Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HClk0ncUja2gsX5Nip8rWJmvueY.roa
File: HClk0ncUja2gsX5Nip8rWJmvueY.roa (raw, json)
Hash identifier: ajmrxTUSY7X6AEeQEY+m+V/+CII1eAbR+tXii8VfFoE=
Subject key identifier: 1C:29:64:D2:77:14:8D:AD:A0:B1:7E:4D:8A:9F:2B:58:99:AF:B9:E6
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EA9A6089641114596D804874B31D7439B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HClk0ncUja2gsX5Nip8rWJmvueY.roa
Signing time: Thu 04 Apr 2024 15:06:54 +0000
ROA not before: Thu 04 Apr 2024 15:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 64.137.64.0/23 maxlen: 23
64.137.68.0/24 maxlen: 24
64.137.79.0/24 maxlen: 24
64.137.87.0/24 maxlen: 24
104.143.252.0/24 maxlen: 24
104.239.52.0/23 maxlen: 23
104.250.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:a6:08:96:41:11:45:96:d8:04:87:4b:31:d7:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 15:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2964d277148dada0b17e4d8a9f2b5899afb9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:f1:d4:cf:17:4b:af:7b:ee:2f:9d:68:77:
09:15:f3:31:9b:a9:83:b5:71:6c:d4:c0:30:bf:ea:
6e:fe:b1:01:3f:56:48:5b:30:e3:e5:ea:50:03:79:
10:73:96:ca:e1:0a:22:0f:0d:ba:64:c1:ef:c1:6c:
a9:e4:34:e4:94:c6:c5:58:05:b9:94:26:63:87:55:
65:13:56:1a:36:bb:bd:d1:5c:82:89:2a:d4:c3:98:
95:62:99:f8:41:8b:10:83:ce:45:63:ba:e3:0b:57:
ac:ce:1a:3b:f0:b6:62:1a:01:cd:8e:1b:a9:9c:9c:
41:c0:2d:df:7a:16:65:69:80:4b:0c:4e:eb:1d:4c:
8b:35:31:b3:7e:d0:83:64:6b:8a:8a:7d:bd:1e:24:
09:86:0e:25:0b:5d:61:2a:01:7c:1a:df:21:14:e3:
fe:71:80:80:c0:0c:97:f2:1b:4c:53:49:27:e6:74:
e2:36:fe:5e:31:5e:fd:dd:97:76:0c:17:60:cf:76:
5b:97:81:ab:b9:21:4f:72:2c:07:c5:6d:f6:6a:37:
44:44:64:05:b7:74:7f:37:73:6d:b7:d4:37:3a:f4:
80:6c:77:be:10:65:69:a8:20:12:25:58:1f:da:20:
f6:7b:be:a3:c1:ab:8c:21:b8:53:d8:1c:cb:73:f1:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:64:D2:77:14:8D:AD:A0:B1:7E:4D:8A:9F:2B:58:99:AF:B9:E6
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HClk0ncUja2gsX5Nip8rWJmvueY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.64.0/23
64.137.68.0/24
64.137.79.0/24
64.137.87.0/24
104.143.252.0/24
104.239.52.0/23
104.250.204.0/22
Signature Algorithm: sha256WithRSAEncryption
36:34:78:94:2b:25:18:6a:42:d0:cf:4c:2e:69:89:ae:85:80:
15:38:d9:c3:54:e8:82:76:8c:e4:a1:22:9e:2c:fb:19:06:20:
f3:94:cb:7f:83:06:4f:75:4c:07:39:91:15:28:96:e2:84:36:
ae:ba:ef:d8:e3:2a:ab:42:58:c8:05:f7:cf:a0:1c:a0:25:e0:
30:d4:cd:73:5e:6d:9e:3a:6c:c4:b3:37:7b:99:94:19:aa:96:
ba:04:86:59:0a:63:a1:dc:eb:ea:1e:cf:33:b4:23:ef:8e:d7:
a0:99:4f:ad:0c:b0:1c:c1:36:96:e6:00:02:7b:40:0b:bc:70:
1f:f0:ae:b8:2a:25:35:78:11:5b:9a:30:e5:b0:27:06:99:b2:
8f:a0:1a:6e:fb:28:77:f2:3b:bd:50:c1:63:d0:cd:2e:7f:4a:
d6:62:11:e3:3f:73:70:aa:70:7f:f5:06:05:0f:cb:5b:5c:d3:
8c:09:85:3a:3c:33:b9:8f:a9:e2:2a:18:a7:1d:a9:0d:5b:39:
5d:fb:46:13:e6:a0:7a:d2:4e:3e:3d:93:8e:c4:ed:2f:7f:0c:
a0:11:23:cb:84:38:72:be:d7:52:05:ba:2f:7b:fc:09:52:ad:
88:01:cf:d7:3c:d5:b3:71:b4:7d:4e:2c:de:41:13:ea:af:1e:
ca:86:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:01:50 2024 by rpki-client on console-ams.rpki-client.org