Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/1V_cLrBkXLHlRqsa3i-j57TwXSs.roa
File: 1V_cLrBkXLHlRqsa3i-j57TwXSs.roa (raw, json)
Hash identifier: y8QqGsHWjRWVmoj2H1y6KCDlWDx7oiGv7UJCrx2jmPQ=
Subject key identifier: D5:5F:DC:2E:B0:64:5C:B1:E5:46:AB:1A:DE:2F:A3:E7:B4:F0:5D:2B
Certificate issuer: /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial: 018CC80159905F8731B5E5F38EA6C5CA93B1
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/1V_cLrBkXLHlRqsa3i-j57TwXSs.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 160.98.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:59:90:5f:87:31:b5:e5:f3:8e:a6:c5:ca:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d55fdc2eb0645cb1e546ab1ade2fa3e7b4f05d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:ea:90:ab:2c:91:d0:bb:bb:cd:58:4f:d8:
ec:3b:52:8b:94:81:32:02:27:69:2e:a5:0b:5e:de:
08:60:6b:f6:24:87:15:68:6a:55:4d:b9:d1:45:ad:
22:b3:2d:c8:ca:75:1b:66:fd:42:4f:b0:7b:71:bf:
27:ec:98:d6:8f:49:5b:61:eb:28:a4:c9:92:88:b1:
42:fe:d2:2f:98:c4:16:23:02:9e:61:c3:3b:5e:6e:
d7:f4:dd:1d:01:c9:50:31:2e:7b:d0:b1:6a:94:01:
5f:70:34:07:55:07:3f:f8:dc:73:d5:5c:ca:5f:d7:
45:ff:b4:8f:72:10:af:0b:c1:da:d3:34:58:16:1f:
36:a6:00:36:f1:94:ef:cc:d1:a9:aa:35:1d:b4:d0:
77:16:04:69:27:ff:86:50:b6:81:73:75:e0:95:1a:
43:54:9a:2f:a3:37:19:fe:3e:36:e9:c7:56:62:f0:
54:63:7a:30:b2:ed:8e:ee:94:56:d7:63:b3:73:d2:
6b:54:b7:f6:79:5a:f2:71:c5:98:b2:6f:88:49:9c:
b2:4f:40:d1:ad:07:b3:f0:af:48:b1:a8:26:1d:f5:
9a:a8:be:f5:c1:5d:0a:35:18:58:da:ec:64:24:dd:
ee:a4:34:77:35:81:d0:06:ac:8b:3f:7f:0b:0b:50:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:DC:2E:B0:64:5C:B1:E5:46:AB:1A:DE:2F:A3:E7:B4:F0:5D:2B
X509v3 Authority Key Identifier:
keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/1V_cLrBkXLHlRqsa3i-j57TwXSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d2:c9:6d:39:5c:1d:90:cd:76:ba:1a:8d:d8:53:88:89:08:14:
e6:9a:72:05:86:32:12:f4:9e:0d:0c:2e:79:9f:ab:55:ab:6e:
1a:08:ce:72:a7:59:84:28:60:59:ae:94:66:08:5e:71:86:75:
b3:c8:c5:e0:19:96:71:de:c0:48:b3:3b:0e:38:2e:26:c5:61:
5e:40:b9:12:cf:12:9d:aa:64:bc:81:8f:7d:6a:72:79:9b:80:
e0:fd:a7:3d:e9:80:a0:43:fc:b4:e7:26:d3:a4:a4:27:df:89:
6e:3a:31:c9:08:ae:2d:07:cb:e0:d6:a5:ab:79:63:93:65:6b:
33:1c:47:e1:91:56:3f:a0:91:dc:92:b4:ff:90:27:dd:d1:01:
30:ae:57:60:b5:ac:f9:ea:2e:26:12:d1:67:02:71:e8:11:35:
b9:15:2a:90:6d:9b:dd:3f:26:73:96:fa:68:80:a5:78:e1:a2:
fd:0d:bc:42:21:b4:28:6c:1f:29:d8:45:f1:71:bd:cb:f6:4e:
ca:64:b2:ca:e7:ab:19:28:c6:90:90:f4:85:13:3d:8b:7b:ce:
4c:be:36:46:eb:3c:cb:99:a9:f3:4d:c8:af:cc:67:da:4b:8f:
63:34:b3:d1:6f:3d:ad:6e:f3:0b:d8:06:6b:c8:c0:2f:33:8d:
c0:b8:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:45:09 2024 by rpki-client on console-ams.rpki-client.org