Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/RP58pV04yvWdOXgd_4aGMjGYjNA.roa
File: RP58pV04yvWdOXgd_4aGMjGYjNA.roa (raw, json)
Hash identifier: JI7dVX9KLCJmXDbPSXIPp/BP5sWMZF+kuIhZxleqC/M=
Subject key identifier: 44:FE:7C:A5:5D:38:CA:F5:9D:39:78:1D:FF:86:86:32:31:98:8C:D0
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 018CC56EDA98E6203F3C9E0182265FA6ADAD
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/RP58pV04yvWdOXgd_4aGMjGYjNA.roa
Signing time: Mon 01 Jan 2024 14:30:25 +0000
ROA not before: Mon 01 Jan 2024 14:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209784
IP address blocks: 81.2.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:da:98:e6:20:3f:3c:9e:01:82:26:5f:a6:ad:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44fe7ca55d38caf59d39781dff86863231988cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:e1:eb:c3:bc:c2:c2:dc:17:9c:ec:88:e9:
ce:bf:65:0a:d3:e9:e0:d9:ca:e1:79:05:5d:80:d2:
8f:c3:76:39:50:39:ec:ca:71:4f:77:cc:b8:f1:70:
84:b8:fb:40:5f:80:98:29:e1:e4:85:e0:97:43:cc:
b1:19:a4:06:73:dc:81:3b:02:2f:ef:6f:4a:51:ea:
4a:22:58:ed:3f:7a:e2:85:e2:05:1b:76:be:1d:43:
32:80:c6:13:d6:a5:a6:3a:aa:59:8e:b6:4f:22:fe:
09:75:4e:6c:e9:d7:20:fa:58:32:d9:b2:be:b4:fd:
e7:43:aa:9d:fd:ef:47:83:58:7e:d4:5f:e0:0b:61:
82:9e:76:17:96:17:eb:0b:1e:94:f5:40:8b:c5:a0:
ba:1f:08:c5:63:78:49:9d:af:9a:11:81:02:73:01:
5f:1a:e1:ec:ba:12:d6:99:12:fe:71:2c:69:bd:39:
b6:47:54:a9:07:ad:a2:d2:e6:84:23:67:6e:5f:e6:
32:6a:f8:1f:ce:9d:e4:6c:b4:b1:f2:e5:75:01:ba:
a4:bf:f0:fe:88:2b:e0:71:32:8f:31:6b:e5:1e:ec:
19:b2:15:62:1f:35:d6:f1:de:2d:ef:4b:60:a3:8f:
1a:39:77:02:f3:5a:d9:91:81:1d:a5:02:fa:b3:03:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:7C:A5:5D:38:CA:F5:9D:39:78:1D:FF:86:86:32:31:98:8C:D0
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/RP58pV04yvWdOXgd_4aGMjGYjNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.187.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e9:fb:44:d4:6e:41:27:02:7e:ba:be:c8:57:78:dd:eb:a4:
f4:fa:f8:c0:fe:03:c5:b9:ec:5e:e9:4d:af:98:50:ab:69:b2:
8d:ba:63:72:78:6a:b1:39:d1:71:61:f4:bd:dc:18:fd:33:9f:
41:f0:e6:46:4d:30:bb:62:ac:2f:c5:13:cd:07:f7:73:d4:2d:
56:ae:00:4f:08:05:08:b8:6e:7c:f0:77:00:ba:7a:a4:75:c9:
0d:15:94:50:f3:6b:24:7b:d5:bc:21:a3:09:f3:c6:01:68:77:
08:28:27:3a:ad:09:57:45:6c:38:9b:49:0f:12:9b:22:59:f2:
68:e0:ba:2e:a3:ae:ee:83:2b:7b:d6:45:93:9a:45:da:5a:8b:
05:45:25:d1:e2:71:b7:a4:f2:85:24:17:ac:c3:a3:02:ca:ae:
01:c2:0f:73:de:b9:10:b5:c3:68:19:24:94:00:37:3e:fe:4b:
6d:e9:a2:64:d7:fb:de:49:0d:40:76:7d:04:fb:ff:07:a7:1a:
37:e7:c5:20:b3:cf:55:7e:a0:23:d7:85:20:ff:06:7e:41:2f:
c4:9d:a5:aa:21:ac:dc:05:4e:d5:d6:7d:7e:fe:dd:5d:5f:51:
0f:75:30:a5:74:5b:81:ec:1d:43:73:c4:ea:74:3b:29:26:cb:
5b:c5:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:51:15 2024 by rpki-client on console-ams.rpki-client.org