Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/i54B6TKAyGN0zT0Il4zPXwwKdzs.roa
File: i54B6TKAyGN0zT0Il4zPXwwKdzs.roa (raw, json)
Hash identifier: n/jqYLmTQHJ88nsqvA2RHKL/RcNiRlk5CtjE3y14tPc=
Subject key identifier: 8B:9E:01:E9:32:80:C8:63:74:CD:3D:08:97:8C:CF:5F:0C:0A:77:3B
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 019115074A345B402E4FE64A7BF8EED85C06
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/i54B6TKAyGN0zT0Il4zPXwwKdzs.roa
Signing time: Fri 02 Aug 2024 21:38:04 +0000
ROA not before: Fri 02 Aug 2024 21:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52054
IP address blocks: 185.156.192.0/23 maxlen: 23
185.156.194.0/24 maxlen: 24
185.156.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:15:07:4a:34:5b:40:2e:4f:e6:4a:7b:f8:ee:d8:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Aug 2 21:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9e01e93280c86374cd3d08978ccf5f0c0a773b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:cb:8d:43:6b:a1:b6:67:6c:55:81:74:85:
8f:b2:98:b8:1c:ac:58:e8:89:30:e3:33:18:43:ba:
70:fb:22:52:2d:f8:b1:21:44:74:c3:44:ef:39:17:
58:47:54:6a:62:6e:99:b7:23:d0:28:e6:c4:d1:a7:
79:33:ef:0b:e5:1f:f6:50:42:b1:6b:39:67:f1:92:
b0:53:45:91:89:2c:6d:89:d2:70:2a:ca:83:56:cb:
ee:2b:b8:36:fb:20:a4:e8:91:6a:51:b0:36:20:b0:
fe:32:f5:d2:f8:cf:22:c4:ea:24:c7:d7:ff:3f:82:
6c:d1:8a:a7:db:e7:4c:dd:48:10:0f:10:51:01:c5:
2a:cf:72:3d:19:74:77:f3:de:a1:6b:7e:d2:b8:e8:
18:c1:e8:4b:70:74:e2:5a:e3:88:5f:58:c6:14:f7:
81:61:04:4a:13:4d:49:e6:6e:02:4b:90:fa:67:ea:
eb:ab:a6:9f:03:98:61:8b:8c:12:57:a8:76:15:f3:
eb:a9:d2:20:2d:17:26:dc:6e:8a:b4:4c:39:29:df:
01:4d:82:5a:f1:af:b7:52:29:42:24:eb:f3:83:1b:
7d:b0:4a:65:1a:3b:41:c8:33:2d:d4:1c:dc:35:2f:
60:69:34:4c:90:fa:21:6b:97:1c:e1:5c:f1:f7:d6:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:01:E9:32:80:C8:63:74:CD:3D:08:97:8C:CF:5F:0C:0A:77:3B
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/i54B6TKAyGN0zT0Il4zPXwwKdzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e0:f3:f2:43:8a:b0:38:ab:ff:f9:95:e3:67:5c:21:a8:43:
e3:24:ac:f9:0d:b7:59:55:a9:56:80:0b:df:9b:27:16:7b:a3:
83:10:89:e3:b6:ef:bc:e6:df:ac:31:b4:34:14:10:b9:8a:5d:
1f:0a:f9:9e:dc:27:75:43:7a:b2:fc:1e:00:98:f6:25:d9:34:
07:5d:b7:ac:54:34:99:c6:9a:f4:b1:10:02:6c:ac:e4:a5:64:
91:57:ab:72:3c:1c:6a:72:c2:0a:c5:05:a7:ca:50:00:c5:6d:
57:32:7a:75:e4:68:c3:3d:33:d0:4e:bc:d4:44:9d:b1:f4:20:
04:e3:d2:87:43:87:3a:6f:25:86:d0:2c:de:78:07:e9:4d:5f:
f3:ba:4f:28:35:99:62:98:b3:2e:26:df:97:8f:db:a6:ba:45:
55:59:cd:3f:57:df:62:c3:d5:07:5a:4b:86:b6:a1:9d:d7:ed:
a8:a5:e3:00:44:d8:7f:b8:ee:e4:99:3d:8d:4b:fe:fc:01:44:
a1:41:bc:fc:e5:64:12:ef:6c:d4:03:ba:95:c5:6a:31:29:81:
27:8b:7e:34:dc:ee:c8:5b:67:86:4c:d3:aa:74:6c:77:96:6f:
a6:a3:b2:cd:e2:55:8c:2f:ec:2f:37:85:8c:7a:26:cb:18:ce:
e8:b0:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:33 2024 by rpki-client on console-fra.rpki-client.org