Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ssXsmg0FRqriCEyhlZz4g0dEwNM.roa
File: ssXsmg0FRqriCEyhlZz4g0dEwNM.roa (raw, json)
Hash identifier: OwWEPi1aqola22Nw81lXiOpoKP8Oabru4A1aOn20CFU=
Subject key identifier: B2:C5:EC:9A:0D:05:46:AA:E2:08:4C:A1:95:9C:F8:83:47:44:C0:D3
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018CC26D228DDD3A7BC0D6559571ADD9FB0D
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ssXsmg0FRqriCEyhlZz4g0dEwNM.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48940
IP address blocks: 77.232.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:8d:dd:3a:7b:c0:d6:55:95:71:ad:d9:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c5ec9a0d0546aae2084ca1959cf8834744c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:65:11:d6:36:e3:5d:3e:2b:5a:30:da:f8:
38:e9:14:19:fc:3a:ad:95:79:47:ae:ca:0b:ac:07:
9b:b3:36:68:c9:e2:38:a1:93:d9:77:76:ae:87:c4:
ff:66:d8:b5:c4:41:04:f0:19:9c:dc:1b:43:1b:85:
99:75:65:47:ee:cd:3a:03:10:f8:4b:d2:df:22:9c:
61:e0:8b:3d:a6:c1:46:17:11:56:a4:90:14:70:9a:
ac:d5:ec:8b:e1:f6:d4:f7:9f:f4:25:8d:41:8c:c2:
14:11:60:48:08:f5:36:88:7a:f4:1e:d9:d5:71:5a:
8c:30:17:b7:cf:5c:06:2b:ef:42:d0:ec:06:bd:6f:
3a:fc:66:4c:4d:33:46:91:ae:14:c8:4d:57:a7:63:
aa:b1:3b:c1:ee:fc:4f:c3:2e:fb:a2:54:5c:42:04:
4b:3a:4a:f4:c0:04:c1:95:09:b6:58:54:9c:77:69:
4e:34:0f:72:f6:f8:a6:ff:c9:d0:d4:98:85:1c:64:
df:bb:7d:0b:d0:4c:38:12:be:9b:5b:6e:ad:4a:b9:
cd:23:17:a4:6f:e9:18:99:91:b9:97:91:a8:82:6c:
0d:8e:0b:e1:46:bb:0d:6c:e6:37:34:91:a8:93:bb:
4e:70:67:50:45:c4:79:00:7a:d9:77:77:63:e3:b1:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:EC:9A:0D:05:46:AA:E2:08:4C:A1:95:9C:F8:83:47:44:C0:D3
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ssXsmg0FRqriCEyhlZz4g0dEwNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:11:ea:53:e5:58:0f:65:b7:45:2a:17:77:bf:eb:e4:b6:d3:
12:d4:c2:6e:2c:34:94:7e:ba:c5:ec:22:34:a3:04:2b:e5:8e:
f1:a1:94:b2:57:9f:12:d7:75:22:6c:6c:a5:f9:8e:c6:39:ff:
81:68:b3:01:10:f6:6b:8e:bb:71:0b:c3:61:31:ef:df:a1:42:
72:4a:8f:fd:24:57:c8:65:b9:55:09:8f:f6:3a:c0:45:87:43:
67:5e:d2:17:95:f1:f0:2c:ea:fc:9c:d1:58:8b:d9:1c:b2:bc:
6d:b9:12:7b:2f:6c:1f:ae:ba:ad:08:f7:5a:52:71:c3:1e:d7:
b9:c7:f7:03:78:b1:ea:7b:c2:19:be:3a:81:fc:1c:2b:c5:e1:
4e:9d:82:73:f7:8f:39:57:c4:75:a0:92:11:bd:0f:a3:fa:a3:
0f:58:21:d1:d0:69:0e:68:aa:87:a1:7b:31:1a:8d:eb:0f:ad:
1e:a7:4e:eb:78:ad:82:44:b8:c2:b7:8a:b6:ce:30:c2:74:6c:
b6:01:34:76:f6:1b:4b:e8:54:2d:2a:a7:a0:93:b6:60:7a:dc:
9b:16:c0:fe:65:54:aa:74:69:e3:28:54:de:23:bf:c4:2b:49:
da:6d:05:fa:d4:8e:30:ac:31:aa:1f:03:f7:53:e0:b1:1b:bf:
91:23:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:51:52 2024 by rpki-client on console-ams.rpki-client.org