Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/ciedX7S1XTHKydUA2FMhFyCP-m8.roa
File: ciedX7S1XTHKydUA2FMhFyCP-m8.roa (raw, json)
Hash identifier: MKQM3q6Xs5cfwEC0u49HBKGyLgEM+9k5qXBcfdpD5+o=
Subject key identifier: 72:27:9D:5F:B4:B5:5D:31:CA:C9:D5:00:D8:53:21:17:20:8F:FA:6F
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 018CC86FC89F254D6776B31F91AF06E549F6
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/ciedX7S1XTHKydUA2FMhFyCP-m8.roa
Signing time: Tue 02 Jan 2024 04:30:18 +0000
ROA not before: Tue 02 Jan 2024 04:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398577
IP address blocks: 144.57.40.0/24 maxlen: 24
144.57.41.0/24 maxlen: 24
144.57.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c8:9f:25:4d:67:76:b3:1f:91:af:06:e5:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Jan 2 04:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72279d5fb4b55d31cac9d500d8532117208ffa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:1b:c2:72:58:8a:5c:72:35:16:15:f5:b5:
0c:23:33:35:68:e0:a2:38:21:7c:5c:e6:5e:06:34:
be:ea:a8:9c:74:45:66:c8:fc:fa:58:11:7f:8f:db:
c9:f5:12:2f:fa:9d:03:35:c8:ad:93:2d:49:02:3d:
bd:f2:a9:bc:38:ca:c7:86:88:06:94:20:97:45:25:
f2:9d:71:62:fb:b8:6b:b6:0c:8f:b1:3f:85:57:9f:
e2:9b:6b:e8:55:69:64:22:af:78:a2:94:38:92:83:
0e:24:81:7d:ed:91:43:44:1b:2d:a3:66:4f:70:5f:
bf:89:03:d4:5f:06:d0:9b:b9:7d:cf:47:31:2b:49:
12:fe:2d:73:2f:93:6a:79:d4:3a:e9:d0:1e:81:a4:
7f:3c:b7:a0:92:6c:22:fe:e9:80:e2:d7:27:e7:fe:
f9:20:0f:4f:27:f3:b5:68:66:4d:7e:68:c1:2d:29:
7d:d2:c9:95:f8:dd:ba:8f:7e:d1:4d:90:71:0e:9c:
88:6f:ee:27:3a:5e:62:6c:30:c5:ab:0a:62:86:db:
1c:03:e1:42:7a:de:16:9a:2e:df:52:bb:03:e5:10:
ae:70:7e:f0:7e:7c:c4:58:85:9c:9c:24:60:d6:29:
a8:ea:b9:15:03:11:27:92:33:40:89:84:44:1f:4d:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:9D:5F:B4:B5:5D:31:CA:C9:D5:00:D8:53:21:17:20:8F:FA:6F
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/ciedX7S1XTHKydUA2FMhFyCP-m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:c8:76:ae:c0:6f:20:d9:3d:f6:00:ed:65:d8:6d:14:56:9d:
36:24:59:b3:a0:49:a5:49:52:d6:d5:20:93:54:0c:0b:5d:bd:
47:70:fe:6b:04:a5:f3:b2:f7:4d:df:3b:3a:e9:61:94:7e:71:
36:d2:c2:c6:68:a0:17:96:eb:a7:b9:37:e3:8f:5a:9d:b7:d9:
59:5b:fc:4b:ee:28:54:6b:9d:1c:aa:ce:77:45:2b:81:5c:db:
6e:c9:17:b1:64:d3:fb:ff:23:b2:eb:77:b1:d5:1c:16:0d:7b:
90:b8:b9:6c:51:9f:bf:2e:98:fd:09:b5:56:24:db:72:92:76:
3f:0a:73:d5:8f:24:76:77:0a:17:e8:be:02:5f:a0:38:f6:23:
09:c9:74:55:7a:67:95:2a:5b:9f:6b:94:3d:3a:e9:d0:69:7d:
6e:c8:38:d6:3f:60:02:17:b3:a7:b0:b1:5c:24:9a:ce:16:84:
6a:e1:ae:1d:28:18:40:7f:16:68:8a:d7:fe:75:ed:7e:e9:2a:
2e:95:ab:8c:24:3e:8c:69:d6:52:3e:99:07:f2:93:d1:17:72:
40:54:2f:b6:5f:12:e8:e5:d7:1b:67:5a:1c:9c:f8:97:a6:8a:
51:10:04:99:57:63:b3:5c:0f:5c:7e:f5:a3:09:f2:15:2a:05:
db:3c:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:27:39 2024 by rpki-client on console-ams.rpki-client.org