Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa
File: 0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa (raw, json)
Hash identifier: bTOnRbLil2MAS+qgb1bMTQWVvLU4yHSIfrsaM+JQaNw=
Subject key identifier: D2:5E:D4:FD:F2:CB:DB:F0:83:05:68:4A:10:13:51:B9:89:51:16:B9
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 018CC649A6CA67AB2BE9AA7DBF06C96F5332
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa
Signing time: Mon 01 Jan 2024 18:29:24 +0000
ROA not before: Mon 01 Jan 2024 18:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16353
IP address blocks: 185.136.72.0/24 maxlen: 24
185.136.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a6:ca:67:ab:2b:e9:aa:7d:bf:06:c9:6f:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jan 1 18:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d25ed4fdf2cbdbf08305684a101351b9895116b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:5f:50:64:1a:7d:1a:52:3c:5c:85:a7:8d:
6f:79:dd:06:40:79:b4:09:20:7e:f0:17:b1:79:71:
b5:65:3e:78:05:73:68:6f:eb:9a:7a:d3:f4:d8:72:
72:11:11:77:0c:3b:87:d4:f8:3a:5d:a5:53:af:47:
3c:86:0b:e5:8c:0c:87:e0:ad:11:ca:ea:97:ad:2d:
d2:3b:9c:60:72:37:6f:65:ce:48:90:68:b1:d4:19:
b4:d2:ee:52:2d:aa:32:61:08:35:75:c4:03:96:18:
9e:66:02:01:21:30:ab:1d:39:a3:7a:b5:08:d4:8a:
4e:51:14:aa:f2:18:d1:6c:41:7b:a8:31:e6:85:5f:
a9:3f:48:cb:be:4c:7d:5a:ce:77:40:4d:a9:c0:7d:
ba:a8:3d:75:e8:93:4c:e9:0c:44:f5:38:96:8c:75:
e8:e6:ef:a8:bd:2a:03:bc:07:39:ca:9e:80:23:ce:
3b:b7:b0:65:4b:ca:59:48:6d:6d:2c:da:b3:ea:2f:
b9:db:31:f8:99:ac:22:8b:b4:30:d8:91:34:3e:32:
84:cb:e0:35:15:ae:a0:9e:1d:0a:ea:aa:c4:b1:ee:
74:83:1a:08:ab:c8:dd:fd:81:75:ae:73:a8:0d:f5:
38:10:22:c3:b4:27:bf:b3:7c:66:1e:d9:86:a8:75:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:D4:FD:F2:CB:DB:F0:83:05:68:4A:10:13:51:B9:89:51:16:B9
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/0l7U_fLL2_CDBWhKEBNRuYlRFrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:1c:b1:0b:67:7a:36:a7:aa:b0:15:d7:ac:8e:40:c9:90:2c:
0c:b5:ba:56:bf:de:85:01:ff:de:76:0b:cb:eb:5c:ed:1f:5e:
ff:65:fe:71:99:46:40:37:83:9e:d4:15:64:eb:bc:42:11:7d:
cc:e8:53:c7:5c:ff:37:6f:a7:8d:9e:68:95:03:12:54:b7:7e:
6d:2c:9f:3a:66:8f:8f:3b:5b:d2:03:31:46:50:51:26:13:39:
fe:70:b4:ab:3a:e4:a9:62:3d:db:e0:b4:f6:3a:74:78:a8:a8:
9c:a3:68:2f:5d:b7:18:3d:19:d9:71:09:56:71:a9:cc:5d:0f:
03:c6:a3:cc:ae:15:63:25:1d:46:0f:b1:01:ed:ea:4c:48:f3:
bd:7c:37:dd:64:3d:0d:68:9e:b3:12:50:7a:42:90:b9:e9:fc:
ce:9a:b1:c2:1a:37:0a:49:9d:a5:27:84:b1:04:f9:c4:5e:c2:
8b:6b:e1:40:f9:33:2a:fa:eb:ba:00:49:e3:30:af:51:c9:7c:
36:28:18:56:e9:0f:31:b5:5b:53:89:a3:45:05:73:10:a9:04:
e7:53:e7:4d:41:c7:4e:7f:87:f2:cf:7c:f9:f5:29:06:32:42:
95:ca:01:3a:63:87:88:f3:8a:5b:15:c9:25:4f:41:c5:23:8c:
55:29:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:29:55 2024 by rpki-client on console-ams.rpki-client.org