Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/_CvwUjar5ZUxLAy3roKYymksehI.roa
File: _CvwUjar5ZUxLAy3roKYymksehI.roa (raw, json)
Hash identifier: iluO24vRx3sclOz4E6pArVGby7W3zCK/ocYiv7ONNfM=
Subject key identifier: FC:2B:F0:52:36:AB:E5:95:31:2C:0C:B7:AE:82:98:CA:69:2C:7A:12
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 018CC2DB642BF09F88CE579C35B8C4C126E7
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/_CvwUjar5ZUxLAy3roKYymksehI.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38942
IP address blocks: 87.239.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:2b:f0:9f:88:ce:57:9c:35:b8:c4:c1:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc2bf05236abe595312c0cb7ae8298ca692c7a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:3b:ff:7e:72:32:e5:a1:0a:13:be:f8:d3:
66:86:b8:0d:67:3a:92:f4:e4:06:54:97:e2:81:6d:
ac:2a:10:03:8e:52:aa:c2:17:be:c4:3a:a5:c4:76:
fc:84:1d:64:48:13:f7:88:25:83:4b:7e:2d:87:ef:
28:19:02:ae:5d:ac:c1:19:f4:2c:11:a4:ec:1c:bf:
a4:cc:be:12:c3:f8:40:18:ab:40:29:b8:47:71:78:
fa:97:28:13:11:37:84:90:84:1a:87:44:7b:a8:e5:
c2:e4:e7:94:5e:59:09:d7:de:01:d3:5f:f7:07:4d:
ee:6b:ec:eb:2b:31:9a:5a:9a:ee:62:1b:db:62:56:
2a:76:2c:bd:0f:82:5c:09:d1:e1:48:0e:f4:66:73:
6a:7e:23:41:8f:60:38:cb:2f:3b:4d:4a:27:38:0b:
59:72:fa:56:39:52:af:c7:6c:86:06:87:7b:8c:da:
bd:9d:00:fe:bf:9d:f7:8a:5b:01:e4:f9:ed:b6:68:
75:56:c0:fe:7b:5c:99:db:54:1e:a9:5e:a9:e5:f2:
ad:5b:58:c1:4d:05:f9:2b:96:2d:4b:98:b1:86:a2:
29:a1:88:cc:39:66:fa:10:4b:1c:81:4e:0f:61:13:
01:be:dd:d7:7c:9b:d7:2c:05:b7:9a:11:b3:fc:c1:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:F0:52:36:AB:E5:95:31:2C:0C:B7:AE:82:98:CA:69:2C:7A:12
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/_CvwUjar5ZUxLAy3roKYymksehI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.40.0/21
Signature Algorithm: sha256WithRSAEncryption
17:88:b7:02:cd:5e:b3:41:f7:79:e7:08:ad:ca:83:db:0c:68:
c6:49:fc:b0:57:5a:60:34:15:85:ee:1f:1c:70:0a:50:00:35:
d7:fb:c9:3d:1e:b4:ab:c1:b3:e8:62:8f:4f:9a:68:06:ac:bd:
81:44:89:cb:ee:97:dd:55:64:f0:fd:85:8f:8f:2a:98:9a:9c:
da:64:3f:d7:c5:65:75:77:93:42:74:37:96:47:8c:87:36:3c:
a9:6a:7b:93:c2:b8:7a:87:a8:0a:6d:90:75:54:fe:a3:59:19:
ad:47:5e:7e:f5:22:b2:cc:20:86:8a:e6:44:c2:47:50:21:2c:
f4:f3:c1:56:6c:7d:ae:5b:b9:da:66:af:5a:e3:62:de:01:fc:
12:6f:25:3a:3b:6b:e1:8a:35:5d:ee:18:05:94:e1:2f:5e:6d:
5c:fb:1f:57:da:dd:b0:d6:4a:52:ac:a7:50:63:b5:c3:56:60:
41:1c:ef:89:15:09:e3:3d:7f:9c:ad:7a:22:93:00:77:89:8e:
fe:c5:4a:b9:4f:64:6d:e4:33:8a:52:a6:fb:e4:c2:4c:0e:64:
10:2a:70:38:b4:e8:27:46:3c:1a:9d:5f:b7:6b:a8:ef:a1:e2:
1d:7f:08:c6:ac:2a:f0:4e:ab:c6:e4:f0:7b:79:53:11:58:90:
10:aa:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:12:32 2024 by rpki-client on console-ams.rpki-client.org