: 1ShXaHmm_joriDms2mhzVaw3ZPM.roa (raw, json)
Hash identifier: RMV09VQAqFDAYDnRjUxFj7XDR1qjBiWWXoxo1kuQakE=
Subject key identifier: D5:28:57:68:79:A6:FE:3A:2B:88:39:AC:DA:68:73:55:AC:37:64:F3
Certificate issuer: /CN=453639642f9d2b4672343af8d82fc75547cd9851
Certificate serial: 018CC349524303ADB39B41181B0D16650D53
Authority key identifier: 45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/1ShXaHmm_joriDms2mhzVaw3ZPM.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43872
IP address blocks: 217.198.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:52:43:03:ad:b3:9b:41:18:1b:0d:16:65:0d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453639642f9d2b4672343af8d82fc75547cd9851
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d528576879a6fe3a2b8839acda687355ac3764f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:44:eb:3d:a0:ec:d1:f1:e7:23:14:24:5f:
c6:68:c0:46:59:74:ae:f6:65:4b:18:53:19:c4:02:
c8:2b:66:42:c7:e0:2f:df:1b:52:94:f5:cc:48:0c:
be:f1:3e:cf:db:af:f2:c1:d6:c9:27:fd:a6:6c:d2:
52:28:8b:22:56:c9:d5:e2:c0:a3:6e:52:51:0d:df:
43:31:a4:fb:26:44:41:af:4a:2e:81:92:bf:f9:5c:
76:60:65:a0:0c:40:e1:cb:5c:83:4f:92:c2:45:4e:
19:53:b2:8a:27:e8:07:e5:10:b8:65:4a:c3:ae:2d:
fd:d8:6b:76:15:22:82:54:40:32:97:19:5c:ef:c4:
3e:fa:93:81:1f:fb:cf:b9:a1:e4:2a:57:9a:65:16:
d7:c9:9d:cb:da:1e:62:76:9a:3e:6c:18:bd:a9:7b:
a5:52:5c:19:eb:a2:b4:ff:fe:4e:94:70:ff:52:15:
d9:11:f7:a9:be:b7:22:e2:33:f7:94:3b:cf:9e:6e:
71:62:34:37:07:cb:b0:d6:f2:ec:1f:6e:76:cf:7e:
ce:c3:c8:52:c8:f0:de:d5:1d:7d:8a:89:b6:d2:65:
bd:54:56:5f:e6:61:6d:d0:23:ed:c9:00:fb:6d:31:
67:5f:a7:b4:50:40:22:02:d1:22:ba:3b:68:70:9f:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:57:68:79:A6:FE:3A:2B:88:39:AC:DA:68:73:55:AC:37:64:F3
X509v3 Authority Key Identifier:
keyid:45:36:39:64:2F:9D:2B:46:72:34:3A:F8:D8:2F:C7:55:47:CD:98:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/1ShXaHmm_joriDms2mhzVaw3ZPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6728ad-9070-4b11-aa98-c2e5fdb925f3/1/RTY5ZC-dK0ZyNDr42C_HVUfNmFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.183.0/24
Signature Algorithm: sha256WithRSAEncryption
82:93:87:e2:92:1a:76:0c:53:fc:0d:9c:37:f1:69:37:7c:08:
8e:d8:33:95:7a:79:48:e1:dd:36:bc:68:23:7b:2c:46:88:17:
75:9a:06:c7:8f:d0:b4:2f:41:1c:f7:a9:08:12:69:b6:50:c0:
3d:06:17:44:f1:04:35:80:0d:e8:15:89:e0:66:63:e9:7e:49:
1a:65:5f:35:db:fa:55:57:7e:60:2e:cf:4f:5b:ed:96:7a:0d:
2f:19:17:fe:a3:0e:8a:0e:5b:23:6a:a5:80:a9:6b:d0:1a:11:
ad:05:31:00:70:f4:c5:ab:f4:ab:2c:ee:e2:1e:7b:3e:63:d2:
f9:88:3b:2a:71:8a:8b:f7:66:45:24:b7:bb:d5:b3:95:bf:76:
e8:f3:d1:05:da:2b:66:69:63:f3:16:07:b0:83:b0:5f:ec:b3:
7f:eb:e6:68:f8:06:57:f7:32:22:47:4b:8c:8d:b9:93:ea:c2:
22:50:c8:77:e1:7e:ce:b8:71:e2:7a:00:df:e1:b6:51:d8:4e:
fc:39:b3:a3:47:4f:1e:e4:dd:b7:23:4b:c8:64:6d:0b:7e:07:
48:29:e2:e4:9b:a6:94:3f:7c:80:18:8c:ae:84:76:95:18:6b:
81:22:b8:52:63:3d:5b:e9:09:af:76:12:79:d8:64:83:7f:2a:
42:ab:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:27:55 2024 by rpki-client on console-ams.rpki-client.org