Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/1pG2TPqO4E4trNRrM_-Zrp7dHUA.roa
File: 1pG2TPqO4E4trNRrM_-Zrp7dHUA.roa (raw, json)
Hash identifier: d9el/EzqUA4zeIJB4v66XNpRonRMRsDwN2KU2Tqba2A=
Subject key identifier: D6:91:B6:4C:FA:8E:E0:4E:2D:AC:D4:6B:33:FF:99:AE:9E:DD:1D:40
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 018CC8715A2ECC3B7008F67546FA623EA5B1
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/1pG2TPqO4E4trNRrM_-Zrp7dHUA.roa
Signing time: Tue 02 Jan 2024 04:32:01 +0000
ROA not before: Tue 02 Jan 2024 04:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44295
IP address blocks: 92.42.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5a:2e:cc:3b:70:08:f6:75:46:fa:62:3e:a5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Jan 2 04:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d691b64cfa8ee04e2dacd46b33ff99ae9edd1d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:59:63:c1:ab:e9:cd:a8:c4:a2:6c:17:3f:
2c:f8:d6:21:1e:a1:23:af:4e:55:f6:e8:2a:17:bd:
e9:e3:2d:1e:10:6a:b1:05:79:14:d3:89:1b:e5:f0:
07:b7:a2:7c:f6:51:10:31:e7:fc:46:47:a5:40:6a:
1b:ad:eb:ee:48:5e:ee:36:d2:25:cb:e2:ef:2b:a7:
78:06:24:ea:0b:74:93:1b:fc:c2:3d:48:14:c5:04:
cb:94:14:9e:a9:5d:3a:d6:e4:01:d2:4f:88:e3:16:
b2:71:83:bb:06:67:5d:fa:19:74:c0:97:fc:d1:2c:
a4:66:e7:53:bd:35:69:3a:86:00:8f:e1:09:37:4a:
13:cd:1a:42:1b:e2:b4:82:85:ff:fb:82:af:24:af:
cf:c6:c1:9c:22:65:bc:be:3a:7d:e2:fc:b5:2d:09:
24:b1:05:4b:d1:2f:42:ba:de:c5:4d:8f:ca:14:38:
9c:18:95:f8:da:b0:e6:26:9b:b8:69:ba:2e:82:4b:
44:7c:b8:21:8d:a7:e2:f8:fe:6d:b5:1c:6c:22:00:
41:ed:b4:d6:a7:39:01:4a:7e:2b:6b:62:84:53:02:
b7:ab:0f:61:d0:d0:5b:6c:df:51:a0:7f:fb:72:ad:
ea:0f:0f:a5:c0:d2:bc:d1:cf:14:a5:b8:29:d2:5c:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:B6:4C:FA:8E:E0:4E:2D:AC:D4:6B:33:FF:99:AE:9E:DD:1D:40
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/1pG2TPqO4E4trNRrM_-Zrp7dHUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.176.0/21
Signature Algorithm: sha256WithRSAEncryption
76:07:19:84:b7:6a:b7:f3:00:91:a8:34:d7:5a:4a:16:aa:4d:
40:38:d6:94:09:bb:68:58:1b:81:f2:43:56:ea:31:61:bb:4e:
c1:6d:c3:73:15:ab:69:7c:ea:45:90:61:b1:96:9e:ae:02:6f:
75:42:21:65:1c:1c:52:86:c7:68:30:39:18:50:37:b4:86:ff:
e2:9b:06:2a:bd:43:d1:68:1c:7a:06:81:94:94:d3:0d:12:c5:
1a:34:50:f8:f4:95:b2:87:25:65:e9:1a:3a:b3:b3:44:33:d8:
6c:f3:23:1d:cd:ec:51:4d:37:7f:0e:44:4f:da:c9:d1:9c:0b:
65:49:9a:4b:8e:74:56:2a:9e:92:e4:e3:9e:41:f6:99:4d:22:
cc:80:97:63:6c:40:e4:55:c2:a7:e7:a7:c8:96:d4:dc:1a:5d:
6c:06:5d:3b:3c:9d:b7:11:df:f0:af:0d:d9:a3:01:9b:09:cd:
6a:b9:c7:a4:9e:42:97:c3:68:b0:58:54:6e:af:76:c2:ae:a1:
04:ef:04:9c:5d:dd:be:cf:a4:55:83:0b:95:1a:5b:f3:0e:7e:
34:41:1f:68:e2:3d:a9:00:38:db:bf:95:3f:21:2b:44:14:1d:
47:30:fe:fe:1f:85:be:d5:0b:5a:7e:0c:f1:d4:db:87:7e:35:
c5:9b:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:02:11 2024 by rpki-client on console-ams.rpki-client.org