Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4RNIzsp2CAQ7rDaRHoh6GM2nK8s.roa
File: 4RNIzsp2CAQ7rDaRHoh6GM2nK8s.roa (raw, json)
Hash identifier: RMhziklXsIMPjMnBvTqR+ItZhwqgu8618AEnzuuFlno=
Subject key identifier: E1:13:48:CE:CA:76:08:04:3B:AC:36:91:1E:88:7A:18:CD:A7:2B:CB
Certificate issuer: /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial: 018CC8DF4DA44F5D5CFE83C9D3119F16152E
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4RNIzsp2CAQ7rDaRHoh6GM2nK8s.roa
Signing time: Tue 02 Jan 2024 06:32:06 +0000
ROA not before: Tue 02 Jan 2024 06:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5413
IP address blocks: 185.57.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4d:a4:4f:5d:5c:fe:83:c9:d3:11:9f:16:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e11348ceca7608043bac36911e887a18cda72bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:38:18:77:1f:8a:de:ee:9e:4d:91:26:e1:
16:ac:43:4a:ae:8f:39:91:5a:c9:ae:c7:8e:36:35:
68:b8:95:eb:f5:09:69:cb:5b:0e:7e:44:4f:cb:fb:
30:16:10:52:a4:48:f6:e7:62:b9:73:a3:ba:17:bd:
78:7e:1a:8c:09:d2:f5:74:fa:1c:40:77:37:dd:b8:
3f:9f:f8:73:b3:98:ed:35:d9:3b:09:1a:ce:23:ef:
00:bb:64:6f:8d:99:ec:cc:60:a2:13:a3:20:59:96:
69:3d:d1:f4:a4:7f:2a:b0:52:d1:a9:3c:12:8c:d3:
0c:81:6a:e0:1a:96:46:a2:d4:84:62:9f:f0:9f:ee:
f9:28:f8:89:eb:96:a0:32:55:ab:d6:02:23:2e:be:
f0:96:b2:89:9a:32:22:15:2f:48:74:dd:90:77:d6:
f7:d7:55:7c:96:d5:89:6d:52:05:bb:ae:c5:4d:96:
d2:87:4a:01:04:11:93:1f:b0:51:a0:74:73:6d:ef:
35:95:23:17:93:1d:fb:f1:05:1b:2c:46:6b:37:82:
cb:77:64:35:e6:3b:20:88:73:67:a1:68:06:7f:6e:
ce:47:12:5e:3a:bc:dd:0c:7a:24:27:3d:e3:a0:2e:
ba:1e:3e:87:5c:0a:fa:af:e5:16:55:bc:9e:56:9e:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:48:CE:CA:76:08:04:3B:AC:36:91:1E:88:7A:18:CD:A7:2B:CB
X509v3 Authority Key Identifier:
keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/4RNIzsp2CAQ7rDaRHoh6GM2nK8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.79.0/24
Signature Algorithm: sha256WithRSAEncryption
26:88:f3:fd:e2:2a:ff:e6:35:f5:a2:66:a2:62:c6:ba:8c:05:
9a:e6:7e:fd:b7:19:37:f6:78:98:32:cb:9e:36:d4:f1:b9:fa:
2f:6a:e2:ab:74:d6:e8:61:ce:65:d2:a5:2b:16:18:0b:91:50:
36:dc:c3:9a:c6:44:a7:5e:54:54:3e:8d:f4:eb:50:b9:d4:d0:
e8:d2:1a:1d:7b:8b:c9:8e:24:10:73:fe:b8:ad:b1:73:a9:b3:
3b:2b:c8:87:3f:29:89:5e:89:41:15:2c:a2:65:0f:2d:74:8a:
f5:88:08:c1:61:10:6e:bd:f2:fd:a4:a7:1a:ce:8d:29:34:ee:
93:0b:7c:d5:dc:16:23:c5:66:72:44:93:ad:72:ef:64:e9:89:
a6:17:04:ba:0d:d8:72:26:a5:c7:d5:05:40:e0:3a:cf:8a:96:
81:67:1c:cf:af:d0:b7:25:a7:10:cc:5f:dc:21:ee:5c:5d:16:
1e:a9:0a:14:50:b7:2d:1c:03:52:38:a3:ca:cb:4c:e3:99:bd:
65:6f:75:88:14:f7:77:c7:ce:0d:e2:7e:ea:e4:98:5d:ed:fc:
3e:b9:bf:34:80:ed:d6:43:00:cf:c7:75:92:cb:a7:d4:65:aa:
7b:7a:64:b2:91:96:32:54:ee:01:e6:2d:f5:12:a3:a5:3e:7b:
62:ba:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:03 2024 by rpki-client on console-ams.rpki-client.org