Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/c2o_5YuAjGFiZsAoV_Gk-_JMVBw.roa
File: c2o_5YuAjGFiZsAoV_Gk-_JMVBw.roa (raw, json)
Hash identifier: kXFeUmDFfs5kB95tBVs/g2q1rWs6fZvteAgvqMioAeI=
Subject key identifier: 73:6A:3F:E5:8B:80:8C:61:62:66:C0:28:57:F1:A4:FB:F2:4C:54:1C
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 018CC2DB4BF320E5BD652F73F656A1C047D6
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/c2o_5YuAjGFiZsAoV_Gk-_JMVBw.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62313
IP address blocks: 185.63.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4b:f3:20:e5:bd:65:2f:73:f6:56:a1:c0:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736a3fe58b808c616266c02857f1a4fbf24c541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:ac:82:5d:b4:9a:18:ab:79:f9:cd:27:95:
8b:3a:49:c0:91:20:2a:c3:c1:7c:3d:db:12:70:23:
cf:b0:f8:9c:82:15:26:a2:65:6a:27:e3:9f:de:2e:
f9:0b:d2:15:78:b7:c2:31:af:6a:3f:29:5d:0c:09:
84:ab:34:b3:72:58:08:b8:13:d0:72:43:88:cb:7c:
9d:80:49:7b:c8:00:5d:aa:08:ae:e7:14:a7:64:ed:
ca:4d:60:17:26:bc:5a:43:fa:4c:86:81:9c:f6:42:
ae:70:2e:d1:b1:b0:23:75:e3:0f:14:4b:c6:da:39:
15:e4:b1:91:6b:af:02:b4:61:c0:fe:2a:87:96:84:
4f:57:4e:25:ef:a6:00:42:49:2e:e0:31:51:2d:7d:
13:7a:87:f8:4a:12:cd:83:ad:59:21:d7:81:a4:10:
4a:57:3d:68:94:b4:93:42:f3:9a:d9:ce:a3:3d:e4:
e6:76:49:19:ce:4a:1d:4a:ad:71:a1:12:7f:8f:b2:
c4:d0:71:a3:a4:4c:0c:6f:bc:46:c7:3f:12:f5:49:
07:4a:67:8b:86:0c:d3:f4:f9:19:6c:7d:3d:86:42:
9c:a7:aa:27:81:10:f3:1d:a5:c9:cb:ae:be:d7:c9:
ad:a1:3e:79:68:8f:47:a5:78:de:4a:4f:aa:44:61:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:3F:E5:8B:80:8C:61:62:66:C0:28:57:F1:A4:FB:F2:4C:54:1C
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/c2o_5YuAjGFiZsAoV_Gk-_JMVBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.128.0/22
Signature Algorithm: sha256WithRSAEncryption
74:77:0c:f4:fe:53:66:be:6d:08:22:01:4b:0e:81:ab:b3:e2:
c6:61:97:0c:77:59:5b:94:5e:c6:1a:1d:90:91:51:32:71:40:
0b:a4:ed:30:c4:c4:e6:f3:00:c7:5f:af:b1:71:3b:91:df:da:
57:27:01:39:60:ec:d8:00:71:6d:f2:08:53:45:4f:fb:68:53:
29:f2:3a:1a:48:62:b7:97:63:d6:35:f1:74:9e:48:66:fa:6c:
39:94:82:69:e9:73:c2:0e:f1:f8:4a:9f:3e:22:9f:08:84:ef:
65:5b:06:f1:d3:ff:47:ea:ee:9b:4c:f5:de:93:a8:2c:26:10:
28:a3:7a:0e:7b:d9:aa:d7:3a:8b:89:20:6c:64:2e:46:7e:58:
81:af:82:f7:ac:4c:e0:bc:df:8c:55:70:55:fe:88:32:37:b2:
df:e2:31:af:e5:63:eb:f0:fa:e4:47:88:3d:bd:ce:a2:90:b4:
5e:df:4c:df:dd:16:fe:28:c7:69:48:4c:79:0c:62:b7:71:f9:
10:39:03:04:6d:a6:ec:6f:9b:8a:18:ee:83:49:00:31:93:7b:
53:cf:51:c6:b5:ac:37:23:c3:98:a8:03:63:36:87:f7:32:75:
2b:c6:e1:10:ca:cc:91:43:08:d3:29:08:6f:f0:a8:5c:b1:2a:
30:42:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:43:33 2024 by rpki-client on console-ams.rpki-client.org