Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WRfjkJ18urtYuLJcTqaop_3X6p8.roa
File: WRfjkJ18urtYuLJcTqaop_3X6p8.roa (raw, json)
Hash identifier: AQgObK3KzHN70yx/wF1tE++EZ/oqe5x5PGoGyI+XekE=
Subject key identifier: 59:17:E3:90:9D:7C:BA:BB:58:B8:B2:5C:4E:A6:A8:A7:FD:D7:EA:9F
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 018CC493561C8D9D88888B1B3A9499FBBF4A
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WRfjkJ18urtYuLJcTqaop_3X6p8.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.36.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:56:1c:8d:9d:88:88:8b:1b:3a:94:99:fb:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5917e3909d7cbabb58b8b25c4ea6a8a7fdd7ea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:5b:8a:c9:5c:ab:58:88:ea:da:b8:30:2a:
4d:64:7c:89:39:cd:59:e0:93:c8:de:b6:03:a9:d6:
98:12:ec:a2:05:10:80:31:b3:1b:3a:1a:fe:b6:f7:
f0:ce:45:7a:27:6b:3e:92:c7:48:2f:5d:bd:ee:63:
c1:55:81:5a:10:19:b7:80:b4:92:15:34:36:b9:18:
02:32:57:33:02:c2:54:05:da:19:4b:3c:95:4f:8f:
f5:cc:99:5d:48:e1:39:41:49:d0:9f:1a:87:83:05:
5a:e2:c0:c6:17:e8:fb:b0:7c:a3:32:e7:13:56:1b:
6d:98:d2:81:19:0a:e2:cd:a7:80:cf:88:43:94:12:
38:a4:bf:82:c6:f3:3e:08:ba:49:1f:35:93:85:e8:
eb:0a:75:3d:a4:ee:4b:17:4b:17:ab:0a:31:9e:92:
2a:65:11:33:72:6e:29:ab:5a:ae:34:49:6a:1d:aa:
10:6e:71:00:46:07:56:93:49:97:ad:83:f7:58:68:
95:56:3a:45:c8:f9:50:d0:c7:0a:e1:cd:53:94:4b:
01:c7:bc:05:e9:2d:2d:cd:42:6b:14:76:21:2a:76:
a7:71:6c:e6:9a:ae:9c:6f:35:dd:bb:35:c2:5f:5a:
ae:0d:24:ef:d5:a0:03:64:31:a7:8c:4a:4f:52:89:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:E3:90:9D:7C:BA:BB:58:B8:B2:5C:4E:A6:A8:A7:FD:D7:EA:9F
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/WRfjkJ18urtYuLJcTqaop_3X6p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
22:04:d4:86:a1:bb:4c:b4:0f:65:9d:c3:cb:d1:50:5f:1c:b2:
2b:c1:a3:0d:3a:3d:97:68:1d:bd:27:01:9a:19:85:3b:61:0a:
00:54:3a:af:d3:cf:3f:48:af:8e:6d:24:38:b7:0e:ed:4e:51:
43:76:50:10:ea:65:5a:91:a0:30:ee:78:26:bc:28:cc:6f:44:
20:08:b8:6e:5b:9a:49:6c:68:3f:8f:a2:27:cb:7f:ff:f6:5e:
8d:44:3a:56:a0:33:4a:0a:96:fa:ba:7f:42:ac:f6:e0:bf:0d:
d5:c2:f2:2d:4b:db:51:97:3b:ae:e7:a5:fb:61:02:ec:21:6d:
f8:4b:6f:ed:52:66:75:4b:a5:42:1f:32:b8:01:82:de:34:6b:
3f:80:31:c8:3f:8c:b7:62:25:51:11:5a:8a:da:13:78:88:eb:
06:b0:55:73:37:ea:6d:e1:96:50:1c:4e:51:66:ed:e8:29:ef:
5f:b2:f9:09:de:b7:6c:df:bf:3b:ff:5a:ee:c6:fb:53:c5:d8:
2b:cf:99:39:32:f9:bf:3e:a0:6a:34:34:32:e8:65:14:69:eb:
5e:c6:57:45:45:db:fc:c5:f1:ff:fc:b4:29:ad:ef:78:39:77:
66:55:d4:86:56:30:4d:7a:42:cc:b8:ed:e9:00:dc:c1:56:1b:
07:70:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:54:52 2024 by rpki-client on console-fra.rpki-client.org