Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/6nDoX--b1eehBIELRqQ4k-XGgv0.roa
File: 6nDoX--b1eehBIELRqQ4k-XGgv0.roa (raw, json)
Hash identifier: 6qXgE9EjJTQ3Ov7GNE0fDFCA+4bzMSIQclsZCwLxId8=
Subject key identifier: EA:70:E8:5F:EF:9B:D5:E7:A1:04:81:0B:46:A4:38:93:E5:C6:82:FD
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 018CC500ECFBE73A7647B04E1047B4C7AEEA
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/6nDoX--b1eehBIELRqQ4k-XGgv0.roa
Signing time: Mon 01 Jan 2024 12:30:21 +0000
ROA not before: Mon 01 Jan 2024 12:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 5.158.80.0/21 maxlen: 24
185.178.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ec:fb:e7:3a:76:47:b0:4e:10:47:b4:c7:ae:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 1 12:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea70e85fef9bd5e7a104810b46a43893e5c682fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:e2:6c:f9:40:52:7c:ba:4e:c5:26:ae:0b:
50:ef:08:d6:b8:f5:d6:f0:ee:e4:41:17:ca:59:4a:
ce:cb:53:54:3d:ec:ac:da:a4:30:bb:47:eb:5d:fd:
fb:12:21:f1:0d:a9:f8:15:0d:f7:2b:2a:49:e7:28:
17:0c:77:d5:b6:78:eb:78:c4:70:b9:3e:e7:38:09:
56:8f:9a:46:a0:9c:a7:8a:8a:1b:a5:4b:56:5a:0e:
bc:9e:4c:76:18:df:fc:f2:4e:65:31:be:88:89:69:
0a:c9:d2:15:6f:74:2d:7f:30:bb:7c:d7:b9:2e:23:
17:4f:1d:a8:30:69:de:65:b1:97:1e:02:b5:4e:ae:
41:6b:9c:fb:2f:30:a5:a1:2e:fe:90:75:17:a1:44:
c6:6b:99:c3:9f:e7:b5:c7:17:0e:45:eb:d5:d9:8a:
ff:98:34:b9:26:12:46:4b:34:5b:44:65:04:19:89:
79:ed:6c:91:9a:07:87:d9:08:78:68:c5:16:7a:4c:
92:f0:51:27:99:e7:12:d3:17:0f:d1:e2:67:c1:6f:
46:a0:6c:7d:2c:73:6e:30:e5:f0:7c:35:ef:24:74:
1f:4c:af:12:e8:1d:a7:93:80:31:4f:a3:af:11:ce:
4e:bd:d7:77:3a:e4:d9:8c:3e:76:ad:61:6c:92:fd:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:E8:5F:EF:9B:D5:E7:A1:04:81:0B:46:A4:38:93:E5:C6:82:FD
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/6nDoX--b1eehBIELRqQ4k-XGgv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/21
185.178.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a2:93:d3:03:15:e4:a7:40:e2:e5:98:c2:87:39:69:c6:c6:
56:e5:e3:19:48:88:e2:a0:48:2e:85:f2:f1:a4:0a:93:c0:99:
ed:df:7e:c6:7a:b3:d0:87:be:8d:54:7a:68:d8:ed:00:da:94:
6c:8c:61:32:77:5a:e3:7e:03:19:c0:ce:cd:be:cf:c1:64:13:
e4:74:b1:10:c5:07:63:cf:0b:8f:46:04:21:a1:66:73:a3:51:
b5:df:75:b1:24:1c:42:d3:af:e7:09:c6:29:ee:c2:46:9c:81:
41:d4:38:9e:4b:ad:ac:f2:e3:65:f0:ff:47:f4:29:5b:e2:8e:
22:03:d6:17:18:6e:38:ae:4b:87:a7:5e:05:7d:73:99:96:20:
0d:ec:2c:cd:5f:34:df:7a:d6:8d:e3:d2:45:e4:42:fe:d5:18:
2f:b5:66:72:18:9f:65:d1:c1:d0:f1:de:bd:77:8a:ba:56:a2:
34:72:21:b1:03:3b:19:9e:4f:59:00:99:4e:ac:79:4c:f9:bf:
a6:d3:07:8e:1e:3d:58:69:86:4c:08:45:3f:99:dd:49:f9:4b:
71:92:d5:e6:a0:70:c9:1b:eb:92:9f:5c:9c:ed:4a:7f:e4:4f:
5c:43:72:a5:2c:bc:51:cd:55:dd:68:e1:ef:b0:fc:95:a7:86:
c3:82:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:51:53 2024 by rpki-client on console-ams.rpki-client.org