Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lFVBhQ4Fu2fxOK0hB_OzHNRipSU.roa
File: lFVBhQ4Fu2fxOK0hB_OzHNRipSU.roa (raw, json)
Hash identifier: MBB4anF5lmrYXGPHws+Vx5AGoas/9u4wiFmUbdQ01Ps=
Subject key identifier: 94:55:41:85:0E:05:BB:67:F1:38:AD:21:07:F3:B3:1C:D4:62:A5:25
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B66F2486A19CC891411CF0BB9E930
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lFVBhQ4Fu2fxOK0hB_OzHNRipSU.roa
Signing time: Tue 02 Jan 2024 12:34:51 +0000
ROA not before: Tue 02 Jan 2024 12:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211041
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:66:f2:48:6a:19:cc:89:14:11:cf:0b:b9:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=945541850e05bb67f138ad2107f3b31cd462a525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:71:f4:e3:bc:53:c4:3d:c5:5f:88:a9:c6:
10:2b:60:00:33:4d:cd:7d:a9:60:71:f2:5a:a5:34:
f9:54:b8:95:08:f6:63:fc:85:a2:76:70:dd:fa:17:
a3:d4:d3:6a:a3:91:24:d6:55:b7:d3:f2:a5:02:e0:
96:22:7d:ca:06:09:9f:f5:bb:66:b4:28:d7:f9:9c:
82:62:84:30:71:56:fc:b1:a3:25:11:e4:a6:b6:7c:
4b:27:4e:5c:e9:72:20:b8:83:f7:82:b7:dd:9d:6c:
ea:6b:b3:51:e7:37:2b:99:70:90:62:70:5c:50:d8:
8b:cf:40:6d:59:16:77:67:1c:ff:8e:4f:77:14:1c:
d3:3c:ed:aa:07:26:bc:bb:d9:78:e5:62:ae:3a:b0:
87:4f:1a:07:ff:eb:bd:36:ac:38:9c:19:90:93:53:
65:73:02:d9:a2:10:cd:45:ee:17:31:a6:5b:dd:57:
a9:95:22:df:fa:1d:79:1a:39:d2:b1:2e:3c:86:bd:
1b:de:11:4b:b3:9c:c4:37:2b:96:40:cd:74:23:b2:
1e:44:f8:48:28:8a:2c:66:75:04:ab:a2:d7:b6:fc:
69:b6:43:1c:c3:71:22:19:6f:d1:16:e9:68:f6:31:
b7:53:07:58:db:61:8f:b8:65:64:7c:a3:55:9f:65:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:41:85:0E:05:BB:67:F1:38:AD:21:07:F3:B3:1C:D4:62:A5:25
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lFVBhQ4Fu2fxOK0hB_OzHNRipSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
24:40:aa:37:d0:b4:37:a4:b2:c0:79:ee:07:5a:a7:c8:cd:4c:
fa:cc:7e:b5:03:70:bc:d1:ec:43:90:01:01:15:0a:1e:0a:73:
0e:9e:ae:96:73:2b:a9:25:c7:25:91:2f:69:50:19:ff:f3:43:
56:b5:0d:49:45:07:ad:4a:32:02:85:35:6c:dc:2e:df:94:85:
f7:3f:67:e5:2e:6a:e8:a2:0d:26:0f:8f:eb:98:f6:06:0a:3b:
1c:92:53:30:63:b6:cc:7c:88:a2:63:de:20:50:57:d8:fb:db:
3f:7f:7d:7b:2d:82:22:73:f8:f6:3d:29:8b:ae:93:cb:77:55:
15:57:72:ad:89:eb:9b:d3:8c:85:f0:41:4a:f7:c7:79:2a:d9:
af:aa:2f:dd:fa:bf:06:b4:c9:e6:96:ac:de:c7:66:20:83:61:
a1:19:55:22:bb:97:2e:9c:a7:c6:49:90:0a:b1:1f:d1:f1:9d:
da:56:53:41:d8:96:34:a9:12:fa:c7:b2:42:65:22:67:e8:03:
7e:f2:a1:f5:3d:44:6d:a1:20:a8:04:a9:1a:2b:c3:e6:36:cb:
11:47:ae:d5:0f:11:12:fb:7f:77:09:8c:6a:43:a4:b2:b5:8c:
23:f0:ac:f0:08:d0:54:85:e9:86:a7:7c:be:74:76:3f:d2:2c:
64:09:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:29:07 2024 by rpki-client on console-ams.rpki-client.org