Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/slz1p8K6puxIF5ckKpo6VAL9dCY.roa
File: slz1p8K6puxIF5ckKpo6VAL9dCY.roa (raw, json)
Hash identifier: UYroctXj9gEws5roAc4mGJPN853+jnyh1c5K8YJnX7Y=
Subject key identifier: B2:5C:F5:A7:C2:BA:A6:EC:48:17:97:24:2A:9A:3A:54:02:FD:74:26
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93BB19C01DFBEE8ED06BFD0EC2763
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/slz1p8K6puxIF5ckKpo6VAL9dCY.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60916
IP address blocks: 185.72.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:b1:9c:01:df:be:e8:ed:06:bf:d0:ec:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b25cf5a7c2baa6ec481797242a9a3a5402fd7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:56:46:e5:17:2d:c7:b2:f7:19:ad:3d:ab:
d0:fb:99:6a:e0:45:6a:5e:67:3f:bf:94:fd:50:f5:
91:76:59:d5:8e:ce:32:27:7f:c8:87:fd:28:36:b3:
28:72:bd:fc:54:f9:95:ba:44:da:b2:06:2f:aa:62:
07:76:8c:e8:5b:1d:aa:bc:98:5f:07:8c:d2:fe:72:
06:52:0a:1e:bb:bb:25:92:17:c4:01:7d:eb:9c:f2:
6a:0c:fd:10:79:ee:12:19:ea:f0:20:bf:b3:1f:9c:
4f:ff:7b:cb:49:a6:07:7b:fb:59:60:0d:7d:55:32:
8e:0d:75:bb:38:cd:b7:40:8b:08:44:cc:01:9c:dc:
5a:bc:60:4d:d2:3a:23:a1:9c:cc:a4:50:86:3e:1a:
e2:c8:56:e9:8e:30:90:66:36:a1:0c:30:5b:ac:02:
01:33:f1:06:23:3e:fb:a4:2d:54:ac:89:08:39:51:
21:50:06:0f:05:94:6f:71:c3:24:05:8b:cc:05:f6:
1e:2a:b8:2e:31:7e:dc:d9:6b:db:ff:f4:48:08:b2:
22:aa:05:fa:f1:86:ec:0e:89:b9:2c:e9:fa:6f:bc:
2f:ae:c9:9a:75:54:2e:9b:a2:90:48:9a:0a:c0:a1:
36:da:e9:90:36:f4:95:18:e6:6c:48:50:ee:4a:61:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5C:F5:A7:C2:BA:A6:EC:48:17:97:24:2A:9A:3A:54:02:FD:74:26
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/slz1p8K6puxIF5ckKpo6VAL9dCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a1:da:f4:77:15:96:db:b5:12:ee:3d:40:d6:ba:7d:40:e5:
d6:b1:14:41:dd:34:81:b1:ed:1c:2d:29:f4:f0:bd:16:07:14:
a6:0f:38:91:97:76:ca:11:2f:86:d6:d8:02:12:13:9d:05:c0:
cd:4a:57:b2:ab:d9:16:9b:a4:3e:45:bd:95:1a:de:29:74:ad:
2f:7e:41:c1:80:35:af:bc:a0:8f:72:a8:05:a4:ae:4f:c1:ec:
04:dc:26:21:8a:14:e3:12:db:d1:c7:8d:b4:98:dd:82:31:3a:
b7:b3:f9:ac:70:e1:a2:c9:ca:bc:17:5e:30:ed:19:3c:0f:eb:
c8:e8:4f:9e:e0:61:3b:e8:81:c0:48:d4:51:aa:c4:e3:33:6a:
d6:a9:79:c1:36:a8:12:2a:3b:34:7a:c8:37:e3:4b:0e:92:2e:
83:7d:ff:7d:bb:11:07:e6:34:d7:94:c8:28:ab:ae:74:ec:6c:
0b:2d:45:ed:8d:b8:97:6e:4d:87:01:78:57:a5:b1:df:24:dc:
34:b4:11:3d:51:50:ab:ff:7f:4f:1f:a4:79:42:c5:bf:4f:e4:
2f:0e:27:df:50:95:6f:38:14:81:d5:b1:53:f5:e9:a8:e5:f5:
ed:2c:6b:72:91:19:7c:cb:71:54:a7:b1:b6:7c:17:aa:d6:63:
71:0b:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:47 2024 by rpki-client on console-ams.rpki-client.org