Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v5LODHxFLjuVgKWqDj8QoghGtNg.roa
File: v5LODHxFLjuVgKWqDj8QoghGtNg.roa (raw, json)
Hash identifier: s+MbrxoGmf59dmbcfUESgmY1n7WYdnazx+9bD/gF/8A=
Subject key identifier: BF:92:CE:0C:7C:45:2E:3B:95:80:A5:AA:0E:3F:10:A2:08:46:B4:D8
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCDE3D1E644DCB8CB5F93544F35A8B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v5LODHxFLjuVgKWqDj8QoghGtNg.roa
Signing time: Mon 01 Jan 2024 16:30:35 +0000
ROA not before: Mon 01 Jan 2024 16:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 37.34.88.0/21 maxlen: 24
46.20.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:de:3d:1e:64:4d:cb:8c:b5:f9:35:44:f3:5a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf92ce0c7c452e3b9580a5aa0e3f10a20846b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:7c:91:e5:e7:2b:5b:29:12:0d:23:46:99:
84:e0:3e:51:99:88:46:15:22:79:09:7c:36:b5:bc:
e0:15:df:30:87:c3:0c:32:d8:87:7e:9f:af:aa:e7:
83:bb:3c:b9:db:63:e1:3c:87:69:89:02:71:6b:fd:
5f:c1:73:50:97:6d:6f:66:90:82:b1:38:7a:af:b9:
2e:9f:84:86:24:b8:96:a3:0c:48:d7:f2:30:68:2a:
b0:22:b1:c1:a1:49:e6:13:de:68:d3:9b:03:76:b4:
5f:80:9d:13:e1:4f:10:17:cf:ac:d4:30:fa:41:2e:
88:fe:0e:68:b2:cd:42:9b:a0:ac:02:36:3c:ce:2b:
43:eb:a2:d6:6d:03:58:7e:73:c0:c8:f7:89:72:c3:
21:82:eb:e3:21:26:e7:08:53:01:54:ac:04:7b:d7:
db:71:31:5a:c3:d5:40:dd:b1:5c:a0:50:3f:47:d8:
35:2e:9a:0d:e1:fa:b6:1f:fc:b3:a1:bb:1d:43:a8:
55:50:a1:f5:fa:c0:fe:20:a0:8c:c5:73:0e:c0:6e:
0a:aa:d6:98:bf:ed:26:94:17:3e:54:ea:5a:78:6f:
bd:21:45:07:61:8e:83:36:b7:de:db:48:8b:0d:d3:
f6:1e:a1:8c:96:e8:78:aa:11:55:fe:14:06:02:b9:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:CE:0C:7C:45:2E:3B:95:80:A5:AA:0E:3F:10:A2:08:46:B4:D8
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v5LODHxFLjuVgKWqDj8QoghGtNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.88.0/21
46.20.210.0/23
Signature Algorithm: sha256WithRSAEncryption
49:38:c5:c6:86:f1:71:fe:71:71:8c:62:97:48:6e:db:05:b0:
e1:ba:71:d2:62:01:ad:d3:58:02:83:11:94:f1:a3:43:4d:4f:
bb:39:a7:4c:19:17:76:37:cd:0a:21:4c:a4:4f:57:54:bf:18:
e4:de:de:08:1a:0a:bb:59:cf:de:1d:6d:21:02:b4:f2:9c:85:
b9:fc:28:9b:41:73:58:71:27:dc:44:8d:82:c2:75:d8:4a:b2:
f2:a8:8f:8d:61:e8:58:3f:73:95:4c:cc:3b:8c:d4:e5:fe:8a:
4d:3b:b2:e1:80:c1:5a:a9:db:d6:de:2a:15:3d:b4:0f:7f:c4:
38:30:0c:b4:23:55:71:f0:47:d3:65:d6:e5:f2:3d:de:50:8a:
d5:ad:0e:73:1f:77:b0:9b:56:66:f8:6f:6c:20:63:08:3e:cf:
f8:64:2b:14:89:92:e5:a4:ac:04:78:5f:f6:4a:78:db:85:7d:
6e:f9:a5:0b:02:0d:d2:49:cc:e2:db:e3:9d:ae:82:8f:37:bb:
44:ff:af:a7:24:6c:65:70:df:b0:92:68:03:a5:a0:b2:31:e0:
a2:69:d3:cf:9b:1f:8e:ea:b8:eb:3c:71:a2:0b:23:40:ad:5c:
66:9b:25:1c:a6:e0:08:16:3d:a1:e3:d7:13:c7:74:67:66:59:
12:45:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:36:45 2024 by rpki-client on console-ams.rpki-client.org