Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YRGdlutKEpALjWRJGbzCKIPbwbI.roa
File: YRGdlutKEpALjWRJGbzCKIPbwbI.roa (raw, json)
Hash identifier: QPCqSd2e8C17WPdDZNJavq3oJ3pBTK4cfWdGz0+vvo0=
Subject key identifier: 61:11:9D:96:EB:4A:12:90:0B:8D:64:49:19:BC:C2:28:83:DB:C1:B2
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018CC6B90E3A1CB6A849A05B621EEB6DB155
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YRGdlutKEpALjWRJGbzCKIPbwbI.roa
Signing time: Mon 01 Jan 2024 20:31:05 +0000
ROA not before: Mon 01 Jan 2024 20:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 158.172.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:0e:3a:1c:b6:a8:49:a0:5b:62:1e:eb:6d:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 20:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61119d96eb4a12900b8d644919bcc22883dbc1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:a7:0c:00:21:26:6d:09:4e:41:82:54:2a:
18:af:bc:57:c9:63:e2:3f:0c:0e:c5:b4:4f:9b:7e:
45:c4:f1:c8:b8:dc:50:ab:02:7e:a8:7e:46:7c:b5:
31:ec:8c:2c:9d:f1:cf:72:47:cb:22:ec:4e:b0:9b:
97:7f:c9:89:2f:89:19:b4:92:84:16:09:2c:54:69:
33:8b:84:36:da:df:f4:d9:55:2c:e7:a4:a8:a4:55:
29:92:38:13:54:09:91:99:c4:ff:2c:75:c0:02:4e:
b5:a4:6e:5f:bd:b9:f1:38:5d:47:7f:b1:e4:02:b1:
ca:11:91:b9:56:a9:2b:02:bc:a5:3c:ba:5c:e7:85:
31:80:b7:63:be:50:80:e5:32:9b:47:af:04:ae:4a:
88:5d:40:66:55:c6:05:51:a5:04:ce:4e:ff:52:6c:
75:b4:bd:6c:27:d2:e2:0b:b4:b8:95:39:a3:24:3b:
dc:6d:5c:e5:c3:a3:35:53:2e:c9:8b:9d:ef:d0:94:
0b:a8:f2:c9:88:d1:01:c0:a6:e7:10:31:10:ac:c3:
1d:41:a7:15:c5:a0:de:52:f0:47:a1:cc:ac:54:96:
25:20:8f:cc:cd:6f:e0:67:f9:a1:f5:2b:0b:0c:07:
86:cb:9b:04:7d:d9:95:68:2f:f2:07:ae:3a:97:bf:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:9D:96:EB:4A:12:90:0B:8D:64:49:19:BC:C2:28:83:DB:C1:B2
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YRGdlutKEpALjWRJGbzCKIPbwbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.144.0/22
Signature Algorithm: sha256WithRSAEncryption
55:f2:1c:cf:ff:a9:85:ec:49:43:2b:cf:a9:bd:1e:46:fb:6e:
75:cb:da:e8:28:87:0b:c5:39:75:cb:30:4c:32:62:bc:c0:d1:
94:35:68:2e:f3:ad:f5:10:bd:64:32:32:1e:cd:85:9d:fe:bf:
06:8c:74:c0:31:ce:83:c7:40:c7:b4:d3:56:bd:45:d4:9c:6a:
11:3a:aa:4c:8a:e0:d7:ba:d9:94:5d:f2:ea:2e:00:b8:4b:4d:
c9:e0:45:09:10:50:3a:f9:b3:00:bf:9c:7f:9e:a1:15:ee:1e:
20:56:42:78:10:a0:57:38:c1:a4:d7:e5:67:c5:21:c6:d5:b1:
46:a0:61:d9:21:bf:92:73:ab:3c:8e:52:76:c8:78:92:11:e6:
07:2f:d5:70:bf:46:da:8a:a8:fc:b7:15:f6:14:24:ae:f2:19:
bf:1b:20:4c:a3:24:2f:82:74:41:6e:e0:45:a1:01:a6:84:e9:
63:3c:c6:d7:e5:6e:fd:cb:e5:3d:15:93:20:e7:c1:d9:01:af:
d9:42:4b:58:fc:9a:23:c1:94:ce:b2:5a:f8:b1:2a:04:5e:bf:
aa:7a:de:cb:16:fd:dd:32:ac:f2:fc:2a:73:ed:58:2e:a9:1d:
a9:5b:1c:dc:ad:44:56:ae:6d:e7:0a:ca:0f:3b:a6:5e:3b:61:
fd:1a:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:52 2024 by rpki-client on console-ams.rpki-client.org