Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/_at1xQM26ke28M1WupcVfQQVSNE.roa
File: _at1xQM26ke28M1WupcVfQQVSNE.roa (raw, json)
Hash identifier: /LBuvMc86YTjqEUSN0YP4l69edq/+WF0AwVrnmVpWYg=
Subject key identifier: FD:AB:75:C5:03:36:EA:47:B6:F0:CD:56:BA:97:15:7D:04:15:48:D1
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 018FA67AE366B2BD1B706138CF7DED44FCD0
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/_at1xQM26ke28M1WupcVfQQVSNE.roa
Signing time: Thu 23 May 2024 17:23:42 +0000
ROA not before: Thu 23 May 2024 17:23:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47444
IP address blocks: 86.117.140.0/23 maxlen: 23
86.117.140.0/24 maxlen: 24
86.117.141.0/24 maxlen: 24
160.62.12.0/24 maxlen: 24
160.62.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:7a:e3:66:b2:bd:1b:70:61:38:cf:7d:ed:44:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: May 23 17:23:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdab75c50336ea47b6f0cd56ba97157d041548d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:78:f3:e8:47:0a:05:3d:84:92:70:0c:fb:
0c:51:25:bc:29:ad:74:60:7e:93:81:cb:5b:4c:12:
44:70:ed:53:a5:47:8a:05:56:45:c6:56:c7:42:0d:
f0:54:e1:09:8b:18:fa:e3:46:1a:02:97:62:ad:21:
2f:ab:9c:87:e8:d9:7f:8c:c6:bd:c8:ad:dd:13:51:
db:b1:bb:a1:04:c6:e5:ea:98:6c:47:09:df:55:8e:
31:8a:8a:8e:62:56:71:4f:5b:4c:bc:73:4d:cc:7d:
a2:a0:23:e6:b0:44:fa:92:9b:9c:85:ad:fa:2c:9a:
48:9a:5f:c3:a8:d6:63:5e:9d:1c:2a:a4:a9:ce:ba:
62:33:fa:ee:dc:eb:a7:74:e7:9a:c2:af:45:ba:cb:
05:e6:f8:fe:13:06:0c:64:63:6c:db:ce:d7:48:ac:
34:d1:7a:41:a0:1b:6c:4b:f7:4f:4b:ee:b5:45:cf:
38:a8:8e:45:e4:cd:5c:36:e9:b0:91:86:69:01:51:
16:4f:5d:60:bf:0c:05:95:bc:2c:16:2b:76:10:c5:
b8:ac:0f:c6:56:3e:88:bf:91:68:a2:86:91:ed:d2:
68:ac:6e:30:01:e2:26:ca:cc:54:0f:b0:cd:13:3f:
f7:21:ff:ed:0c:f8:1d:07:c8:56:18:40:e3:67:df:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AB:75:C5:03:36:EA:47:B6:F0:CD:56:BA:97:15:7D:04:15:48:D1
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/_at1xQM26ke28M1WupcVfQQVSNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.140.0/23
160.62.12.0/23
Signature Algorithm: sha256WithRSAEncryption
43:10:9b:ca:cb:26:53:fd:39:49:0f:e4:15:c4:c1:95:a9:b5:
3f:8f:c4:a1:37:0f:80:be:7b:6b:01:7c:66:7e:f7:45:ae:94:
9a:3a:35:ab:6a:6f:cf:93:c2:6e:72:36:95:df:d5:bd:99:fe:
65:04:54:fa:33:c8:85:cb:43:53:d2:1e:28:2e:00:07:5e:51:
53:3e:49:31:c7:f0:32:f7:6e:0d:3f:06:a7:00:13:e0:9b:e8:
c4:92:a8:8c:84:c2:f8:64:0a:ed:d6:f1:26:32:47:95:c1:21:
e0:87:a6:55:54:63:a6:51:64:25:1d:e0:54:fe:de:31:62:f9:
51:bc:09:8e:d3:3f:38:b7:90:2f:b8:e7:63:67:1d:e5:d6:3b:
9e:74:8e:2a:4b:92:10:8a:d4:86:aa:73:f7:59:3a:42:59:e8:
44:2d:9a:4e:d6:c7:26:77:17:aa:ef:50:a0:8f:b3:84:8c:73:
ad:ed:56:65:40:5a:3d:70:ed:b4:00:88:de:ca:5b:2e:29:c0:
4f:2a:73:c6:fa:d0:e7:c3:15:24:ed:9b:65:17:c7:0c:93:b7:
23:f6:5d:6b:e8:8d:a2:54:6d:3f:0b:97:f1:8d:da:a2:6b:00:
4a:a4:d4:27:77:a3:24:9f:c0:de:56:dd:71:f9:06:79:e9:dd:
74:58:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:33:39 2024 by rpki-client on console-ams.rpki-client.org