Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EU55Z6QfBjgB60NRHGHp42m8ZR0.roa
File: EU55Z6QfBjgB60NRHGHp42m8ZR0.roa (raw, json)
Hash identifier: jL3jkoJG9jlB8Xogm3LsIDAmhl3IfOfmHQQh8uqoM6A=
Subject key identifier: 11:4E:79:67:A4:1F:06:38:01:EB:43:51:1C:61:E9:E3:69:BC:65:1D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501107E517DDC7A07E861220649A14A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EU55Z6QfBjgB60NRHGHp42m8ZR0.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42874
IP address blocks: 171.22.102.0/24 maxlen: 24
171.22.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:10:7e:51:7d:dc:7a:07:e8:61:22:06:49:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=114e7967a41f063801eb43511c61e9e369bc651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:cc:95:fc:77:85:01:82:c8:05:34:d2:08:
9a:36:1d:fd:62:5a:cb:85:5c:fc:35:82:89:86:0d:
58:81:87:05:65:ba:05:a3:e3:16:f8:f7:45:30:b7:
1c:48:90:58:44:ba:75:25:86:29:21:74:37:46:e0:
ed:c0:19:1e:60:df:94:26:26:cf:0e:a9:81:c8:bb:
65:4a:b3:24:95:60:30:5a:95:8a:60:8b:c8:b7:6e:
a2:f5:ed:11:ce:e6:dd:a3:2b:85:36:70:77:48:12:
83:62:77:55:35:23:ea:83:d4:02:84:a7:c0:de:33:
7d:54:c6:c9:d6:6c:c8:ce:39:73:8f:6c:5d:fb:9e:
f2:1c:cd:a3:3c:79:58:f0:d0:15:02:f5:10:ab:01:
81:b8:22:f0:f4:31:a6:6e:cc:6a:93:2f:fe:51:f1:
e6:95:78:d9:cc:fd:66:56:5c:64:e6:23:9a:77:7f:
03:f2:02:36:96:68:2d:de:e5:de:01:2f:b3:a0:f0:
dd:c2:17:f3:8a:34:fc:3d:39:a1:99:85:a3:57:b8:
1b:4c:ec:7f:dd:6e:21:af:51:7d:2d:ee:82:5e:d0:
9e:2f:69:bc:60:36:f7:98:45:88:f2:34:ee:cc:b0:
d8:76:87:2d:be:48:6b:95:95:ad:c6:2f:9d:70:b3:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:79:67:A4:1F:06:38:01:EB:43:51:1C:61:E9:E3:69:BC:65:1D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EU55Z6QfBjgB60NRHGHp42m8ZR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.102.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:c7:9d:e3:66:45:8d:ef:7d:20:d9:34:29:1b:20:59:f6:a2:
61:62:50:49:25:5c:1d:3b:6f:9c:fa:b4:f0:54:ce:e5:a0:f9:
ab:02:0a:f0:a1:23:9d:5a:0f:5c:36:1e:ca:8e:01:37:1b:5c:
84:26:cd:50:41:ee:37:a5:7b:b3:55:59:46:ef:45:47:ee:a9:
27:fb:95:d2:83:7b:0c:20:64:eb:15:dd:55:43:3a:5c:de:1c:
2a:08:52:8c:ce:99:cf:ff:6c:7d:09:aa:e8:bd:05:5e:9d:17:
24:38:9f:e0:1a:84:41:28:6e:87:87:f1:43:e7:bd:b8:b4:d9:
a4:b9:5a:11:e5:36:a5:61:35:19:d5:89:dd:bc:dc:d7:76:6b:
76:5e:e6:55:78:e3:25:12:8e:cd:c7:84:a2:e3:fc:f6:2b:e7:
5b:2a:9a:e2:5c:aa:5d:82:3b:11:a6:95:48:23:47:b6:a2:d0:
20:91:0c:bb:d5:22:73:b8:4b:87:b5:7d:69:7a:38:77:94:92:
78:a5:06:42:8d:e2:ba:1e:09:81:67:4a:cc:0d:0f:b2:06:2b:
46:11:32:cd:17:c6:a2:99:b5:08:96:38:a7:98:7f:75:ee:47:
a0:b8:47:04:f0:87:5f:49:21:f5:61:93:79:0d:4d:11:86:dd:
ed:6d:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:49:05 2024 by rpki-client on console-fra.rpki-client.org