Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4fsOZ_JAmBY0nrj1YSIC-iQCyMw.roa
File: 4fsOZ_JAmBY0nrj1YSIC-iQCyMw.roa (raw, json)
Hash identifier: lObNWdFbe3olaHJaRzvgTIncHyNyG4S1GuMmxP+K+tE=
Subject key identifier: E1:FB:0E:67:F2:40:98:16:34:9E:B8:F5:61:22:02:FA:24:02:C8:CC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF98D2AAAE0AD4C99D5AEEDE8F9657
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4fsOZ_JAmBY0nrj1YSIC-iQCyMw.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48940
IP address blocks: 185.128.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 10:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:98:d2:aa:ae:0a:d4:c9:9d:5a:ee:de:8f:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1fb0e67f2409816349eb8f5612202fa2402c8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:c6:88:db:b0:4e:a3:50:4e:b3:de:17:da:
0a:80:bb:14:e3:0e:98:ea:f2:e3:6e:3c:6e:27:f6:
f9:29:91:f6:be:e3:db:9f:9c:25:0e:53:1b:f1:2a:
16:32:4a:ba:46:42:ab:34:88:75:eb:36:39:f3:fa:
36:8c:6f:f5:c4:47:a2:a9:1f:4f:bb:d4:d9:d2:6e:
58:6d:1b:5e:95:eb:f7:e6:20:5f:fa:12:46:ae:a4:
99:ef:3a:1c:13:ff:ed:5d:9c:4d:63:6d:23:a9:0c:
aa:23:36:5e:f3:98:3d:4b:4f:99:6f:c6:ef:1c:00:
ae:9f:72:c1:9e:f4:5e:13:ef:94:01:a7:11:f3:6a:
cb:70:ce:26:a1:d7:35:d9:46:7a:b5:be:00:91:7e:
1f:23:39:f3:d8:6f:0d:6f:56:ad:cd:d8:40:32:5d:
c6:e3:97:67:a9:36:1b:41:82:9f:58:5b:8d:81:d8:
c1:5b:b7:8d:b1:e1:ef:1b:9b:80:d3:3b:77:41:e1:
64:3d:6b:6b:1d:7d:2f:a5:6d:f5:9c:c3:6a:62:cd:
f8:4a:3d:bc:e5:e0:76:b4:0b:96:89:aa:e0:c6:b7:
1f:a5:55:88:ee:62:28:3c:b0:d6:56:77:31:9c:a2:
64:ef:c0:1a:6d:b4:1c:12:e9:55:58:ac:16:f8:41:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:0E:67:F2:40:98:16:34:9E:B8:F5:61:22:02:FA:24:02:C8:CC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/4fsOZ_JAmBY0nrj1YSIC-iQCyMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.106.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:e1:6b:05:2c:e6:51:99:ce:49:cb:f4:d5:50:79:d2:65:98:
b5:df:c7:9c:99:f4:3b:84:1b:e6:bc:1a:9c:b6:db:46:bb:83:
13:5c:8c:9a:23:13:1e:3c:9e:6a:f5:ea:de:27:b0:41:24:46:
1f:44:0b:a1:b7:ef:f0:46:36:e4:a1:60:68:d5:9a:c7:00:b9:
60:cd:2d:07:ea:36:b3:d3:04:42:d5:93:86:ef:24:a6:98:4b:
4d:ec:60:07:4a:03:c4:b5:06:69:7d:db:4a:f8:06:85:5c:5e:
74:f6:b8:a1:c5:5d:d7:1a:79:7f:da:40:ca:17:b5:7e:54:90:
1a:2b:b0:6b:2b:06:8b:e0:3b:f4:e5:5f:36:6a:bf:15:cc:73:
34:d9:51:27:a2:df:59:fc:7d:a0:f8:88:74:21:de:33:b5:78:
c4:6c:fe:89:0f:71:1e:31:5c:26:8e:fc:d5:25:71:c6:e3:1b:
bf:66:07:ed:aa:c4:67:a0:93:0d:78:34:8a:74:e6:76:d2:85:
bb:f3:1d:60:99:93:95:d7:8e:f2:3b:b7:87:59:3e:10:ec:bc:
2a:5c:84:66:96:dc:4d:c2:0b:6f:08:2b:cc:c5:0b:52:3d:38:
a0:95:d1:75:10:9d:6f:4f:9a:ff:43:ed:f1:f8:c1:34:fb:df:
e9:9d:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:04:09 2024 by rpki-client on console-fra.rpki-client.org