Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/pOQFD6olOCMpPVRX7mjtiQFRZ1g.roa
File: pOQFD6olOCMpPVRX7mjtiQFRZ1g.roa (raw, json)
Hash identifier: gitoUt2WUl4civIGZzyXtaqZoCK5P6tEdzl8L//nUyg=
Subject key identifier: A4:E4:05:0F:AA:25:38:23:29:3D:54:57:EE:68:ED:89:01:51:67:58
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276EC01FAD232B1B0D66C3CB21BD59
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/pOQFD6olOCMpPVRX7mjtiQFRZ1g.roa
Signing time: Mon 01 Jan 2024 22:31:39 +0000
ROA not before: Mon 01 Jan 2024 22:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206770
IP address blocks: 157.25.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6e:c0:1f:ad:23:2b:1b:0d:66:c3:cb:21:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4e4050faa253823293d5457ee68ed8901516758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:dd:e2:75:7f:73:24:43:25:d8:01:f7:ba:
5f:c6:86:58:45:eb:d7:44:33:01:e7:2f:65:c0:ed:
ed:6d:0c:1b:7f:3d:c6:08:43:56:38:5b:15:5f:4b:
b2:49:69:b5:90:14:70:fc:97:13:cf:ba:40:db:6a:
03:c0:31:7a:61:58:af:ae:47:48:86:0a:ad:16:27:
d7:d8:ab:53:cf:11:4e:d4:a1:24:04:db:d7:b9:29:
76:32:6c:4e:0b:81:ab:a3:93:bd:68:17:ab:55:e8:
15:fa:98:f2:af:07:66:9d:ba:b6:18:98:75:fb:71:
4d:3e:3f:5e:2b:b8:1b:c6:49:14:13:e5:6b:1a:82:
89:eb:8b:9d:58:e5:79:21:a4:b3:3b:d4:34:8b:2a:
73:3a:ec:cb:11:ff:4c:91:fd:e5:18:8c:82:b4:00:
02:f9:b6:cb:57:27:d4:c4:15:f8:52:6b:82:ab:eb:
62:f4:6b:e9:d2:a8:cd:e4:23:98:8c:ac:65:c1:27:
01:55:15:7b:f8:96:ae:44:64:bd:20:79:4f:ba:87:
6f:1d:c2:56:ad:6a:48:98:9b:70:c4:ad:2b:16:52:
aa:d7:21:92:18:4a:b7:72:d9:e8:0d:6f:d1:ba:40:
14:9e:4e:97:71:a3:39:8c:fc:c6:8f:86:c2:74:83:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:05:0F:AA:25:38:23:29:3D:54:57:EE:68:ED:89:01:51:67:58
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/pOQFD6olOCMpPVRX7mjtiQFRZ1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.57.0/24
Signature Algorithm: sha256WithRSAEncryption
59:95:6d:9c:c7:42:62:78:4d:97:87:96:0e:e0:90:35:86:eb:
c3:d2:a2:83:6a:95:3d:a0:d3:69:c5:e2:2c:8a:9f:13:f7:37:
25:b5:32:53:2d:eb:c9:b6:d5:83:f3:e4:3c:fb:a8:96:f6:14:
92:a9:e1:88:da:a1:f1:cd:65:0c:45:f4:e3:0b:f6:23:71:e7:
e9:b2:c6:7c:b1:f4:09:99:e0:56:8b:a8:78:aa:bd:ac:04:20:
8e:3f:20:a5:72:71:76:40:f4:b3:11:3e:be:05:0a:1e:5c:85:
94:de:1f:59:ad:16:2a:73:ce:6a:15:e9:18:3b:7e:80:cc:4f:
3f:5a:f8:fa:8f:2e:91:e5:3e:87:39:c4:1f:ed:e9:05:e8:50:
44:fc:47:40:95:5a:bb:15:82:69:13:e4:b7:d4:43:48:80:22:
94:53:08:07:dc:e7:a7:55:7b:ad:4e:1b:f7:ac:d2:6d:f5:ed:
c4:d8:26:37:d5:58:cb:62:a5:4f:ba:b0:55:d4:93:df:d8:6f:
07:39:11:75:97:eb:2a:73:1d:42:4e:95:9f:7c:12:2d:ca:cf:
fc:24:3e:19:70:1e:72:07:78:b3:6b:b3:ce:77:d5:d0:ac:29:
04:0a:e1:c7:d6:af:f9:98:14:af:6d:e1:01:09:46:e0:6c:fa:
1c:e2:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:24 2024 by rpki-client on console-fra.rpki-client.org