Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/E8PGgVAvoeXlBStb766fh9328ic.roa
File: E8PGgVAvoeXlBStb766fh9328ic.roa (raw, json)
Hash identifier: BALNFKsIlbMeHuf6nFJYJd/w9tx1+ycIiIhf7mh+fVo=
Subject key identifier: 13:C3:C6:81:50:2F:A1:E5:E5:05:2B:5B:EF:AE:9F:87:DD:F6:F2:27
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 018CC8DEE11AD1B262FBF3F41352E8397033
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/E8PGgVAvoeXlBStb766fh9328ic.roa
Signing time: Tue 02 Jan 2024 06:31:39 +0000
ROA not before: Tue 02 Jan 2024 06:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 195.248.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e1:1a:d1:b2:62:fb:f3:f4:13:52:e8:39:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jan 2 06:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c3c681502fa1e5e5052b5befae9f87ddf6f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:67:9e:61:df:f7:ef:06:2b:75:f3:fd:6a:
bf:8d:27:36:29:ef:c9:d2:1d:6f:de:ce:46:c8:e1:
85:61:28:2b:4a:38:a6:43:a5:fe:69:08:bc:de:94:
61:10:a9:44:ab:dd:5f:54:d6:2d:2e:8d:df:9c:4f:
7f:a9:c5:92:69:47:af:40:c8:14:e3:91:32:d3:0f:
c4:cc:00:95:75:83:dc:4a:b0:bb:20:f1:72:8d:3e:
cc:aa:0b:c6:4a:e4:8f:34:10:b5:c7:23:2a:91:dc:
8e:a2:9d:3e:f4:b3:7f:66:50:81:93:ed:55:e2:e9:
83:4c:66:0e:18:d0:ec:59:40:d5:09:14:59:cc:f4:
ad:98:05:fb:bd:0d:6f:3b:d2:a7:fa:6c:3a:a8:88:
0e:42:d4:82:47:90:f7:99:51:d6:95:68:4f:9d:f8:
63:f3:1f:c8:9d:7f:bb:69:53:4c:40:1b:f8:04:7d:
0d:d0:36:14:b3:f4:94:6e:32:6b:a6:30:34:0e:92:
a8:5e:51:d7:73:47:0f:00:9a:65:5e:10:e3:f3:c5:
6e:19:99:19:3e:a9:be:af:77:dc:6c:e7:e8:5e:f0:
07:85:c9:0e:2d:16:1d:13:42:36:a8:43:e2:8c:c3:
96:1e:c7:cc:a8:7c:a6:6f:c3:ab:10:1d:bb:3e:06:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:C6:81:50:2F:A1:E5:E5:05:2B:5B:EF:AE:9F:87:DD:F6:F2:27
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/E8PGgVAvoeXlBStb766fh9328ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.92.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5b:ec:27:15:db:fc:4a:a7:9c:2a:4b:52:05:ef:96:b6:f1:
81:22:81:65:e1:f1:fc:4f:92:54:9a:35:4a:13:a0:40:82:84:
6a:0d:88:e9:f4:d1:96:37:75:9a:73:c0:7a:32:ca:cb:51:d0:
3b:09:af:77:83:46:76:12:25:61:ce:3d:65:28:82:88:ba:18:
12:c9:48:e2:71:28:cf:d2:b7:0c:d6:8a:8a:4c:54:45:2f:97:
5c:51:e6:1b:e6:04:52:77:b2:25:9a:e1:19:e7:60:a5:8d:32:
1a:54:e2:45:e9:46:24:89:2b:13:f2:48:63:79:f2:45:8e:0c:
82:b8:9e:9f:ea:ec:09:68:da:70:87:75:29:dc:44:f5:9e:a1:
ba:9e:33:53:9e:6a:25:bf:0b:be:bf:6d:35:e9:14:a7:1e:45:
67:c9:1f:f0:f1:27:f4:7f:d3:77:dd:1c:12:7f:90:1c:57:c3:
38:54:7c:86:de:c5:2a:4d:a9:88:52:0c:57:00:fe:1d:a6:40:
3c:dc:55:2f:3d:7f:09:27:ee:1e:99:a8:b6:14:60:ed:af:67:
fa:51:32:8f:f9:22:c1:96:8c:6b:ad:64:83:39:17:d5:4d:52:
b2:69:33:49:93:f4:55:ca:65:8b:1b:05:ce:5f:00:27:d8:df:
d9:f4:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:20:47 2024 by rpki-client on console-ams.rpki-client.org