Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p4gIV7RIgcgMPINSbKZFnBBCJ2Q.roa
File: p4gIV7RIgcgMPINSbKZFnBBCJ2Q.roa (raw, json)
Hash identifier: lIYPG+pDoxKiydAUCFWTubHsT0AycZMgRt7/yFUmzJk=
Subject key identifier: A7:88:08:57:B4:48:81:C8:0C:3C:83:52:6C:A6:45:9C:10:42:27:64
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018CC26D5A1C4629BC750F0B370E70E9B582
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p4gIV7RIgcgMPINSbKZFnBBCJ2Q.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 148996
IP address blocks: 14.102.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:1c:46:29:bc:75:0f:0b:37:0e:70:e9:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7880857b44881c80c3c83526ca6459c10422764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:b7:32:8e:45:d2:9b:4b:e4:5c:c9:b3:bf:
42:5d:66:8f:0a:1e:fc:17:b4:34:ee:12:12:2e:59:
b7:95:27:29:3f:1d:40:32:69:fb:06:69:54:3c:44:
a3:f4:cd:68:39:73:e7:b6:99:78:a6:2b:38:2a:a3:
da:db:13:03:58:cd:01:64:82:4e:c4:41:1d:3a:52:
9d:ed:b1:c5:75:0a:73:f1:d9:60:b3:4e:6d:f5:3f:
40:2f:7a:b6:50:df:09:df:12:da:b4:82:c4:92:97:
04:88:1f:55:e4:21:d0:b5:82:42:53:b7:de:3f:4e:
72:f8:a3:c7:55:6f:f3:6d:c4:77:4d:13:d2:45:58:
2a:5e:6e:84:b1:b2:c2:2b:55:98:aa:91:d5:c1:12:
e7:08:78:4e:8d:9f:29:f8:56:b7:af:ff:d0:42:ae:
83:13:08:26:01:2d:65:c8:95:24:5b:23:6c:f6:38:
3c:78:91:04:27:18:31:73:00:e7:f7:84:a9:e6:96:
25:e5:0c:0f:f5:df:3f:23:12:05:81:cc:ba:d4:fd:
5e:e5:9d:03:03:c3:a7:b7:e5:ca:95:67:38:de:a9:
4d:b0:97:07:77:1c:32:b0:31:e8:1b:37:a1:e5:26:
c1:3f:f9:f6:1d:cf:7a:00:17:d6:1e:92:e3:e6:2d:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:08:57:B4:48:81:C8:0C:3C:83:52:6C:A6:45:9C:10:42:27:64
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/p4gIV7RIgcgMPINSbKZFnBBCJ2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:7b:13:91:b9:75:5d:03:7d:a2:93:e9:54:62:08:39:da:c1:
3f:c1:24:a9:e5:3b:69:4e:a0:98:37:56:9e:10:46:bb:8c:d3:
a2:1f:98:71:28:7c:c8:8c:da:18:c0:25:a3:ed:6a:82:00:39:
5e:d6:c6:dd:82:2b:7c:2d:44:5e:9b:80:fb:22:ae:ac:47:63:
e3:9c:a9:5d:dd:b9:34:b0:8b:66:7a:26:25:17:b2:73:7a:ad:
25:0b:a0:5d:16:f6:74:86:b4:24:4b:20:3e:8f:af:75:d3:4d:
d3:75:3b:93:3e:11:94:e6:49:de:84:4b:3c:1d:d2:b4:6e:cf:
76:a4:52:91:b0:e6:62:62:23:20:09:62:e2:09:68:7a:82:55:
aa:f3:26:e7:62:3e:88:f6:c2:07:db:79:bb:46:3d:d1:a0:40:
1d:63:8c:09:0c:fe:ea:cc:97:d8:13:bf:fb:e8:e9:7e:54:d6:
65:ff:d6:a1:38:f4:70:7d:92:14:88:fa:d5:df:85:f8:2a:f0:
44:c6:78:7c:a9:24:d9:e8:5f:2c:68:99:17:3f:6c:04:2a:b3:
a9:74:52:b7:17:d9:bb:1d:c9:a2:fc:8a:fb:66:f2:9e:07:c5:
30:94:91:8b:69:bd:36:9a:7f:ee:cb:68:6d:f2:ce:20:e3:b9:
30:41:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:17:40 2024 by rpki-client on console-ams.rpki-client.org