Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa
File: s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa (raw, json)
Hash identifier: sAKxnf7d5dGUPw65F4xiL4N5UtZw60JZF6k7aN2fn6A=
Subject key identifier: B3:D2:68:05:99:7D:50:76:E7:C0:09:CF:07:46:B8:FE:6E:81:3C:F4
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 018CC2DAB8E925DA6A9B16982F4CF4DE5FF1
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202063
IP address blocks: 185.55.51.0/24 maxlen: 24
185.55.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b8:e9:25:da:6a:9b:16:98:2f:4c:f4:de:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d26805997d5076e7c009cf0746b8fe6e813cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:d8:62:68:f1:7e:b6:8d:ff:63:c4:bf:3f:
b2:c2:67:fc:99:8f:ae:79:73:55:5f:35:9a:3c:b0:
3d:87:9b:b5:7c:c6:33:13:0a:92:06:62:b4:34:f4:
ec:36:f4:16:c2:e2:fd:7c:be:35:0a:06:eb:6b:06:
08:3e:d9:89:81:7c:52:15:c1:54:bf:ea:db:81:ad:
5a:ca:a4:69:f4:07:cf:b3:d3:a1:90:51:5d:00:4c:
71:2f:b4:09:34:a5:9b:8a:be:51:d0:31:01:5b:41:
f2:cf:9b:2c:15:2b:b9:30:b2:3f:d5:3f:8c:51:e0:
a5:e1:d3:6d:f3:b2:41:0a:f5:13:f1:cd:de:67:49:
56:f2:37:41:f9:b4:31:c3:35:8f:a8:af:9d:cc:62:
4f:12:0d:53:2f:71:12:f9:75:d6:ee:08:37:6f:01:
2f:3e:c9:ac:29:73:7b:a7:b5:0b:87:e3:b5:c2:71:
54:65:4f:e1:1d:26:45:af:b6:fe:03:07:be:a8:d9:
b6:af:74:cc:cd:05:a3:2c:6c:1e:c8:f8:6d:53:6a:
ba:3f:af:f8:b8:68:97:a4:e3:71:b3:f7:9d:b5:19:
5f:d4:75:57:af:a2:27:ec:93:bc:6e:3b:f5:1f:dc:
a6:3b:bb:f7:7c:39:8b:80:92:09:13:00:ef:f2:b4:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:68:05:99:7D:50:76:E7:C0:09:CF:07:46:B8:FE:6E:81:3C:F4
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/s9JoBZl9UHbnwAnPB0a4_m6BPPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:40:24:e3:6e:a1:64:0b:49:75:54:8b:08:47:09:35:5a:a6:
37:9b:d6:6e:32:0c:14:5b:a9:ac:18:57:43:37:3e:af:f0:32:
12:08:ee:b5:2e:65:2f:a3:83:f9:b6:eb:dc:fe:0e:4f:1e:73:
00:d2:a6:2e:18:fa:21:97:bc:ec:00:a4:fb:c1:2a:51:37:f9:
1f:41:50:17:ae:6a:cd:5c:67:ad:35:aa:c5:61:33:9d:ee:58:
8f:cf:28:e4:72:fd:96:14:3d:d7:6e:8f:69:1a:c4:e3:a9:06:
8a:1e:c5:d0:83:67:8d:4b:f0:96:15:10:30:65:ce:33:8b:96:
f6:33:6b:31:52:29:e0:c2:61:14:70:39:51:5d:d6:6f:3b:ba:
f2:74:4d:f0:79:81:58:81:b0:4f:1e:76:f9:d0:e2:02:86:54:
8e:d5:64:a2:50:24:fe:c2:f0:cb:fc:82:d2:1c:3c:33:d1:2d:
a5:f6:ca:c9:e8:17:6c:86:a9:f3:6a:2a:3d:d0:56:94:b1:31:
01:75:bd:43:2c:cd:18:06:ce:8d:26:fa:4b:06:cd:78:0f:ce:
ff:46:f1:b3:90:1a:d8:ae:cd:eb:10:87:29:44:10:eb:fe:c4:
5e:4b:cc:dc:0f:66:6e:50:00:16:ce:f2:fe:05:bb:05:b6:5a:
cc:e1:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:51:49 2024 by rpki-client on console-fra.rpki-client.org