Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/skd5jxFqrqwNH5ZeqrDR5_aWntI.roa
File: skd5jxFqrqwNH5ZeqrDR5_aWntI.roa (raw, json)
Hash identifier: h+IU5wm5UYSRu0u5DTm9uoDMnVKwHRM9CGej9ZyhB+c=
Subject key identifier: B2:47:79:8F:11:6A:AE:AC:0D:1F:96:5E:AA:B0:D1:E7:F6:96:9E:D2
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 018CC64B0DE0641AD3CE3827BC1FB5218D17
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/skd5jxFqrqwNH5ZeqrDR5_aWntI.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49560
IP address blocks: 92.51.56.0/21 maxlen: 21
94.103.0.0/22 maxlen: 22
185.50.4.0/22 maxlen: 22
213.5.20.0/22 maxlen: 22
84.234.48.0/20 maxlen: 20
91.238.12.0/22 maxlen: 22
2a01:a320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0d:e0:64:1a:d3:ce:38:27:bc:1f:b5:21:8d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b247798f116aaeac0d1f965eaab0d1e7f6969ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:a9:51:c8:3f:55:2a:d3:13:8d:cc:e6:f4:
e6:7a:56:c1:5e:38:f8:9e:f5:ac:05:21:62:b7:b4:
d3:14:f8:60:c7:2e:bc:12:bc:44:21:eb:ad:0d:bb:
4e:b5:dd:17:69:ca:fd:c9:19:27:34:8d:b7:81:a1:
a0:50:df:c0:fd:b7:35:55:7e:e3:c9:46:fc:ad:21:
5e:7d:d5:a3:b7:8f:41:ba:5d:dd:cf:c0:e3:e9:db:
6f:c1:ef:8a:54:9f:54:c9:d5:b5:bc:54:ac:d2:2c:
02:68:56:c1:38:2e:a7:6d:2f:3d:20:06:67:66:f2:
18:e1:b8:d5:65:24:9e:bd:66:5b:6e:80:1c:98:2a:
b8:84:a6:fb:04:34:7f:9e:7c:db:2b:ea:ea:ae:1e:
32:a5:ef:52:84:01:22:12:ed:ea:9a:af:ae:de:4e:
e2:96:54:19:22:61:ae:77:62:cb:78:c0:7d:75:9e:
12:9c:61:69:ca:d3:ca:40:68:0a:68:17:e3:67:3c:
94:0d:20:1a:12:d1:24:56:00:7d:4f:e2:99:7f:02:
9d:af:fd:6d:b4:95:24:e6:bd:6b:bf:5d:0e:e6:8b:
0c:1e:02:7f:cd:ce:2f:e2:36:37:99:88:48:a5:63:
82:83:b5:de:68:b7:52:61:84:cb:e8:8b:85:76:63:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:79:8F:11:6A:AE:AC:0D:1F:96:5E:AA:B0:D1:E7:F6:96:9E:D2
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/skd5jxFqrqwNH5ZeqrDR5_aWntI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.48.0/20
91.238.12.0/22
92.51.56.0/21
94.103.0.0/22
185.50.4.0/22
213.5.20.0/22
IPv6:
2a01:a320::/32
Signature Algorithm: sha256WithRSAEncryption
06:9f:6e:af:dd:c7:7e:ac:9a:0e:88:40:d8:70:16:81:5f:75:
04:2a:8a:64:a1:63:c2:01:e0:ac:23:d3:c5:eb:74:3a:ff:57:
d5:3c:4c:6b:30:8d:84:f2:39:99:c6:12:8d:87:06:0a:89:58:
24:19:18:31:b1:4c:f3:bf:ad:fe:13:4f:41:d8:73:74:12:eb:
fa:ab:1c:b2:d3:64:dc:81:54:a8:84:59:0e:ce:63:00:cc:a0:
bf:69:24:b7:8b:bf:df:28:90:a7:c2:99:76:b2:5e:4a:17:6b:
08:61:f4:90:f0:b0:c0:84:26:e8:17:cd:3d:8e:ea:13:ac:58:
a8:86:76:fd:64:d2:58:40:2d:f4:29:f7:73:f7:80:4b:63:ec:
6e:1b:37:d2:6b:60:c3:0c:1a:a7:ca:2b:ee:c3:29:41:fd:05:
c9:64:b7:a4:3a:16:4e:cc:e4:dd:50:9c:4d:7e:46:a8:de:a7:
1e:0d:6d:aa:f9:93:84:0e:68:19:8f:6e:f7:d7:bf:53:38:4d:
ad:64:d3:ef:96:2d:d4:32:2a:4a:0d:67:e3:4f:d2:af:b1:67:
b6:87:8c:cd:92:d7:19:d8:e8:96:15:cf:06:52:37:a4:a5:83:
c4:76:6e:b3:64:a6:18:52:ab:a3:df:fc:a2:3b:db:5d:ec:71:
9d:fb:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:12:05 2024 by rpki-client on console-ams.rpki-client.org