Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/h7RxkOMwq_fWUiZW5WGgNx5N04A.roa
File: h7RxkOMwq_fWUiZW5WGgNx5N04A.roa (raw, json)
Hash identifier: j1IEOjvf6OHvzOrFK5avRpRY9mPcQFMoDj0YKOd4WKc=
Subject key identifier: 87:B4:71:90:E3:30:AB:F7:D6:52:26:56:E5:61:A0:37:1E:4D:D3:80
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BBBFADBC8B8A6CC2D70856624D590
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/h7RxkOMwq_fWUiZW5WGgNx5N04A.roa
Signing time: Tue 02 Jan 2024 12:35:12 +0000
ROA not before: Tue 02 Jan 2024 12:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57966
IP address blocks: 206.252.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:bb:fa:db:c8:b8:a6:cc:2d:70:85:66:24:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b47190e330abf7d6522656e561a0371e4dd380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:a4:93:93:a4:07:01:f9:28:f0:57:1b:e6:
7d:74:d4:1d:70:e6:5a:2b:c2:27:fa:d4:34:03:97:
bb:b5:06:62:7d:d5:a3:59:e4:10:61:8a:bf:39:8f:
dc:2c:63:99:cb:70:76:90:38:b2:82:e9:c3:8e:fd:
01:57:3c:e5:7b:9d:c7:b2:e5:8c:d8:b0:b0:1d:44:
35:e8:ac:9a:42:74:e5:fb:6e:28:ef:d9:84:63:4a:
db:c7:a4:5d:d5:73:5f:5b:10:28:00:3b:ac:92:e0:
e1:95:f9:a0:80:0f:bb:48:07:45:39:52:5b:94:d9:
04:17:51:b3:73:57:50:7a:05:7c:ea:4f:b9:f1:96:
9f:80:f5:15:b8:8c:d4:6b:92:b2:53:8f:2e:ba:6a:
f2:96:68:77:8b:59:a3:19:17:b5:d3:19:66:c0:4d:
fe:26:14:e9:9e:f3:1f:18:44:0a:e0:f1:c8:30:b4:
ce:e8:fb:8f:5f:cb:c1:47:e4:92:29:f5:02:cc:4c:
95:71:ea:2d:ce:52:8d:9e:89:e6:5b:65:0c:01:3e:
6a:2b:e7:5f:1a:11:f0:14:d8:05:b2:60:d6:c0:30:
21:08:e4:4b:6f:0c:6f:2a:77:fb:14:cd:97:4a:a8:
17:0d:30:82:f3:2f:7f:0d:34:8e:d1:dc:eb:65:70:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:71:90:E3:30:AB:F7:D6:52:26:56:E5:61:A0:37:1E:4D:D3:80
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/h7RxkOMwq_fWUiZW5WGgNx5N04A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.252.231.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8b:bf:95:52:12:0e:61:ba:5c:b8:b1:88:7c:e4:ac:57:ba:
19:af:c0:23:87:ed:55:74:7a:e5:83:82:7b:20:00:99:f2:38:
2c:e6:6a:dd:ae:f1:a9:8c:3c:53:75:30:8d:22:ce:6d:d4:1c:
45:4f:f1:d7:b2:3b:4a:e8:20:f9:a0:61:4e:b9:15:02:09:ca:
82:22:55:61:24:14:fa:6f:e1:2f:25:99:ec:8b:98:10:87:4b:
47:d2:85:4d:3b:b7:93:1a:90:89:be:03:99:17:0b:bc:10:8d:
a9:fb:ac:d0:31:5d:7a:30:a9:d9:6c:17:e5:85:68:ac:76:8e:
f2:5d:e3:12:99:c8:04:d3:73:cc:63:55:62:22:07:46:e2:55:
26:3c:5a:b5:ea:f8:98:b0:ac:7e:ac:2c:ba:57:e4:74:36:48:
a9:5b:62:30:bf:65:6d:c5:f3:5f:63:c4:45:0b:7c:10:4d:4f:
09:e5:91:66:ae:e9:71:2a:82:f6:01:d0:5c:ac:e3:39:0e:cb:
23:cb:0f:f9:cd:74:f4:b5:36:7f:85:40:8b:53:21:bc:e8:d4:
56:a9:3e:d3:c7:4e:cb:34:0b:0f:6b:32:66:46:25:56:ad:db:
91:74:67:c6:e2:2d:69:ea:65:9c:71:bd:45:71:46:33:2d:f5:
14:77:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:57:00 2024 by rpki-client on console-ams.rpki-client.org