Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/RLkpZZEerxDSCOQmiQZnaynj5kw.roa
File: RLkpZZEerxDSCOQmiQZnaynj5kw.roa (raw, json)
Hash identifier: dKxqEqreKUKDHEai1he3EbjFkwJ8VEqZ7/68lbxog54=
Subject key identifier: 44:B9:29:65:91:1E:AF:10:D2:08:E4:26:89:06:67:6B:29:E3:E6:4C
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 018CC64B75211F2A83AB18616DEE10E94C03
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/RLkpZZEerxDSCOQmiQZnaynj5kw.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30848
IP address blocks: 94.185.124.0/23 maxlen: 23
94.185.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:75:21:1f:2a:83:ab:18:61:6d:ee:10:e9:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44b92965911eaf10d208e4268906676b29e3e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:12:7a:4b:46:29:a2:4a:88:2e:28:fe:17:
76:51:b8:07:bb:ae:37:28:64:00:4f:64:79:f3:8b:
a9:25:b5:7a:a8:4c:16:f8:ec:e8:91:cf:d9:5f:f9:
9b:6a:93:db:62:18:54:39:89:c0:e0:d8:91:a8:8a:
36:d0:05:01:8d:e2:f1:a6:e9:af:a3:02:54:bf:fb:
ff:1c:dd:59:fc:1a:a6:b9:07:f3:ab:59:ba:f9:4c:
82:39:18:de:a1:0f:eb:7a:10:dc:d8:c5:ec:75:3e:
12:c0:1e:68:98:14:61:4c:cb:97:92:af:f1:56:46:
86:76:7a:91:ea:6f:0c:91:72:c2:23:1c:b4:cd:4d:
09:61:ff:47:a5:70:f4:af:d8:b1:2b:7d:24:c7:42:
b1:19:c1:cc:3f:17:4f:ae:2f:f0:e0:77:53:68:41:
2c:ae:87:0d:dc:0a:65:f9:56:76:e6:f3:2b:e7:45:
20:14:f2:88:0a:cc:1b:19:11:a6:15:dc:17:26:49:
e1:d2:54:46:0e:30:d1:2d:af:67:7f:ef:62:f0:26:
9b:03:89:bc:59:c4:04:43:40:48:37:28:3d:05:ff:
93:a4:d7:c1:08:43:49:a5:e2:7d:6c:1f:14:59:3b:
ac:cf:f9:27:14:8a:2d:52:f9:12:06:9b:0f:74:76:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B9:29:65:91:1E:AF:10:D2:08:E4:26:89:06:67:6B:29:E3:E6:4C
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/RLkpZZEerxDSCOQmiQZnaynj5kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:1d:83:84:37:e8:d7:84:38:c5:31:46:5e:c7:40:27:1b:80:
40:60:31:c9:28:de:ae:96:c9:3b:75:14:13:91:92:36:3c:6d:
09:8f:b8:e7:09:48:21:d4:85:88:eb:e7:c1:ed:3d:a7:2c:6d:
37:ce:8c:d6:0d:1d:00:a6:bd:73:f9:d3:93:55:85:2d:73:58:
ef:fa:e6:1f:39:74:fb:36:2a:9e:9f:6f:75:b9:4f:75:00:47:
2c:48:5d:40:da:a4:55:d4:b4:45:fc:bb:f4:a7:af:db:c5:0d:
59:63:1c:49:7a:56:b7:30:94:32:79:6c:0c:a2:d1:e0:c3:8f:
03:3c:0f:59:09:2e:59:c6:0b:97:51:22:a6:dd:24:81:7c:a6:
83:73:a7:55:d8:e1:9d:02:39:78:0f:fa:00:06:bf:31:0f:81:
51:45:e6:79:aa:68:c8:35:60:25:89:d2:69:9b:fe:6e:55:3d:
9c:27:40:e2:4f:22:fb:58:39:15:02:6c:fa:93:43:0b:fc:6d:
36:39:dc:fc:ca:64:60:41:18:92:5a:30:3e:aa:22:18:80:cb:
cf:d7:6c:91:2e:55:16:43:29:f8:7a:83:82:d8:c8:ee:da:fb:
4f:1e:bd:a0:f5:36:f9:46:6b:0d:77:eb:c7:79:32:c5:f9:db:
d3:5a:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:28:42 2024 by rpki-client on console-ams.rpki-client.org