Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pGpbE2M4kdc0ldbO6xql6xqLtWI.roa
File: pGpbE2M4kdc0ldbO6xql6xqLtWI.roa (raw, json)
Hash identifier: j5+53gDmsOA5Zpu1hVFJ+8YrRGQjp+XBI1JFiJjWyfU=
Subject key identifier: A4:6A:5B:13:63:38:91:D7:34:95:D6:CE:EB:1A:A5:EB:1A:8B:B5:62
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DEF73E48A16DB2D97115F8A6CAFE3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pGpbE2M4kdc0ldbO6xql6xqLtWI.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198821
IP address blocks: 5.8.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ef:73:e4:8a:16:db:2d:97:11:5f:8a:6c:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a46a5b13633891d73495d6ceeb1aa5eb1a8bb562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:12:75:cd:db:6e:c1:32:82:7d:c2:d7:f5:
85:29:9e:ba:1b:2b:e1:b0:74:4a:58:c1:69:77:56:
c0:43:df:de:55:40:cd:92:5a:32:67:65:e5:c4:e9:
af:61:b6:a3:ac:05:bd:be:1b:ca:f3:dc:db:11:41:
ac:65:db:6f:1c:b1:4c:a5:b0:fb:e8:66:80:b3:90:
5e:82:32:b0:3e:6d:9d:02:84:40:8c:22:a8:05:a6:
04:f9:87:0d:56:40:19:e4:69:2f:f6:ef:a8:f5:7c:
67:fc:fa:18:52:0f:17:46:96:82:27:eb:14:cc:3d:
52:f0:08:86:5f:28:b2:2b:ab:5e:e9:e0:29:97:c0:
b5:e6:5f:57:85:ff:fc:f6:46:f8:de:1b:5f:b9:69:
cb:ee:12:70:8a:26:05:91:7a:75:ef:57:34:32:71:
5f:b1:77:05:de:2d:02:47:85:37:e2:d0:5a:f4:f2:
ec:d7:46:81:49:e5:83:56:08:75:58:b1:36:d5:ce:
28:2a:46:05:67:44:0e:85:d5:0a:c7:d2:82:a4:3e:
be:44:63:f6:72:00:07:a8:49:0b:08:b1:76:23:06:
28:25:f5:61:28:f4:9e:98:42:24:b1:65:cb:de:4e:
d3:92:c8:09:e1:b0:e3:77:6a:7e:8d:67:39:ff:54:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:5B:13:63:38:91:D7:34:95:D6:CE:EB:1A:A5:EB:1A:8B:B5:62
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pGpbE2M4kdc0ldbO6xql6xqLtWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.179.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1e:1e:a6:2f:42:61:34:dc:8a:5f:7b:33:d0:a9:31:05:f3:
6b:5c:3b:60:79:df:fd:78:d5:18:7d:03:da:20:d1:da:c3:6c:
02:4e:5d:f4:01:0a:9e:a0:5a:0e:d5:bd:c6:fb:b3:9b:ad:0a:
08:22:c3:0e:41:1e:35:01:08:01:80:07:b5:6b:f8:b1:82:cf:
63:12:cd:ac:4e:78:3a:1f:fa:03:13:39:3a:dc:e8:ba:40:b5:
b4:01:25:aa:cd:1f:78:4a:63:41:45:f9:43:96:ac:e7:84:9c:
eb:dc:af:e0:9f:ba:c6:c8:39:b5:2a:1e:39:97:ed:e6:79:4f:
40:83:2a:0a:9d:99:4e:b6:90:21:31:1d:bd:b0:ac:69:df:b6:
33:35:4e:e2:39:c8:88:c3:6f:f2:4f:a1:bd:bd:c7:e6:d0:c9:
12:68:a8:ca:d9:f9:36:2a:ef:ba:42:65:42:b6:4a:c5:65:1c:
d4:40:84:a2:e8:76:bf:3e:ed:99:8b:bb:ac:73:58:40:24:98:
bb:35:25:ee:9b:e8:41:20:62:76:ae:2c:1a:64:b2:3c:5c:51:
9b:7e:da:4c:c5:40:72:44:29:56:f1:d1:38:ee:30:38:00:b1:
e0:d8:17:1f:98:2f:2e:12:90:6e:b2:f3:7d:07:42:cf:94:f8:
97:87:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:14:07 2024 by rpki-client on console-ams.rpki-client.org