Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/pchOL7l8YkCM2C3mbj4iCdMUgnA.roa
File: pchOL7l8YkCM2C3mbj4iCdMUgnA.roa (raw, json)
Hash identifier: bDY2P1GogtehPUfkqiwWfTYy2mJjPvJHqEM3LftlPAc=
Subject key identifier: A5:C8:4E:2F:B9:7C:62:40:8C:D8:2D:E6:6E:3E:22:09:D3:14:82:70
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 018CC9BC31CFE5C0F70FE00BE4E28E53AC89
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/pchOL7l8YkCM2C3mbj4iCdMUgnA.roa
Signing time: Tue 02 Jan 2024 10:33:23 +0000
ROA not before: Tue 02 Jan 2024 10:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48803
IP address blocks: 185.60.128.0/22 maxlen: 22
88.206.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:31:cf:e5:c0:f7:0f:e0:0b:e4:e2:8e:53:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5c84e2fb97c62408cd82de66e3e2209d3148270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:f9:fc:77:e0:60:17:f5:57:cd:31:37:a9:
8b:05:60:cc:6c:76:a3:3b:3b:36:5a:f9:0f:ac:d5:
e7:de:bf:b4:50:23:b2:bb:84:cf:75:4e:ee:ff:58:
df:ea:00:9d:80:51:51:6d:52:83:af:b6:6f:8d:06:
5d:7f:5b:35:39:3b:54:3d:4b:0f:bf:a4:5f:09:35:
22:c7:67:b3:52:15:57:19:53:99:62:f4:55:59:1d:
dc:7e:72:15:04:3c:1a:56:c3:08:11:90:eb:c7:0d:
ed:60:cb:f6:e4:df:5a:62:7f:d8:4f:06:2d:ad:06:
1c:4b:9b:58:48:40:46:11:cf:69:36:9f:5c:98:c0:
26:1f:48:b5:d6:14:96:1f:58:89:df:4b:bf:ef:6d:
d9:e6:f3:58:3b:c3:e9:fd:e8:86:c4:a1:0c:3d:76:
ca:d5:be:a4:6b:db:ae:cd:38:3f:77:46:4a:42:4d:
d2:f2:c7:3d:f2:06:a1:f6:93:1e:81:ef:3f:b3:b2:
7d:4d:93:af:e7:ea:bf:6f:42:1a:8d:7a:f1:66:90:
db:ed:20:48:ab:d3:fa:1e:58:9a:45:37:59:87:6e:
77:60:33:58:e7:03:de:00:c7:4c:2d:fc:cf:44:9c:
47:ee:b2:fd:60:86:92:7e:00:01:af:d9:a2:4b:76:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:4E:2F:B9:7C:62:40:8C:D8:2D:E6:6E:3E:22:09:D3:14:82:70
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/pchOL7l8YkCM2C3mbj4iCdMUgnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.206.128.0/17
185.60.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:4c:02:36:17:f0:af:40:50:25:7d:b9:de:aa:15:a7:06:0a:
4b:26:66:53:60:13:43:ba:c5:5b:38:71:df:56:37:8b:45:dc:
90:d0:4c:52:dc:84:ab:c4:20:50:9f:e4:09:d7:d5:cf:8b:93:
00:f6:05:3c:c9:a1:11:d1:61:fa:75:6d:09:e2:33:c5:78:b2:
e5:9c:1a:12:6f:11:df:d2:c7:37:f8:17:36:43:63:56:20:95:
66:9b:7f:90:fc:57:e6:cc:54:16:af:f9:d2:7b:8d:a1:59:c2:
ed:31:8b:23:40:cb:e7:a0:ac:78:06:09:91:40:f5:24:97:92:
45:5a:d8:59:e0:85:6e:c2:60:34:4d:60:d4:9c:06:00:10:3c:
bc:cd:ee:56:b4:f4:ce:40:03:82:9c:7d:79:3b:40:cb:55:a0:
78:4f:da:65:4d:3a:2f:5f:0e:86:e1:29:9a:d8:40:d5:01:12:
07:72:9a:43:0c:eb:d0:00:55:be:79:e7:55:49:08:b1:d8:f5:
e8:00:17:a2:49:a3:9c:8f:e0:d1:73:54:5a:97:10:c6:67:67:
15:3c:41:d3:00:bb:d8:f4:d3:4e:47:2e:ae:f4:f4:a6:30:b0:
f0:99:0c:f9:34:0c:82:93:41:bf:69:47:c9:e2:bd:6a:a4:2c:
c8:4f:f3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:37:01 2024 by rpki-client on console-ams.rpki-client.org