Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1qVygAtitY95aH719G64ieGdNyA.roa
File: 1qVygAtitY95aH719G64ieGdNyA.roa (raw, json)
Hash identifier: 6LZ5CHx0PJy9lMXiZuLLnlTysUDPSA83ZKaoPlE6MZE=
Subject key identifier: D6:A5:72:80:0B:62:B5:8F:79:68:7E:F5:F4:6E:B8:89:E1:9D:37:20
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56DFBE88EB4DEF379337F730E1E689A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1qVygAtitY95aH719G64ieGdNyA.roa
Signing time: Mon 01 Jan 2024 14:29:28 +0000
ROA not before: Mon 01 Jan 2024 14:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 5.8.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fb:e8:8e:b4:de:f3:79:33:7f:73:0e:1e:68:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a572800b62b58f79687ef5f46eb889e19d3720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:5c:b7:03:2f:ec:ba:f2:d0:e3:10:ad:88:
ad:ac:c8:72:dd:0a:4d:13:7e:58:af:d5:3e:21:13:
20:ac:72:a6:54:59:be:da:b1:5e:86:5b:32:94:66:
af:5b:60:8c:2a:5d:ac:b8:68:54:db:fb:42:ad:6a:
71:51:12:b8:eb:63:83:14:d2:55:6a:10:18:0f:95:
5b:6c:a0:7d:21:c3:96:9f:bb:ad:5d:c9:5f:a1:f1:
1b:19:d5:34:ee:42:69:d2:e5:db:25:4d:cd:df:94:
fe:bf:d4:ac:c8:7e:bf:16:99:f0:2d:7d:8f:20:54:
e8:b8:b7:c2:d4:97:4e:1b:30:9c:88:cc:56:62:12:
fc:16:76:09:da:a9:82:c8:39:4f:24:f6:28:00:de:
c4:0f:58:3d:37:7b:e6:45:2b:fd:cd:db:f3:55:d4:
4f:84:b1:49:dd:95:be:c5:4f:db:4c:55:e0:91:08:
67:f9:fc:c2:a5:e2:67:87:14:59:26:dc:dd:37:71:
c8:e2:00:40:de:65:a0:c6:ba:7b:b6:4f:f3:52:7e:
85:b2:72:ea:2f:27:fc:d5:c4:44:a8:a8:fb:93:bb:
86:58:35:6c:38:d8:ea:5f:59:af:d9:4a:16:8a:bb:
ab:ce:1f:fd:20:e7:bf:9e:03:1d:19:3f:84:f5:72:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:72:80:0B:62:B5:8F:79:68:7E:F5:F4:6E:B8:89:E1:9D:37:20
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1qVygAtitY95aH719G64ieGdNyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e3:0f:f2:90:ea:cf:c5:c1:cf:2c:36:1b:f5:bd:4f:09:13:
f0:71:e0:49:7e:d6:50:59:8b:9b:58:8d:1b:81:3b:6c:15:27:
08:ec:a9:8a:06:45:26:c1:95:07:b9:d6:0b:75:86:b1:1b:7c:
06:d0:40:d3:bf:58:44:ee:6e:26:54:e3:dd:99:05:d3:3c:e7:
a5:9b:95:db:7f:a6:42:6e:87:b0:2d:88:cb:94:9d:d4:a6:a1:
08:7c:fc:d7:1a:48:0a:60:9b:39:d3:fb:4b:31:77:3c:fd:86:
13:d9:10:c3:3c:05:21:d2:55:90:58:f8:2d:b1:d0:1b:06:e7:
f3:d3:b6:86:eb:32:80:be:dc:bb:09:ff:a0:be:f5:62:94:cc:
37:35:2f:33:17:ad:23:1a:f8:75:93:03:e9:c1:bf:e0:e6:7e:
23:01:5e:3e:15:fc:cd:8a:a8:90:2c:08:8e:a9:34:4f:f0:1a:
44:c6:7d:f0:e5:2a:b4:47:b4:50:df:15:40:15:87:35:9c:1a:
5f:28:f1:16:a7:58:5a:10:df:1d:4e:87:f5:b2:85:00:84:5b:
0a:d7:50:72:e8:1a:ba:d3:c8:50:e3:71:b3:6f:f5:21:1e:81:
ee:4b:af:8a:f4:0d:a0:41:12:f0:34:ac:ba:21:ff:38:3e:22:
30:9f:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:36:58 2024 by rpki-client on console-ams.rpki-client.org