Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/p4BgF66hFnB7ocoZg0eiZV_S7pw.roa
File: p4BgF66hFnB7ocoZg0eiZV_S7pw.roa (raw, json)
Hash identifier: Q9Gcw+N17h5z8Zsn+qz7u5NVLu+j3POJYfiVdthky88=
Subject key identifier: A7:80:60:17:AE:A1:16:70:7B:A1:CA:19:83:47:A2:65:5F:D2:EE:9C
Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial: 018E6340A5EF76B1A1BD346799B3669D692E
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/p4BgF66hFnB7ocoZg0eiZV_S7pw.roa
Signing time: Thu 21 Mar 2024 23:02:44 +0000
ROA not before: Thu 21 Mar 2024 23:02:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 185.36.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:40:a5:ef:76:b1:a1:bd:34:67:99:b3:66:9d:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Validity
Not Before: Mar 21 23:02:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7806017aea116707ba1ca198347a2655fd2ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:74:6d:fb:6f:ae:de:bd:01:ab:d7:78:24:
06:3e:32:4d:a0:e0:1b:a7:f2:1e:fb:2f:1d:ec:1a:
13:1c:5b:70:a8:5a:09:e4:85:d5:da:ae:65:96:eb:
23:09:a3:e2:97:e1:ae:e8:f6:89:86:16:d7:ca:9d:
ed:e8:3e:dc:4e:fb:dc:58:c6:5c:27:1e:a9:45:8a:
cf:5a:8d:9b:87:9d:29:53:42:ce:a4:8d:b1:c9:e6:
dd:34:bf:43:7c:bf:64:1e:be:fb:6f:c8:62:18:28:
34:46:71:d1:b5:d9:63:d1:b2:97:93:dd:f4:4c:10:
4e:7e:ff:0b:fb:a1:54:c3:81:f8:67:90:68:e4:76:
35:68:50:47:5d:14:03:b1:6d:d8:f5:fb:95:f2:22:
13:c7:82:01:88:e7:74:77:d5:cf:42:e1:1e:68:77:
0e:a8:ca:25:a5:2a:a2:df:94:92:6c:43:d6:12:59:
e9:f6:5d:8a:70:27:5d:f0:ee:44:e8:b1:c2:85:8b:
d9:7d:7f:81:1d:a7:8a:43:bf:a0:5f:7e:83:6a:0e:
95:4c:5c:cf:31:a9:f9:44:94:35:be:b5:26:11:92:
17:89:51:cf:07:af:10:a5:91:91:20:66:aa:1e:6c:
b3:6d:85:6f:56:0a:a3:ab:72:50:80:1a:89:5b:0a:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:60:17:AE:A1:16:70:7B:A1:CA:19:83:47:A2:65:5F:D2:EE:9C
X509v3 Authority Key Identifier:
keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/p4BgF66hFnB7ocoZg0eiZV_S7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.147.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:b1:27:db:d9:e6:8c:9a:6e:ea:04:a8:24:45:74:1c:27:
5f:6e:60:0f:03:46:ba:f3:36:19:16:31:0d:08:c9:17:39:b7:
2f:90:be:eb:92:02:23:4b:31:bd:c0:d0:f8:04:1c:bb:9b:e0:
1b:4c:a7:00:8a:59:86:c6:6f:3f:1d:21:f8:19:db:33:c9:85:
b6:e1:11:45:1f:b9:56:3c:98:03:02:f2:5d:ab:b2:31:96:e8:
f6:92:e5:b6:e5:ae:4e:c8:ca:6b:1f:97:34:24:9c:3b:e2:98:
3b:92:fb:76:02:2a:f4:d4:4f:b8:4d:3a:72:bc:a2:d2:75:60:
f0:46:76:d2:6e:54:fd:c9:ff:e6:a2:b4:c6:23:a1:d1:4c:78:
9d:ff:d5:7a:6a:d8:e1:66:22:d9:62:22:07:34:bb:da:cb:d3:
42:7a:80:8f:bf:3a:ba:8c:57:f1:5a:b5:1b:b8:d3:bd:c0:82:
51:b2:b0:bd:b3:46:5f:bf:d6:ea:21:e0:3d:41:ec:cf:35:c9:
9e:72:45:6f:2e:8d:14:dd:cd:4c:aa:0c:67:5b:8a:95:6f:63:
01:0b:8f:e2:53:c8:24:c6:a7:ae:5a:1d:1f:2f:ec:13:55:01:
56:06:44:a3:53:8c:dd:0d:6e:a0:ae:38:55:f2:f0:b1:0f:e6:
dc:6a:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:35:59 2024 by rpki-client on console-ams.rpki-client.org