Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hQktlZihAX2YC66LyGOfAv2jhi8.roa
File: hQktlZihAX2YC66LyGOfAv2jhi8.roa (raw, json)
Hash identifier: 5v5ExEn5q7O75djExL+akAjqPZ5zqvRQ6vpv4d10p2w=
Subject key identifier: 85:09:2D:95:98:A1:01:7D:98:0B:AE:8B:C8:63:9F:02:FD:A3:86:2F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9C303A5651892FEFCC722BA1D99D0CF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hQktlZihAX2YC66LyGOfAv2jhi8.roa
Signing time: Mon 08 Jan 2024 15:48:40 +0000
ROA not before: Mon 08 Jan 2024 15:48:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57095
IP address blocks: 87.229.69.0/24 maxlen: 24
178.238.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:c3:03:a5:65:18:92:fe:fc:c7:22:ba:1d:99:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:48:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85092d9598a1017d980bae8bc8639f02fda3862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:95:3a:75:35:9d:6f:34:4b:75:47:2c:ac:
f6:51:a5:19:d0:85:fa:24:a4:f6:6b:b3:38:d6:78:
d5:c7:e7:0a:89:e4:9a:89:28:d4:66:50:7f:77:d9:
dc:95:ca:a9:5d:61:00:50:69:f2:24:77:71:5b:77:
7b:3d:26:67:52:ce:de:73:e3:9d:5a:17:92:03:f9:
0c:d0:24:01:36:f7:4a:ca:a2:f9:b1:5d:ad:d0:a7:
1d:7a:59:a9:56:11:3f:91:f8:a2:77:a1:33:a5:d5:
e3:45:9f:fa:21:e8:77:c4:ba:04:eb:1d:3b:4d:a0:
5c:8f:d8:ff:3c:9e:09:fd:ac:3f:8d:7a:40:c7:8b:
9e:fd:0b:6b:a9:1a:0a:35:50:e9:4e:d8:ab:0b:be:
17:f7:fc:67:40:e0:29:c4:b7:e2:60:5e:56:61:ce:
b8:31:cf:4b:a7:3b:62:53:a4:78:07:e4:e4:71:51:
98:23:6d:b2:99:a4:5a:cc:75:ac:2b:b8:a0:d7:4e:
a8:9e:32:ee:06:93:07:5c:e5:e8:ac:13:a7:b6:44:
5b:2f:aa:c1:78:fa:90:c2:0e:24:ff:dd:8f:95:41:
2f:38:ff:cb:f7:d5:da:4f:39:2d:ce:64:5f:f3:3c:
01:b1:7b:bf:29:18:df:a9:13:4b:5c:63:a3:9c:99:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:2D:95:98:A1:01:7D:98:0B:AE:8B:C8:63:9F:02:FD:A3:86:2F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/hQktlZihAX2YC66LyGOfAv2jhi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.69.0/24
178.238.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a6:b9:7a:94:77:1e:cc:a8:6f:86:11:2d:25:47:c3:bc:3d:
71:4f:0a:86:67:a9:41:ee:2a:2d:41:64:23:e4:12:ac:d1:28:
c9:e6:a3:e3:61:dc:7c:e3:8a:f7:2d:12:34:d4:98:0a:9c:03:
a6:a2:e7:ef:fa:f6:bf:7b:ee:92:be:e6:20:59:34:d9:77:9b:
ca:ec:50:08:f8:41:57:31:a0:cf:d5:15:d6:37:20:82:2b:68:
7d:ae:ea:fa:86:f4:52:1c:f2:f9:7e:1b:cd:37:cf:68:41:58:
43:b9:63:f7:75:42:66:ec:87:ff:65:eb:1a:41:a9:d0:07:23:
d6:0b:f0:cd:91:9a:6c:c7:b9:cd:05:ab:b2:dc:ee:25:62:0e:
7d:80:7e:bc:3c:c7:7c:ac:de:44:14:f6:98:74:a3:98:14:6a:
82:37:08:2e:b6:4e:60:f9:33:01:dd:08:c6:29:0e:70:83:1e:
2e:0b:a8:7d:85:8e:fb:c3:77:9f:34:b1:74:3c:f6:a8:21:a6:
df:34:fc:84:19:62:ab:f1:d6:48:62:5c:34:62:a5:88:7f:f0:
64:07:b1:dc:25:7c:61:c1:eb:d7:fd:4c:5f:c0:b1:f0:2a:57:
06:d7:eb:8b:5e:97:c3:d4:fc:2b:f5:d1:ba:4e:5d:25:6b:8d:
67:fc:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 15:52:50 2024 by rpki-client on console-ams.rpki-client.org