Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yG3ESKV8SlDX8VgIVAwchjKDF0k.roa
File: yG3ESKV8SlDX8VgIVAwchjKDF0k.roa (raw, json)
Hash identifier: c8v7h9uRmVvYW9Xdh9ESf07w5ed+HSznrcZJajM7bE0=
Subject key identifier: C8:6D:C4:48:A5:7C:4A:50:D7:F1:58:08:54:0C:1C:86:32:83:17:49
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010B204C210E38FF17E85BA23DFBBB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yG3ESKV8SlDX8VgIVAwchjKDF0k.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22168
IP address blocks: 162.249.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:20:4c:21:0e:38:ff:17:e8:5b:a2:3d:fb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c86dc448a57c4a50d7f15808540c1c8632831749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:20:b3:69:51:58:53:4c:d6:07:cb:ca:6a:a9:
8a:5a:8e:b4:56:d6:70:39:94:35:20:d8:03:9d:55:
55:10:e2:6e:47:4d:9e:30:79:e5:2e:1e:c0:be:4e:
6a:f5:1b:f9:cc:cf:7d:9a:b0:33:6c:46:bf:e3:bc:
64:c6:b9:df:9c:b5:ea:d5:d6:47:63:a0:1d:4e:79:
4f:8a:eb:ff:8f:19:42:4e:47:ae:31:0f:af:62:5f:
01:e4:67:63:52:bb:0b:1c:23:24:dd:4e:67:36:7e:
dc:8b:88:8f:20:9f:40:70:2f:1b:61:a2:0b:50:5e:
17:f9:b1:76:33:ba:6b:79:25:da:e3:47:b2:f2:3f:
57:a4:2b:15:b5:46:cf:19:eb:51:b0:39:d6:ff:28:
e6:43:dc:fd:53:37:59:da:e4:2e:61:5e:1b:5d:3c:
b8:f3:58:36:e6:64:27:d3:2b:58:48:92:51:31:2f:
96:3a:31:e4:c0:5d:5b:52:50:bb:8c:c5:3f:c0:5b:
5f:f9:48:77:1a:72:d6:af:94:7a:3b:6c:ff:c2:d7:
6c:07:01:c5:d8:96:3e:ec:be:7e:0b:ad:ce:9f:9e:
84:f7:58:87:9b:25:1d:cb:03:f7:e8:46:b8:ce:64:
37:98:f7:de:29:e5:09:2d:5f:0b:18:2c:f8:d8:b4:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:C4:48:A5:7C:4A:50:D7:F1:58:08:54:0C:1C:86:32:83:17:49
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/yG3ESKV8SlDX8VgIVAwchjKDF0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.249.64.0/21
Signature Algorithm: sha256WithRSAEncryption
70:91:27:b4:f8:ca:17:83:c4:bd:62:06:64:da:e8:fb:79:42:
8d:d3:b1:bf:ad:24:20:49:fb:04:3c:e0:e9:ef:83:80:c8:d9:
5a:f3:f2:66:64:11:9e:50:f7:81:2d:8f:a1:9d:e0:55:34:7c:
2f:1b:43:ad:2a:e7:11:73:88:97:c1:5d:33:13:0e:aa:95:0d:
20:e7:ae:e8:95:39:48:e7:8b:db:eb:94:cf:6a:a4:c3:08:c0:
0f:21:31:cb:49:92:44:fb:4f:44:a1:06:7b:be:bb:06:66:27:
5f:98:3a:0e:2d:58:8d:13:f9:b9:67:be:cc:8a:08:b5:57:f3:
00:86:02:bd:46:34:96:6b:9c:de:dc:bd:04:d5:dc:47:f1:5b:
65:f5:48:5e:9a:8c:66:65:01:f6:8f:f1:9b:dc:c6:6d:54:57:
fe:fa:0c:76:4b:c1:6b:fb:98:5f:b0:3b:b1:8f:b2:ef:2d:82:
df:a5:7b:87:5e:6e:00:ee:fa:38:5e:af:08:0c:0d:24:40:29:
42:e4:b0:ed:b7:2f:cf:d7:1d:e1:0a:a4:70:ce:da:95:75:1e:
ab:10:26:0c:85:cc:a1:3c:4e:e3:f5:04:70:35:06:2f:7d:86:
a1:c2:b9:40:89:05:b8:bf:12:85:5d:44:55:dc:60:e0:6a:fe:
1e:06:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:34:00 2024 by rpki-client on console-fra.rpki-client.org