Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/5vckYuVMS9fcxZZbOnN7zrEqeso.roa
File: 5vckYuVMS9fcxZZbOnN7zrEqeso.roa (raw, json)
Hash identifier: seghFKT4JqYd6GrpikQhtR8p3SDxHp4YMz/BLJGiKgM=
Subject key identifier: E6:F7:24:62:E5:4C:4B:D7:DC:C5:96:5B:3A:73:7B:CE:B1:2A:7A:CA
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 018CC2DB490D062B39DE51878AB115F89761
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/5vckYuVMS9fcxZZbOnN7zrEqeso.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25206
IP address blocks: 185.230.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:49:0d:06:2b:39:de:51:87:8a:b1:15:f8:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6f72462e54c4bd7dcc5965b3a737bceb12a7aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:db:d3:13:1f:3a:49:ed:14:a3:46:0b:d3:
d9:37:55:69:e9:ff:11:fa:3e:df:04:50:f1:a5:fc:
d4:49:c6:b1:a5:59:3b:8f:85:de:7f:58:f6:66:9a:
71:6b:66:c2:dd:ec:3e:c5:de:3b:ba:0a:16:33:fe:
ba:47:cf:49:93:0b:5c:e0:45:87:62:7d:ef:1e:5c:
96:30:86:53:f9:7d:59:e9:0c:5b:8e:db:26:2f:4d:
69:13:d7:eb:26:0d:5c:f5:32:01:be:d5:69:df:64:
72:8d:a1:86:9f:e3:22:ed:9e:b5:64:5c:16:a8:39:
a8:10:d1:74:66:72:13:3a:b2:36:b0:20:90:de:3a:
c5:7c:80:2c:74:20:11:b3:2a:8a:55:2e:10:79:cb:
d5:26:08:9e:36:c3:68:f7:9c:92:07:29:42:9d:08:
87:63:07:a0:27:b3:93:a6:b8:73:54:33:cf:2c:f6:
5a:ca:93:ab:b1:cf:d4:e1:18:36:01:7f:98:0b:0e:
18:81:d4:25:62:55:60:b5:15:80:ee:f3:7d:9d:f6:
d8:86:18:2e:c4:53:70:60:00:33:8e:3c:a0:73:ed:
08:c3:41:7e:e2:c2:93:47:0f:f8:08:48:46:5b:80:
07:c5:9b:15:a7:d9:03:8b:fc:1a:d3:46:3c:d8:67:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:24:62:E5:4C:4B:D7:DC:C5:96:5B:3A:73:7B:CE:B1:2A:7A:CA
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/5vckYuVMS9fcxZZbOnN7zrEqeso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.244.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:37:d8:3e:3e:b3:ff:cd:db:b2:85:69:2d:73:a1:eb:c8:89:
88:70:e0:74:2b:43:a3:9a:24:04:e2:94:fa:1c:76:ef:3d:78:
4f:a8:c0:a1:58:49:2d:92:5f:d7:0d:ff:c7:b7:83:a4:8f:78:
99:11:dc:c5:bf:82:4d:7b:f4:25:fa:b7:8e:d7:ed:b7:ce:bd:
2b:0e:08:2d:2f:13:fa:f1:ca:e0:89:f1:5a:b1:fd:4a:20:2f:
77:3a:75:25:94:0d:15:0a:3b:ae:82:ca:05:e0:bb:5e:8c:7e:
f4:8e:64:0b:a6:3d:c4:5f:2b:a9:b3:d0:61:a4:82:5d:7a:06:
98:43:f1:cc:40:c4:9f:f6:aa:70:48:c9:cf:03:d6:f4:a4:dc:
a2:f4:e8:6f:1d:89:bc:d6:e9:72:b9:88:8f:c2:4b:6e:21:17:
6f:44:81:37:e8:07:88:25:f3:6d:e6:18:40:de:9b:2b:55:5d:
8c:47:32:f1:b5:08:53:18:a1:07:40:2a:62:27:d4:0a:11:2a:
a9:9f:a4:79:10:66:bd:2b:1e:6e:ef:4c:96:f5:03:bb:16:43:
08:f8:99:49:af:2e:10:15:47:be:e6:10:87:a3:9b:c3:80:4f:
c5:ff:17:8b:9e:b8:d7:ad:4f:dc:dc:e1:ae:e2:3a:a6:13:d0:
e1:cd:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 06:00:45 2024 by rpki-client on console-ams.rpki-client.org