Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lB8pFzQBPl1m0xwMIenXAuoha00.roa
File: lB8pFzQBPl1m0xwMIenXAuoha00.roa (raw, json)
Hash identifier: iQL/Jo28JV5CoTaikNlh26gz0wU83V9IjaYDBMqnd18=
Subject key identifier: 94:1F:29:17:34:01:3E:5D:66:D3:1C:0C:21:E9:D7:02:EA:21:6B:4D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CCA287075756ABCAB82F11E93F1594953
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lB8pFzQBPl1m0xwMIenXAuoha00.roa
Signing time: Tue 02 Jan 2024 12:31:37 +0000
ROA not before: Tue 02 Jan 2024 12:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 5.57.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:70:75:75:6a:bc:ab:82:f1:1e:93:f1:59:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 12:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=941f291734013e5d66d31c0c21e9d702ea216b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:b1:48:f1:67:b9:97:94:ce:7a:ff:8f:8a:
b1:a5:10:01:2c:95:ee:ae:a0:3a:53:7b:68:8a:23:
e9:fd:e8:6f:73:c5:03:10:1c:a5:33:2b:f2:66:ae:
fe:e9:16:13:32:20:ba:0c:61:80:2b:98:8e:43:8d:
9c:72:b6:82:f1:c1:8f:23:eb:7c:ad:e6:98:cc:db:
92:42:e4:ae:40:c1:cb:f3:1b:05:fe:1a:c0:33:86:
91:79:24:76:8e:3b:33:b3:5a:a5:34:23:f5:07:84:
15:10:96:c6:9f:e4:58:6d:bb:83:e8:30:19:b4:23:
9c:b7:fd:3e:12:97:7c:0d:dd:47:f1:a0:38:19:81:
81:88:7b:0e:8d:36:43:d7:66:71:d6:0a:67:d8:a7:
87:fe:73:2e:b4:bb:88:9f:01:24:cd:a8:db:76:ca:
fe:18:9c:b3:93:3f:45:b3:e9:d9:64:af:85:7a:61:
25:88:40:28:0e:14:de:ad:aa:cf:5a:a4:c9:40:ef:
91:d4:33:0d:37:73:b6:19:d0:c6:56:5f:4d:2e:36:
12:f1:52:af:a6:f1:5b:f7:02:36:4e:7e:91:cc:af:
ca:08:8f:a6:b0:19:44:23:bb:5e:de:c4:75:db:7c:
dd:3d:6a:80:9a:fe:6d:cf:cd:0a:5f:54:95:42:05:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:29:17:34:01:3E:5D:66:D3:1C:0C:21:E9:D7:02:EA:21:6B:4D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/lB8pFzQBPl1m0xwMIenXAuoha00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.37.0/24
Signature Algorithm: sha256WithRSAEncryption
60:00:6c:67:41:10:88:da:8a:96:a5:b9:0f:3f:7f:05:fd:cc:
8a:e7:d9:6a:8a:23:17:1c:02:0d:24:e8:b0:d1:94:d2:22:aa:
bf:6a:05:90:8f:4f:ba:99:f5:07:c3:13:78:5a:51:af:b2:24:
0c:a4:ff:2e:79:61:8f:01:b8:c0:dc:5e:40:d3:10:46:9d:64:
e2:9e:3b:f2:90:e5:a6:aa:14:81:b4:b3:f8:a2:f3:7d:a4:16:
6e:87:71:5e:bc:ff:e8:7a:39:fc:ca:6e:31:23:4a:32:a3:83:
84:80:20:0c:3e:6e:df:fc:8d:5f:a1:3d:85:44:15:52:06:ea:
ec:4b:8e:d6:1d:25:ab:40:4b:25:11:7f:98:1d:6d:f4:b7:a2:
26:c6:15:f8:4c:97:04:91:33:82:fc:5d:df:2e:e1:6d:ea:d9:
9d:55:98:7c:e7:aa:e4:cd:e1:e5:25:7c:cb:8c:9d:4c:52:05:
85:25:86:1c:23:d9:20:ef:d8:10:4b:27:25:6b:0a:08:f6:af:
4e:49:5d:48:cd:0c:bd:a3:c5:25:45:99:bf:06:44:d1:30:c8:
d8:01:1d:0b:53:f3:81:96:bf:57:4c:61:c3:f8:82:bb:c5:5e:
e3:54:8d:b1:01:8b:aa:0c:2c:f2:6d:49:8c:ef:7b:11:82:69:
50:c3:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:19 2024 by rpki-client on console-ams.rpki-client.org