Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa
File: d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa (raw, json)
Hash identifier: CTN71J8wiZZWx8T3NL49HrVZvdmjk3ZG/40s/50Pnm0=
Subject key identifier: 77:91:66:E8:AA:C3:A6:41:75:63:5B:75:B7:2C:F2:6D:2A:56:5A:F9
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79B7C9670B0A1CADAEE31FD80AF4D
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 176.57.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9b:7c:96:70:b0:a1:ca:da:ee:31:fd:80:af:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=779166e8aac3a64175635b75b72cf26d2a565af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:ad:07:da:08:0d:a3:00:4c:9f:5f:17:20:
4b:db:44:52:5d:dd:bd:1f:af:00:26:79:d0:29:6a:
2a:38:15:fd:b5:76:b9:65:88:da:9e:a3:f4:ad:ab:
ed:25:d4:1e:c9:7b:a3:8e:79:1b:88:b2:5d:5b:e7:
df:9a:0a:a6:33:cf:73:e8:e3:bc:b5:6b:f8:37:b7:
22:64:19:69:fa:32:ad:06:7a:b6:e5:e8:af:7c:cb:
ac:13:1a:d1:b0:c9:ee:85:f3:fd:41:35:c5:16:a3:
f7:91:1c:b5:46:27:ea:e1:01:d7:d9:68:19:e5:22:
e3:83:d3:17:de:8c:a4:91:4f:7b:2d:32:43:de:87:
01:e5:7c:3f:60:aa:f4:6f:ad:61:42:6e:a1:0c:f3:
08:92:e4:ad:82:89:54:36:2a:6a:df:46:12:38:e4:
41:14:5c:3a:98:f7:8e:e5:ca:d0:f8:69:d9:5c:60:
14:0e:55:42:4b:4a:9c:ba:d9:3d:20:1a:78:ff:b4:
c3:40:99:62:35:ea:a1:cc:ea:c4:98:f7:80:a6:d0:
c9:5d:d8:b5:e8:b5:08:0c:8f:ac:99:c8:96:b9:c2:
5e:8c:4f:44:28:40:b3:c3:0a:88:5c:ab:16:d8:c0:
85:7f:57:72:aa:43:fa:68:fd:54:cd:63:05:56:e9:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:66:E8:AA:C3:A6:41:75:63:5B:75:B7:2C:F2:6D:2A:56:5A:F9
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5Fm6KrDpkF1Y1t1tyzybSpWWvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e7:6f:6f:3e:b2:a7:88:1d:90:8c:79:4b:21:e7:36:37:86:
39:85:be:58:be:fd:5b:1d:1a:39:54:c5:78:0e:b2:70:4b:68:
d9:8a:b5:e7:5e:53:41:3c:b5:74:ae:4e:37:19:9d:ca:43:9a:
4f:f6:ba:d4:2a:1e:e8:ae:5a:18:d1:da:0a:97:5e:9e:6e:95:
aa:dc:df:84:97:7f:88:5e:5f:46:52:01:30:19:3d:3f:1f:87:
2b:9d:27:5f:ac:eb:96:35:f4:31:21:1d:2b:12:11:72:c3:9b:
f9:0c:70:4c:32:ab:cd:08:6c:5e:2a:bc:df:0d:d0:24:69:e0:
fa:fa:73:8d:8e:1d:a0:cc:e5:5d:7e:c5:0b:28:0f:89:ef:28:
23:06:b6:8d:1c:a9:c5:99:09:23:75:41:5b:2d:bc:34:60:c1:
dd:5b:a1:6c:18:db:f9:2c:4e:bf:ea:e8:06:4c:a3:48:65:6d:
e3:6d:26:f9:22:d1:23:02:dc:ab:87:e5:9f:68:a3:22:81:1f:
eb:b0:1f:fa:d0:ed:f4:6f:1e:65:18:46:11:01:59:d4:b7:33:
79:ca:19:60:68:10:09:80:96:a2:31:4b:14:29:cd:f6:f1:b2:
0f:34:2c:c5:be:87:2e:83:39:ca:69:99:a8:ae:ee:22:47:7f:
42:40:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:09:30 2024 by rpki-client on console-ams.rpki-client.org