Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/52o7v0lh9w6_bEloO6DPuJd4SKg.roa
File: 52o7v0lh9w6_bEloO6DPuJd4SKg.roa (raw, json)
Hash identifier: /hgQr7tXO1CguT9E2I4U4xfpsTR4F8hiP0hbo9qid0Y=
Subject key identifier: E7:6A:3B:BF:49:61:F7:0E:BF:6C:49:68:3B:A0:CF:B8:97:78:48:A8
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 018CC86FA418FF3D9B3A2DCA3A54D22CDB5E
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/52o7v0lh9w6_bEloO6DPuJd4SKg.roa
Signing time: Tue 02 Jan 2024 04:30:08 +0000
ROA not before: Tue 02 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34946
IP address blocks: 185.16.92.0/22 maxlen: 22
80.244.192.0/20 maxlen: 20
92.42.72.0/21 maxlen: 21
2a00:f600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a4:18:ff:3d:9b:3a:2d:ca:3a:54:d2:2c:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jan 2 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e76a3bbf4961f70ebf6c49683ba0cfb8977848a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:d4:71:ae:70:67:4f:3c:3f:39:48:a2:13:
cc:1b:78:9a:30:e4:4c:b3:bf:bc:1a:bd:be:26:44:
63:68:86:69:6a:95:65:a9:d0:cd:3f:4e:23:c1:8b:
32:b3:37:43:45:fc:d1:fd:76:fe:8e:19:1c:5d:d4:
2e:69:9a:de:5a:97:bc:dc:0d:a7:f1:1b:cb:c1:13:
47:7c:3d:ef:a7:57:81:28:3f:53:e9:04:7e:0a:28:
42:01:2a:aa:e1:54:7b:d5:a2:fe:d0:14:08:08:8e:
60:59:0e:1a:75:5c:f7:99:98:f0:2b:82:77:ad:21:
e2:74:57:8b:7f:81:f3:18:19:5c:53:11:06:18:70:
1d:63:67:f1:86:e7:8c:de:3e:2b:51:19:b8:a9:05:
54:46:18:34:e3:20:3a:03:70:9c:73:25:db:28:e8:
52:b7:8d:b2:0f:a7:38:74:4f:1b:19:09:a2:07:2e:
cc:06:d0:97:a1:69:82:09:af:90:8f:00:ad:7a:82:
cc:93:36:f7:16:f3:59:35:c6:ae:4e:4e:56:67:fe:
07:29:90:6a:19:56:00:22:73:b1:b6:ca:3c:68:d2:
4c:2b:f0:57:f7:41:9d:9e:11:66:f7:71:58:8a:b0:
65:be:b7:2d:5c:80:79:d1:73:54:43:22:87:3c:e6:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:3B:BF:49:61:F7:0E:BF:6C:49:68:3B:A0:CF:B8:97:78:48:A8
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/52o7v0lh9w6_bEloO6DPuJd4SKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.192.0/20
92.42.72.0/21
185.16.92.0/22
IPv6:
2a00:f600::/32
Signature Algorithm: sha256WithRSAEncryption
b2:88:97:22:31:8c:97:5c:c6:6a:8c:16:e0:4e:6a:e4:7b:34:
ad:b5:83:95:33:71:5e:79:37:c4:db:16:87:30:56:27:89:3c:
db:82:19:f1:5b:d3:0b:73:09:4d:db:30:61:17:f6:43:3b:01:
8a:3a:01:10:ef:b3:80:ee:dc:3d:b7:51:77:05:c7:7e:c1:62:
25:0d:1b:63:ab:5b:1f:03:2a:97:54:e4:ef:0d:75:4e:41:d8:
41:19:c1:c5:45:71:21:e7:fd:b0:ad:fb:4d:cc:53:97:c7:73:
a5:c4:2b:9c:09:6a:b9:47:8a:71:58:96:fa:1f:42:17:f2:eb:
35:db:06:0e:33:c8:c3:c6:2d:2c:b7:29:47:f1:38:93:9f:51:
f8:7b:2a:18:bd:27:1a:d0:4d:21:38:e2:88:f1:91:bb:25:d4:
fb:41:28:4d:5e:69:d3:ef:c5:27:1b:5c:6e:b5:20:fd:23:05:
2a:9b:d9:db:f8:98:65:24:bc:e1:61:57:3f:5f:84:41:8e:f6:
de:cd:32:b3:3a:57:23:e1:43:eb:9b:c1:ed:d3:45:f8:13:ee:
dc:60:f2:4b:d2:6d:06:e4:01:38:46:ae:9a:80:e0:55:eb:96:
8c:38:d9:e4:77:f5:8b:3c:45:a5:fe:7f:fa:85:da:7d:9b:94:
da:66:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:03:47 2024 by rpki-client on console-fra.rpki-client.org