Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/lT-_B0i6MbIEFKuIF309sw_OIA4.roa
File: lT-_B0i6MbIEFKuIF309sw_OIA4.roa (raw, json)
Hash identifier: covV7acXAFyh94WgnlVejQvJwTjj7PrcJiUHTWZeIvc=
Subject key identifier: 95:3F:BF:07:48:BA:31:B2:04:14:AB:88:17:7D:3D:B3:0F:CE:20:0E
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 018CC56E1949C21CA61873090D54675F360E
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/lT-_B0i6MbIEFKuIF309sw_OIA4.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209465
IP address blocks: 171.22.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:19:49:c2:1c:a6:18:73:09:0d:54:67:5f:36:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953fbf0748ba31b20414ab88177d3db30fce200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:60:97:0c:d8:25:37:af:66:17:dd:e9:e7:
35:ef:58:d1:4b:22:63:57:15:75:d1:d2:3f:a1:9c:
4e:72:40:51:c1:ae:97:7f:58:55:93:11:01:0d:87:
68:be:67:74:bd:c4:58:45:78:b4:ea:e7:37:e8:61:
10:0b:1c:1d:96:bc:aa:b9:97:c2:54:15:b0:d5:1b:
05:fd:93:cf:b2:7b:e3:db:d6:32:0b:3a:82:34:f2:
b8:99:18:08:3d:93:e3:f5:e8:25:62:16:4f:33:cb:
fb:5f:61:d6:00:06:fc:d6:aa:99:e0:bc:4e:72:78:
a9:92:65:d5:2a:ed:ab:5e:21:78:7d:b3:5e:15:06:
a9:65:be:33:9b:e7:ea:b9:05:c5:36:74:bb:9f:1a:
9d:be:61:08:d3:ce:73:32:86:6c:b0:c5:a0:c0:45:
fc:5b:b6:33:ae:08:92:9b:39:fb:35:4f:2e:ea:9b:
d6:a7:92:c6:09:0d:f9:23:e0:f0:c6:99:61:74:c7:
cc:e5:9b:25:74:39:b3:ab:c9:e8:e5:cb:8a:10:11:
4f:73:ce:d9:a7:0e:02:64:e8:15:80:13:93:4d:f6:
e7:e7:0d:5a:e7:0e:68:ed:84:95:c9:da:7d:57:c8:
3f:83:91:aa:da:f5:17:7a:7c:4d:01:c5:09:e1:91:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:BF:07:48:BA:31:B2:04:14:AB:88:17:7D:3D:B3:0F:CE:20:0E
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/lT-_B0i6MbIEFKuIF309sw_OIA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:92:96:e9:bb:dd:fd:8c:17:6f:8e:d4:3a:42:98:33:31:1c:
01:1e:85:2a:f1:04:22:64:0d:c6:c3:eb:b0:c6:26:8c:8f:41:
3a:3c:d3:56:b9:1a:92:82:38:b0:fc:94:df:a4:22:aa:b0:ab:
3f:cb:a8:b5:69:57:00:b9:cf:51:7b:3e:14:4c:05:2a:93:c9:
dd:4c:9a:5c:a8:27:a3:e0:a3:96:da:13:45:78:cb:0b:16:64:
d2:06:65:58:78:f6:42:bc:00:1b:9f:da:60:ff:f4:5b:50:d7:
db:f3:5d:dc:d5:21:9c:ea:1e:e4:40:11:29:29:c8:b5:ec:a6:
ad:d0:8f:3b:41:c9:cc:7f:79:0c:70:c0:60:1b:57:92:a7:42:
31:0a:6a:1d:33:86:68:65:f6:8c:a3:7a:0e:52:46:17:ea:16:
ee:35:99:82:ab:76:76:5a:84:8e:e9:ad:e9:7e:fc:2e:89:40:
9b:33:e0:c4:93:14:69:9f:e1:3d:36:ea:f9:ff:37:ba:fb:a0:
ff:45:e5:66:be:bf:1e:d3:84:9f:18:f4:f0:9f:88:a8:e0:8e:
38:6b:f9:9e:5a:72:39:d0:2c:3a:0a:17:d2:61:d6:c0:46:c0:
a5:9c:bc:7e:c7:4c:0f:69:b3:7e:84:89:33:bf:7a:82:77:66:
0e:e5:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:33:41 2024 by rpki-client on console-ams.rpki-client.org