Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/25AFt4kgG1FsyrEYSokp2lABaWo.roa
File: 25AFt4kgG1FsyrEYSokp2lABaWo.roa (raw, json)
Hash identifier: 3/S540cBhTbxewHqzMOaiHyEzorCTP4PRJplxhOIHpw=
Subject key identifier: DB:90:05:B7:89:20:1B:51:6C:CA:B1:18:4A:89:29:DA:50:01:69:6A
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018CC56EF76DB78964281C2F13674F4FD5E7
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/25AFt4kgG1FsyrEYSokp2lABaWo.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204954
IP address blocks: 192.58.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:6d:b7:89:64:28:1c:2f:13:67:4f:4f:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9005b789201b516ccab1184a8929da5001696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:8e:9c:62:87:f0:0c:32:94:03:1a:b9:15:
70:78:c4:37:01:e0:81:a1:57:ed:e1:b2:60:c9:89:
98:61:5c:1d:64:0a:f9:2b:49:f5:9c:bb:d2:8b:21:
95:68:fc:2e:01:13:d9:89:af:76:82:e7:3d:01:23:
3c:f0:1f:40:d2:45:dc:4c:8f:7d:3a:d2:ae:c3:c4:
42:da:c8:78:fb:36:f0:71:62:33:b2:2a:3a:28:02:
96:5f:0b:7e:a3:4b:15:bd:bf:d6:8b:c4:b9:fe:e9:
39:85:2b:d6:0c:f7:90:0f:f4:23:fc:b0:28:ef:da:
3d:8d:87:f3:7f:17:bd:a0:81:28:be:95:38:7f:d6:
5e:0e:7a:ba:86:69:7f:9b:f9:03:43:c6:89:69:f8:
a4:17:bb:ef:f3:48:eb:d2:d5:9d:fe:e8:2e:f2:71:
2b:b6:9d:65:7a:0d:87:44:73:b8:3d:4f:2e:e0:4c:
58:70:e9:bb:57:4a:08:36:b1:f5:09:8d:fc:07:ff:
42:e1:6b:f2:37:91:32:f8:f6:1f:ad:09:8a:c4:01:
d1:bd:e0:88:cb:4a:2f:df:69:17:92:f7:78:48:93:
b8:cf:b6:4a:71:91:a8:8c:66:09:04:77:ce:a5:3c:
4c:5a:0d:30:a1:b5:64:02:eb:85:62:fa:aa:ad:38:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:90:05:B7:89:20:1B:51:6C:CA:B1:18:4A:89:29:DA:50:01:69:6A
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/25AFt4kgG1FsyrEYSokp2lABaWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.60.0/22
Signature Algorithm: sha256WithRSAEncryption
57:5b:5e:aa:0f:87:13:e0:52:93:70:3d:7f:74:5a:3e:8e:8a:
d6:a1:de:61:41:e3:0c:a2:dd:0b:3f:f3:ae:cf:cb:b3:15:e5:
10:da:39:94:a6:bc:15:37:c5:af:4c:c3:ee:8b:cd:2f:51:83:
1a:21:c6:59:dd:15:75:8c:25:90:6b:07:c5:37:1a:ab:b6:17:
81:5f:a0:f0:e2:04:ef:f1:22:f8:d8:8b:56:8a:4d:94:e1:b0:
1c:c3:78:40:ac:c5:e1:7b:06:d6:85:10:81:9f:bb:83:0e:30:
97:5f:39:49:ac:d1:9a:ce:39:a7:4e:44:42:18:72:2a:9a:81:
89:a5:ab:e7:a1:27:cb:49:b8:e5:a4:60:60:11:cc:69:c3:f0:
be:11:d1:5c:e7:db:0a:6e:52:40:11:a6:36:10:93:9a:fb:4a:
ca:7a:56:20:f0:3c:c6:d1:9e:fd:2f:77:ac:2e:05:19:74:8c:
53:21:a6:a8:ea:5a:20:34:13:a1:cb:f9:b4:9d:b9:e7:bc:f8:
25:d8:04:43:ca:40:e5:fa:61:80:da:11:c6:2e:85:d1:5b:53:
b4:f0:65:7a:e8:4f:6e:17:61:18:7d:3d:bf:81:47:bc:bd:7e:
d3:47:48:02:a1:7f:b2:71:50:ab:ac:b8:e5:35:68:24:30:36:
bf:d2:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 18:43:06 2024 by rpki-client on console-ams.rpki-client.org