Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pQc49Qi1YzDK8R4nRvUfXlvZppA.roa
File: pQc49Qi1YzDK8R4nRvUfXlvZppA.roa (raw, json)
Hash identifier: 4E0938HA82DVwnM3Dq7rmdmVJ+Jci6NS70T6ysu7o7E=
Subject key identifier: A5:07:38:F5:08:B5:63:30:CA:F1:1E:27:46:F5:1F:5E:5B:D9:A6:90
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A8BDD21FEC4EAE9651BFE7496CBA7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pQc49Qi1YzDK8R4nRvUfXlvZppA.roa
Signing time: Mon 01 Jan 2024 18:30:23 +0000
ROA not before: Mon 01 Jan 2024 18:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210226
IP address blocks: 128.0.65.0/24 maxlen: 24
37.230.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8b:dd:21:fe:c4:ea:e9:65:1b:fe:74:96:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a50738f508b56330caf11e2746f51f5e5bd9a690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:45:fc:43:b0:54:b3:a9:ec:a4:31:ac:52:
51:b5:bd:30:9d:52:60:b6:ee:b1:7d:7e:25:dc:73:
4f:4a:27:9a:fc:65:9a:bf:3a:cb:d3:0e:54:63:fc:
b1:57:b5:f4:ab:01:a2:f1:11:57:58:99:9a:67:7c:
d6:2b:c7:c6:53:bc:3b:cd:f0:e9:25:3e:17:67:62:
57:5d:28:7b:d1:9b:0b:73:90:5e:06:d0:fd:56:77:
0c:cf:0c:54:5b:9d:bd:31:d2:dc:01:9d:cc:72:d5:
94:5f:01:4d:b4:c9:e6:8b:86:62:39:4c:68:75:78:
2a:c8:ff:ed:1b:89:eb:f3:3a:c7:a4:1c:28:1b:1a:
fa:12:16:b5:04:d8:b5:5e:5d:da:f8:b6:98:87:fe:
28:16:7c:57:ec:38:fc:16:4c:b9:c5:5d:e0:a7:15:
bd:c1:03:88:44:11:89:19:64:b7:d0:18:53:90:9b:
06:61:df:5f:8c:80:bc:c4:c1:ad:ed:77:d0:f8:05:
b6:1c:31:3c:5e:93:4e:cf:41:bf:e7:57:59:cf:85:
6a:b3:5f:7b:be:59:4b:a3:7a:d3:e5:74:cb:1c:54:
8e:9d:f3:ac:8e:f1:4f:ae:76:63:c3:47:38:76:b8:
7c:a6:eb:f4:33:11:da:3f:4d:64:64:6b:e4:c3:8e:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:07:38:F5:08:B5:63:30:CA:F1:1E:27:46:F5:1F:5E:5B:D9:A6:90
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/pQc49Qi1YzDK8R4nRvUfXlvZppA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.128.0/23
128.0.65.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5c:bc:e3:5b:ca:d9:cf:d7:d6:df:8a:4d:db:b7:5d:7c:fd:
c6:15:b8:d2:2a:6d:2c:8a:11:ed:ba:b3:f8:77:26:27:25:88:
9b:be:de:b9:1f:2e:da:d8:77:fc:49:50:6e:fe:91:0a:cd:b1:
ee:6b:58:b0:66:09:61:a4:58:77:71:df:04:bf:67:b2:d4:d4:
12:5b:89:12:f5:de:44:ab:d4:77:18:03:fb:ba:2b:24:87:1f:
4e:69:ce:be:81:e1:a0:9b:c3:90:ba:31:8c:08:87:34:a2:0f:
88:28:26:0e:94:b2:46:0a:7c:1a:a9:88:5e:cf:04:b3:97:a6:
31:13:25:67:dd:ae:c3:25:d8:a9:1a:44:f4:a1:33:6f:f3:f3:
e8:6f:a6:e9:43:79:2f:0c:95:6d:2a:43:0e:cb:37:00:a3:c0:
41:25:1b:fd:5d:35:e2:2d:c8:e3:0d:52:39:14:3f:b2:66:cd:
56:37:24:a7:79:b2:8a:6a:62:1e:51:ff:9d:2b:14:c0:58:77:
e4:8d:67:04:2b:b4:c8:17:2d:8d:be:a0:9f:4e:87:75:ce:de:
59:26:ea:bb:84:54:ce:b9:7d:58:bb:68:b4:20:91:f9:f0:c7:
ee:1f:73:a9:1b:a4:d5:6e:88:7f:c1:99:23:cc:7d:44:4f:92:
03:83:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:05:22 2024 by rpki-client on console-ams.rpki-client.org