Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/yG5_d_UMiqO4xI7iijIJhFoA9Eg.roa
File: yG5_d_UMiqO4xI7iijIJhFoA9Eg.roa (raw, json)
Hash identifier: 2K5TLLwf3BJamYmnbrczREhUiyW2vj3CKb66+QPWBzc=
Subject key identifier: C8:6E:7F:77:F5:0C:8A:A3:B8:C4:8E:E2:8A:32:09:84:5A:00:F4:48
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 018CC26D51F6B972A1D58864C225F1E5462B
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/yG5_d_UMiqO4xI7iijIJhFoA9Eg.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28878
IP address blocks: 185.72.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:51:f6:b9:72:a1:d5:88:64:c2:25:f1:e5:46:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c86e7f77f50c8aa3b8c48ee28a3209845a00f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:c7:21:86:67:3e:13:cc:9b:4e:50:0e:06:
b7:15:05:d8:7b:16:1a:da:f4:ad:37:e1:18:4b:20:
99:57:d1:7e:8f:be:e0:87:b4:a8:c3:3f:c4:53:fe:
b8:57:8e:d4:96:a4:3c:73:4c:91:2c:d0:e3:69:65:
43:2d:4d:9e:ab:bb:13:69:e5:08:4d:d5:7c:1d:fe:
c7:6d:71:95:d4:98:e1:c2:c7:f3:5e:e7:3f:a5:52:
a2:51:ba:9b:10:c9:a5:93:cb:a5:0d:aa:12:cf:da:
e3:1d:3f:e2:22:20:ce:f4:62:76:d1:5b:30:52:da:
7b:21:f0:0d:e7:07:0a:04:d1:b9:be:89:fb:c4:bb:
87:d1:3d:c5:3e:3c:5a:2b:b5:bc:43:93:5d:cb:2c:
5d:4a:f9:e1:dc:f1:cc:c7:e7:19:c0:26:e1:39:69:
c1:fa:c0:27:6c:20:cf:40:3f:77:d6:49:58:a8:c8:
0f:f4:54:70:38:59:ff:28:4d:fa:93:4c:4e:54:e8:
2c:1f:c7:ac:7b:78:39:81:c5:bb:71:92:d2:19:2d:
4b:f0:d8:97:8c:4c:8e:60:6f:b2:05:6f:21:4d:15:
21:5a:b8:a2:91:d3:6f:d2:61:96:47:c9:44:42:a7:
bd:94:2a:d8:d2:be:3f:17:dc:d2:78:e1:87:fa:63:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6E:7F:77:F5:0C:8A:A3:B8:C4:8E:E2:8A:32:09:84:5A:00:F4:48
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/yG5_d_UMiqO4xI7iijIJhFoA9Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.132.0/22
Signature Algorithm: sha256WithRSAEncryption
54:0d:25:f7:93:c7:4c:60:09:eb:c2:8c:59:c2:74:23:99:8a:
07:23:cf:cd:e9:01:2c:9b:78:c6:20:27:b1:9a:24:ec:36:a6:
cd:e7:00:7a:59:75:c5:d8:67:e8:4a:0a:2c:c2:ff:06:69:59:
25:52:22:a2:ee:2f:67:2a:3d:93:b6:39:56:57:90:07:fa:dc:
26:c1:81:55:4d:35:5d:1e:f2:df:2e:69:81:a3:b8:c2:f8:df:
57:35:61:3b:76:1e:9e:0f:2f:1e:a2:96:d8:93:25:61:19:d1:
d8:ec:dd:cf:98:af:00:84:f8:8b:ae:16:90:ae:f6:97:35:cd:
e3:b6:77:4e:95:06:80:0b:17:17:46:e6:56:d8:df:da:e7:fe:
6a:a6:66:9f:2d:05:55:d4:39:26:e5:84:51:62:d4:cc:e3:fe:
5c:93:78:8c:bc:f4:4c:20:1f:f4:a1:7d:56:aa:d2:82:8e:97:
52:2e:57:f5:ec:ff:74:3b:82:f9:9d:e4:7b:14:4b:70:7a:c9:
e6:3b:a4:d3:e8:42:36:88:08:5b:a5:38:c6:aa:36:53:72:15:
50:1a:6d:4b:62:be:27:ec:c1:23:03:aa:fe:4b:e3:de:e0:4a:
3b:b0:36:a6:47:e7:43:51:4e:ca:08:7a:81:dd:bc:39:7b:e8:
91:d3:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:57 2024 by rpki-client on console-ams.rpki-client.org