Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/Api_fc5BKZera7wkb8iYlDe5Isg.roa
File: Api_fc5BKZera7wkb8iYlDe5Isg.roa (raw, json)
Hash identifier: DN9uFWgEfGWl/WcGwnUYzj4Fvv6/W1Q3ASJud3QjT4M=
Subject key identifier: 02:98:BF:7D:CE:41:29:97:AB:6B:BC:24:6F:C8:98:94:37:B9:22:C8
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 018CC56EC9A17E98FD85DCFB3CEEDEEE630E
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/Api_fc5BKZera7wkb8iYlDe5Isg.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199473
IP address blocks: 185.15.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c9:a1:7e:98:fd:85:dc:fb:3c:ee:de:ee:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0298bf7dce412997ab6bbc246fc8989437b922c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:06:0e:1c:21:57:08:e9:99:6a:8b:4c:0c:
47:0b:76:5a:5d:3f:8d:6a:bf:57:7a:f7:e4:8c:91:
15:4c:28:99:ae:d1:3b:f9:c0:b4:a7:6a:e1:47:61:
52:3f:b1:9a:56:a6:3b:ee:7f:b0:1b:10:3a:24:18:
9c:bb:74:98:6e:71:f3:fb:de:4a:20:12:9a:d5:c3:
07:97:92:6e:14:38:af:c9:ba:4a:6d:9e:e0:64:1e:
eb:76:2a:df:02:c4:18:81:8c:6a:55:8b:fe:7a:22:
39:99:68:3b:3d:c3:4f:a1:4e:84:c3:6e:22:58:e9:
bb:67:23:32:01:ec:25:23:35:34:f6:78:d1:00:2e:
a3:4a:e7:5f:97:a8:2d:65:10:f8:09:9a:94:e8:21:
29:e0:6d:19:39:50:c3:06:cd:41:c3:83:d5:b7:00:
55:f6:db:95:56:b9:0d:59:be:7a:99:54:b0:ab:d2:
cc:37:41:56:c2:33:ed:cc:92:1c:bb:a8:d6:50:ec:
f1:92:b9:f6:6b:48:4d:11:26:ff:9d:f8:28:ff:1b:
60:0e:0a:4f:5f:8f:a7:95:3e:48:b1:59:48:98:c8:
91:3a:2c:eb:bf:50:6b:a9:60:88:20:e0:de:84:af:
a4:02:a7:6e:2e:c5:f6:fb:cd:38:17:13:37:bd:95:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:BF:7D:CE:41:29:97:AB:6B:BC:24:6F:C8:98:94:37:B9:22:C8
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/Api_fc5BKZera7wkb8iYlDe5Isg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:bd:af:b1:48:de:0c:9b:5a:5e:ff:29:c3:ff:1f:3b:a1:13:
66:8a:0b:ca:35:8a:c8:ba:65:21:cc:43:e5:d4:4e:f8:02:d4:
d7:02:57:65:bb:6d:ed:d0:02:c3:c2:eb:42:c6:19:2a:9b:d0:
ac:99:09:64:ca:20:75:f6:5d:93:95:ed:66:f4:8d:05:ef:3c:
60:eb:16:f6:6c:bb:9b:2e:e3:9d:13:3c:45:89:87:95:67:9f:
f5:8c:dc:ce:88:04:3e:41:94:dd:ee:62:b0:cc:d6:e0:70:6b:
ae:54:7b:2d:4d:34:8f:c8:f0:d7:96:9d:41:6a:6a:31:f1:ad:
53:6b:94:3f:9b:ab:77:b9:1c:16:61:21:06:99:5c:86:0c:dc:
c2:42:11:4b:df:ec:55:ad:0b:9b:d3:45:1e:7a:a9:00:b0:b6:
d4:74:5b:46:b9:bc:f9:fa:31:45:14:be:05:24:a2:dd:9a:b7:
d9:88:3c:4d:c9:5f:2f:53:dc:b6:64:78:ac:0d:cf:ad:cb:12:
17:3b:d9:dd:ac:53:ea:d6:6e:ed:27:8c:16:a8:b0:b3:bd:34:
a8:84:3b:d0:ab:b0:90:18:ea:f7:53:ce:bb:ae:6d:77:4e:47:
28:88:5c:66:31:8d:b2:f6:ad:13:b1:1a:06:9a:40:af:7c:65:
ec:f7:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:52:14 2024 by rpki-client on console-ams.rpki-client.org