Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/uR988EzAVOIcH0XnSKjO8sIM23Q.roa
File: uR988EzAVOIcH0XnSKjO8sIM23Q.roa (raw, json)
Hash identifier: D1V3P28F7oeD0Z+I4+LPzTTgShDBrHnMsJ6jdXZ/tTo=
Subject key identifier: B9:1F:7C:F0:4C:C0:54:E2:1C:1F:45:E7:48:A8:CE:F2:C2:0C:DB:74
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 018CC4937EFC100E50795F2BEE28AFA39BA8
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/uR988EzAVOIcH0XnSKjO8sIM23Q.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61272
IP address blocks: 185.23.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7e:fc:10:0e:50:79:5f:2b:ee:28:af:a3:9b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91f7cf04cc054e21c1f45e748a8cef2c20cdb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:ef:41:15:b5:75:9d:ec:f8:61:7a:ef:94:
b8:e2:7f:0d:b7:ae:67:18:1f:56:f3:2c:f9:3c:c5:
8a:09:e3:aa:d9:92:77:66:e4:71:0b:40:85:5c:0c:
b3:e1:e0:e0:9d:5e:bf:62:5b:c1:ef:5a:64:2e:3a:
27:57:1a:17:31:90:fb:b0:8f:39:b8:aa:85:5e:8d:
5c:55:47:92:57:fd:5d:ca:a0:fe:ee:6e:0b:ab:b9:
32:65:70:e5:08:df:1e:f8:a5:1b:65:20:9c:36:18:
4f:4f:de:ed:d3:cd:8e:ed:fb:ba:0e:c7:74:e3:68:
41:d6:dd:dc:3c:94:e9:d9:2a:60:ae:1b:0f:01:d6:
98:32:47:db:cf:a3:1c:0b:e6:61:78:14:6a:02:07:
bc:3e:f6:a2:d0:e8:27:0b:d6:64:c6:b5:18:16:64:
62:ec:0f:63:66:16:4c:e2:2e:57:42:a3:a9:99:fd:
e2:64:2e:d7:c1:2d:f1:67:dc:c8:45:7b:c2:ae:60:
cc:7d:4e:c5:6b:a6:27:1b:5b:62:49:64:e6:ca:8b:
70:7d:fe:7d:7b:1b:d3:c5:dc:a9:72:2c:ff:47:e2:
fd:11:51:ac:6c:c9:8a:62:fe:37:28:7f:71:d5:f8:
a2:e3:fc:65:a1:cc:fc:93:b6:a0:2b:84:d0:62:be:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:7C:F0:4C:C0:54:E2:1C:1F:45:E7:48:A8:CE:F2:C2:0C:DB:74
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/uR988EzAVOIcH0XnSKjO8sIM23Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.16.0/23
Signature Algorithm: sha256WithRSAEncryption
46:19:77:4e:5a:cc:b1:73:01:55:27:0d:4e:c4:ab:5b:0d:42:
64:00:21:11:36:e7:0f:68:c3:b8:e5:51:75:92:43:b0:72:47:
12:90:c2:cf:60:9c:55:dd:58:44:84:78:fd:b6:5e:43:3d:86:
41:eb:ab:dd:3c:fd:ee:35:ce:c9:fc:ce:d0:41:05:47:36:8f:
1e:de:9f:3d:4a:21:62:ee:79:15:e3:c4:c2:68:6a:2b:fb:3c:
69:91:87:0d:aa:f7:fc:91:cc:30:0e:ff:23:aa:4d:93:40:01:
d4:cb:38:01:d2:35:2b:be:46:1c:72:58:89:5b:83:70:ed:e0:
39:a7:a5:34:96:59:62:d0:db:6e:80:3a:01:ba:7d:ec:3d:d1:
0a:48:47:e1:20:f4:1a:a4:2c:e3:b5:b2:3c:8b:22:72:23:22:
ee:d9:fb:4b:0a:32:62:48:ff:c6:5a:25:fa:1c:83:c2:26:1b:
fd:19:6f:49:3e:b6:b9:a5:a3:a8:a4:63:5b:23:26:f3:d7:e0:
d8:24:6d:98:a0:77:ac:a9:ee:9b:0b:b2:0b:4e:24:88:0a:a9:
af:86:a7:48:3e:a6:d6:5f:10:9e:e4:3d:0e:80:40:41:43:25:
e8:5e:8f:b1:36:0b:23:c9:fc:3c:4f:b6:fd:9b:e8:80:75:ae:
64:00:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:28:14 2024 by rpki-client on console-ams.rpki-client.org