Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/c4GHxYp32j6wRdbWqPr6Lh4KO1g.roa
File: c4GHxYp32j6wRdbWqPr6Lh4KO1g.roa (raw, json)
Hash identifier: nyFsHwPlTLp04okHLzUiegXrVLTRJsj7o2kkBNiHlDo=
Subject key identifier: 73:81:87:C5:8A:77:DA:3E:B0:45:D6:D6:A8:FA:FA:2E:1E:0A:3B:58
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 018CC8708064EF98EFB9E83118BCC3468B06
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/c4GHxYp32j6wRdbWqPr6Lh4KO1g.roa
Signing time: Tue 02 Jan 2024 04:31:05 +0000
ROA not before: Tue 02 Jan 2024 04:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49907
IP address blocks: 185.75.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:80:64:ef:98:ef:b9:e8:31:18:bc:c3:46:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 2 04:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738187c58a77da3eb045d6d6a8fafa2e1e0a3b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:5a:5f:69:4b:62:13:14:48:20:e5:2d:8b:
17:20:ba:0c:ca:68:48:5f:db:2b:6e:96:f4:41:f7:
87:a2:1b:09:26:57:38:0a:68:e3:25:26:f9:19:00:
1f:ef:ad:b6:69:e8:04:17:95:80:41:b5:6b:3c:ce:
46:5a:a4:b6:d2:1e:74:57:01:57:47:b0:09:44:0a:
49:e0:4d:02:8c:cd:e1:81:63:ac:ed:e4:64:f8:d3:
61:02:7b:2a:a7:10:43:fa:e6:6b:5e:7d:62:05:57:
ca:f5:8e:1f:82:0b:ad:28:df:94:99:d8:16:14:e9:
20:ff:84:3c:30:01:c0:62:79:f5:5d:a5:8f:7d:ea:
80:62:0a:c9:3b:1b:7d:b3:ca:80:69:f7:9d:58:92:
a4:4d:6d:73:66:1b:dd:10:c0:23:b5:65:53:98:18:
d8:f5:00:6e:02:55:b8:c4:91:e6:69:85:cc:23:53:
f1:a9:97:d9:7e:7a:df:c8:2e:d4:51:8c:89:d4:15:
0c:71:20:d5:90:14:34:fc:06:7a:20:83:87:ee:3d:
89:47:c6:fb:11:a0:d5:3b:42:0b:b9:7e:a0:37:95:
5d:c7:de:af:20:d0:07:db:01:bd:86:0c:2b:b5:d0:
a3:7b:ad:5b:7f:47:de:b3:93:c7:3f:95:02:11:7d:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:87:C5:8A:77:DA:3E:B0:45:D6:D6:A8:FA:FA:2E:1E:0A:3B:58
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/c4GHxYp32j6wRdbWqPr6Lh4KO1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.55.0/24
Signature Algorithm: sha256WithRSAEncryption
56:73:54:2d:ff:0c:7e:c4:c1:8b:7b:31:d0:96:2a:e6:f9:cd:
96:3d:40:1d:86:ab:c9:75:16:3d:44:cd:24:e0:ab:1d:ed:5f:
5d:56:51:6c:8f:ac:7d:e7:f5:99:f4:0b:09:7f:66:d1:dc:7a:
1a:8f:12:35:b9:b1:19:c7:14:4b:40:33:af:82:5d:05:44:d8:
4b:f2:c3:10:6c:40:b4:18:da:08:40:9c:63:6e:d7:e1:39:ab:
c9:34:f7:58:cb:30:c9:f8:f1:e7:74:91:be:35:6c:00:d6:f2:
48:f0:30:cb:de:fa:46:e3:42:1a:38:04:db:46:7d:67:57:cf:
6d:da:25:56:fc:1f:43:af:0a:19:cb:6d:31:ce:22:1f:a1:db:
2b:86:96:81:62:50:90:32:52:6b:85:1e:c0:6e:28:6b:6c:54:
b7:a7:d4:c8:9f:6d:65:a5:d0:18:b5:78:f7:5a:9d:21:a2:c7:
56:12:3e:f3:c2:b4:72:7c:32:7b:b5:ed:48:73:d3:4d:67:03:
dd:a5:73:05:55:df:0b:9c:7d:5b:fe:d2:e5:cb:94:30:6d:bc:
9b:7b:ed:52:ab:f4:db:33:49:bc:cf:d4:97:1e:c1:aa:63:f6:
cc:68:80:3b:58:88:a0:8a:46:fd:78:06:a5:7e:42:ff:03:fc:
0d:a3:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 22:07:34 2024 by rpki-client on console-fra.rpki-client.org