Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1yZDCczb6CuOQbZ-woeF2d8GLWY.roa
File: 1yZDCczb6CuOQbZ-woeF2d8GLWY.roa (raw, json)
Hash identifier: 5QK+3WnuASgyOuPj/jDRfDN+QgbZtBewwMFGGRrxBx8=
Subject key identifier: D7:26:43:09:CC:DB:E8:2B:8E:41:B6:7E:C2:87:85:D9:DF:06:2D:66
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E102027EF9908E17D19D64A9A68DA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1yZDCczb6CuOQbZ-woeF2d8GLWY.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205553
IP address blocks: 146.185.234.0/24 maxlen: 24
5.188.9.0/24 maxlen: 24
5.188.63.0/24 maxlen: 24
5.188.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:20:27:ef:99:08:e1:7d:19:d6:4a:9a:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7264309ccdbe82b8e41b67ec28785d9df062d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:6d:11:c5:aa:24:18:55:b5:aa:38:83:ad:
94:ec:c4:a1:78:28:03:4f:d3:0a:d3:90:50:f3:f2:
7c:73:9a:e9:1b:36:8a:22:45:05:98:d1:6d:44:30:
d2:e4:d3:bf:5d:c7:af:50:7f:2a:c3:23:e1:dd:4f:
17:ab:95:f0:92:c2:99:0b:6c:0f:44:e6:82:0d:78:
f2:5d:68:91:f1:10:11:46:a5:aa:97:41:dc:c5:f8:
37:88:05:16:ec:b7:4d:b6:0c:5e:0b:70:fd:09:ba:
2c:fa:88:9a:9e:fc:51:99:ba:56:c6:a6:ab:8b:cb:
42:5d:b4:70:ba:3a:2e:48:12:b5:9e:03:da:f5:d6:
df:9f:e0:0b:30:24:0c:55:32:92:05:ae:db:fd:73:
4a:89:35:4a:2f:de:bf:48:b1:78:3a:2f:4d:b9:e6:
b7:fc:3a:15:5d:01:3b:87:22:de:9b:66:56:ec:e5:
0c:da:e9:ed:88:a4:a8:7a:67:72:ad:1f:70:b5:ae:
ba:81:8e:69:3a:72:b4:d0:2d:6c:b9:30:d6:c3:2e:
1c:ae:17:66:38:55:cb:10:5f:96:39:ac:e6:21:5c:
e0:65:0d:c0:83:fa:3f:f9:b4:35:8d:aa:e4:a0:d8:
97:1b:8a:b3:8e:03:08:7e:c4:5e:da:1a:1d:d6:70:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:43:09:CC:DB:E8:2B:8E:41:B6:7E:C2:87:85:D9:DF:06:2D:66
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1yZDCczb6CuOQbZ-woeF2d8GLWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.9.0/24
5.188.63.0/24
5.188.167.0/24
146.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
99:83:8d:8b:7f:0d:5f:30:dc:b6:52:a6:01:d1:ba:c6:86:29:
27:5f:0c:97:22:3a:2a:a0:aa:d8:c7:ba:30:13:d8:a3:a3:0b:
9e:62:41:49:d3:ee:ce:e3:d8:25:4b:3a:25:ff:56:4c:c5:b2:
4c:ae:ed:1d:e7:75:93:dd:f5:91:4e:bd:b1:b0:92:a1:ef:f1:
18:40:01:97:05:92:60:ee:ff:1e:e5:e0:09:9e:0f:51:e0:1a:
93:5b:7a:ef:dc:26:23:4e:65:57:e5:f3:cc:f8:8c:e3:1e:0b:
0f:01:5e:70:66:39:ad:84:04:d5:f5:a7:50:2e:d2:be:7e:e5:
d6:f2:c5:b0:78:57:84:f1:8b:3f:ce:60:24:95:d7:52:01:f9:
e4:cb:e9:cb:08:a7:4f:c4:1e:f8:56:a6:ad:93:e4:00:5f:f6:
64:b6:ca:c5:65:0a:51:2f:e5:98:53:ee:f1:94:dd:18:06:e2:
47:a1:b2:c4:09:f2:69:16:1e:2c:1b:38:cb:2b:83:c8:dc:53:
ca:4c:c8:39:16:83:81:95:d0:19:cc:8b:df:f5:8d:ff:d2:4e:
0d:5d:7c:18:0c:ce:9f:7b:eb:78:0b:b1:ca:03:b8:66:78:5f:
7f:46:4f:a1:cf:ae:d6:8c:8f:e3:2f:fd:c8:50:08:41:6f:ac:
b7:4a:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:14:56 2024 by rpki-client on console-fra.rpki-client.org