Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/flZcKio-FEsaw6kCuJkLA2m5xx8.roa
File: flZcKio-FEsaw6kCuJkLA2m5xx8.roa (raw, json)
Hash identifier: luO+KLaKsnlAYifshUXl9XoExVtc5zot8H0Uj0B75QA=
Subject key identifier: 7E:56:5C:2A:2A:3E:14:4B:1A:C3:A9:02:B8:99:0B:03:69:B9:C7:1F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7DCB9930905AE75DD16EF8696EB8
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/flZcKio-FEsaw6kCuJkLA2m5xx8.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61276
IP address blocks: 141.101.196.0/24 maxlen: 24
37.18.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7d:cb:99:30:90:5a:e7:5d:d1:6e:f8:69:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e565c2a2a3e144b1ac3a902b8990b0369b9c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:dd:84:ba:c2:0a:85:e0:e9:0b:5a:b3:d8:
21:ea:f4:bc:3d:67:4d:bc:8d:2b:47:6d:c8:ac:4d:
2d:e4:f8:9d:a6:b2:df:ef:83:69:39:1e:8b:68:d7:
2a:91:d6:08:51:b0:88:81:b7:d7:56:d8:1b:b8:b1:
09:af:79:27:5e:8d:ba:d6:94:92:c8:da:53:cf:65:
2b:e3:92:75:e3:b4:82:3f:45:5b:d5:1e:62:12:03:
d2:01:3a:16:69:df:52:b2:84:12:09:76:dc:48:ff:
56:7a:3c:d9:3e:a1:13:f6:8f:58:77:7f:f0:52:e0:
d0:ff:9f:01:ee:e8:cb:0d:43:81:79:72:d9:0a:d5:
f0:01:67:43:ff:a2:0e:92:0e:ac:7c:3d:28:4d:7c:
bb:68:6e:c3:c2:f2:65:ad:f3:64:2d:b0:92:b2:9b:
6b:04:00:a4:85:8f:58:41:5f:85:b7:a6:91:52:af:
8f:09:83:78:3a:37:a1:70:8f:fe:eb:2a:84:45:5f:
6d:8e:95:11:a5:8d:82:8f:80:35:15:7d:4d:7a:c1:
3d:ec:1a:44:92:ca:97:e5:74:d5:bb:f4:8d:e2:00:
fb:5c:67:7e:9f:be:1a:40:2b:ac:c1:3f:24:6e:bf:
b2:3e:63:4d:22:1a:c6:6e:2a:3f:8a:4b:b5:6b:72:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:5C:2A:2A:3E:14:4B:1A:C3:A9:02:B8:99:0B:03:69:B9:C7:1F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/flZcKio-FEsaw6kCuJkLA2m5xx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.21.0/24
141.101.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:39:58:9f:93:6a:2a:b2:7d:fb:11:f9:64:78:c9:1d:2c:ed:
6e:65:dc:eb:e3:fd:41:6c:51:a8:47:27:53:66:00:ce:11:97:
01:50:55:3c:6a:d2:bc:26:6a:89:12:9f:b3:9a:20:6c:12:2f:
52:b9:5f:e7:8c:fc:6e:b4:2b:24:38:c3:fb:c4:f7:c0:c7:ae:
c5:bf:9a:f4:84:86:e8:a6:f0:85:1e:e9:e0:00:bc:ff:c1:23:
19:62:14:1a:16:ea:2c:75:18:53:d3:72:18:b1:4a:33:32:53:
07:d8:84:7f:b6:43:ff:c0:53:be:fd:20:a1:1b:b2:79:7b:38:
70:ee:a1:a8:f2:d5:30:1b:80:97:9e:e5:fd:60:ec:91:35:bd:
82:e8:9d:29:3f:e1:fe:bb:01:b8:0f:0e:27:1d:af:12:eb:f6:
86:dc:5d:3a:9a:e8:f3:dc:b1:d8:95:e4:2f:22:16:08:2c:47:
ee:23:2f:92:bf:4d:bd:02:69:63:78:5a:fa:f5:da:dd:af:c4:
c8:14:02:e9:ea:c7:da:e9:d8:ff:8d:eb:29:88:47:5e:30:67:
f9:76:6a:0a:73:e7:7f:2b:b9:de:21:d7:29:62:4d:37:56:26:
e3:80:c6:e7:67:76:4e:fc:8e:26:a0:00:d6:e4:4c:dd:05:07:
c1:8f:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:12 2024 by rpki-client on console-ams.rpki-client.org