Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa
File: 1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa (raw, json)
Hash identifier: wPh78olFSg+DC9182Id/4W5kSmywsh7SfbCleolVrPc=
Subject key identifier: FA:00:B6:63:D2:19:B3:7C:33:20:DA:9A:94:78:26:33:B1:47:8C:B4
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 018CC8DF5B3D4038B940458A0CADBA9FF19D
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa
Signing time: Tue 02 Jan 2024 06:32:10 +0000
ROA not before: Tue 02 Jan 2024 06:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 192.94.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:5b:3d:40:38:b9:40:45:8a:0c:ad:ba:9f:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jan 2 06:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa00b663d219b37c3320da9a94782633b1478cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:4b:8a:69:61:da:54:b9:00:ef:d9:11:d9:
f7:32:9e:95:75:35:8e:1c:9d:60:ec:35:ae:46:0c:
03:a7:1d:8b:f7:d6:11:af:db:71:6a:94:0e:c3:57:
8f:2a:4c:d2:61:44:60:fc:9f:da:41:61:ba:46:58:
a3:e1:33:0a:29:4f:5e:8e:5e:98:fd:c9:5b:23:e7:
66:38:a3:27:59:f2:34:e3:3e:b1:d6:45:a7:a9:14:
29:c0:f4:0f:0f:ea:cd:35:81:28:db:3d:3e:e0:52:
48:a3:41:cf:30:95:5c:9d:3f:c9:43:f2:dc:14:94:
b8:5c:5c:24:15:08:60:51:0f:09:37:57:0c:c1:16:
8d:8e:5d:9f:5c:1d:3c:36:58:fb:09:c2:0c:95:31:
0e:63:48:fc:2b:c4:bd:d9:be:f8:b6:97:e2:37:4b:
33:f4:bb:7e:59:b2:ec:bc:ef:89:15:fd:48:4d:98:
5e:80:e2:96:e1:69:e1:59:c2:47:ff:b8:bf:bf:c4:
54:9b:53:f4:f3:1c:61:ef:58:da:a1:40:47:00:d8:
7a:07:db:88:d2:fa:3d:98:8e:91:46:4a:99:a1:5f:
4b:7a:6a:3e:9a:70:01:1b:ad:b0:ca:82:40:4f:69:
9c:be:d4:a9:d5:37:e6:04:b9:a5:55:e8:65:75:b4:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:B6:63:D2:19:B3:7C:33:20:DA:9A:94:78:26:33:B1:47:8C:B4
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ff:c7:8c:c1:97:fb:d7:cf:63:54:6a:20:c5:fb:55:67:0d:
81:85:56:6b:c0:0a:92:fc:0d:1c:f2:d7:33:5b:63:6a:bb:f5:
c4:a5:83:26:e7:d5:a7:7d:ca:30:d0:b2:3f:98:da:10:67:fc:
eb:9d:52:ec:67:81:9c:c3:c3:0f:b7:02:8c:5f:36:5a:3b:fd:
33:67:69:5e:7d:0c:f3:84:25:a6:ee:b3:54:a3:db:0b:8b:00:
da:f9:35:21:bc:25:5a:35:79:97:b8:5d:06:86:76:79:05:c9:
02:44:0c:11:8b:2d:5f:75:f3:71:f1:50:39:ed:7e:45:62:6f:
e0:18:e1:97:c0:3d:1d:1f:91:4f:c0:14:9c:5e:ec:b6:45:3b:
b4:f2:b0:ec:20:5a:65:07:7d:fd:76:a3:64:95:d5:1f:f3:78:
30:f0:29:ca:78:b1:05:a0:c7:4c:da:45:6c:04:b7:86:af:38:
f6:4e:2b:b7:d2:7d:30:2f:76:a5:32:99:64:a7:f9:fa:e4:05:
ba:da:4e:12:53:fc:9d:9f:16:60:03:be:7c:b6:f2:c2:40:3f:
01:59:db:56:f5:27:30:ec:b3:72:77:15:7e:18:c4:06:7a:22:
f5:a7:f4:e6:92:b9:7c:48:8d:48:eb:de:96:ea:3e:70:dd:5b:
59:c8:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:51:46 2024 by rpki-client on console-ams.rpki-client.org