Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pLa5bv0lMi23oXfj3g2-NVyoG5U.roa
File: pLa5bv0lMi23oXfj3g2-NVyoG5U.roa (raw, json)
Hash identifier: SDJn4hte6TSWqdizz5+aZtIoknQwC80NRLSLeFvuajI=
Subject key identifier: A4:B6:B9:6E:FD:25:32:2D:B7:A1:77:E3:DE:0D:BE:35:5C:A8:1B:95
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018CC26D59D1E6D8FEF3A18163E86ADA9637
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pLa5bv0lMi23oXfj3g2-NVyoG5U.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142036
IP address blocks: 14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:59:d1:e6:d8:fe:f3:a1:81:63:e8:6a:da:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b6b96efd25322db7a177e3de0dbe355ca81b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:b4:62:b3:67:09:c7:f4:b9:7d:c4:9d:13:
f9:2d:19:dd:30:9a:3e:90:09:85:29:96:fd:7a:6d:
3b:26:2d:11:d9:31:af:69:ba:88:96:33:bc:e4:1d:
22:a1:fc:de:24:1c:2e:d2:63:6d:b6:fa:34:e8:94:
63:0c:3f:f5:d1:37:0a:6c:ea:a3:83:e5:83:b9:9e:
db:a3:f2:fa:5f:82:3b:e8:8a:c4:cb:ee:c1:51:61:
24:b3:64:8c:2d:b9:a4:9a:fc:42:4e:39:49:69:3d:
73:a1:94:c2:75:3a:84:b1:e1:c0:30:8a:95:3f:15:
f3:fb:86:a2:00:9d:74:4a:75:1d:28:3f:bf:1a:ba:
90:18:df:64:64:04:21:aa:73:83:83:a2:9d:28:dd:
44:1d:be:ca:c8:07:bd:84:f9:07:5c:01:37:be:85:
6d:e3:f1:50:25:39:0a:3e:c3:cc:14:d6:2d:9a:99:
e4:0d:35:25:1a:e0:35:d5:ae:b2:4e:6c:6e:3c:db:
40:c3:3e:83:b4:8b:9b:f2:5a:17:8d:f8:a3:ae:f6:
fb:ca:70:e2:7f:3d:f3:c4:9e:29:31:82:1c:1a:61:
d8:c2:3e:16:70:6c:c9:3f:9a:9f:ae:1f:fb:0b:94:
d5:f9:4c:2c:16:85:7e:90:6e:cc:4e:7d:50:7c:9e:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:B9:6E:FD:25:32:2D:B7:A1:77:E3:DE:0D:BE:35:5C:A8:1B:95
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pLa5bv0lMi23oXfj3g2-NVyoG5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.237.0-14.102.239.255
Signature Algorithm: sha256WithRSAEncryption
a5:02:a9:46:7f:79:ea:94:25:15:d6:f0:95:12:41:39:6c:ca:
2f:43:8d:1a:1b:89:86:23:f6:67:73:31:5d:de:f2:dc:00:44:
bf:0c:66:c6:60:98:fa:40:65:1e:4d:f2:36:b0:b9:27:f1:78:
36:84:27:97:78:bc:61:bc:e5:60:06:94:75:0b:6c:cf:b4:8b:
79:60:f5:2e:cc:2a:a1:72:84:d4:00:b2:e8:53:ee:63:8f:82:
4c:bc:ad:8a:39:40:3b:2f:3f:43:3c:c3:2c:4f:b1:d9:f1:4b:
32:2a:dd:e3:b9:fa:e1:d6:b4:16:e1:f6:70:da:2f:e3:00:19:
8e:f9:a9:f5:b8:28:10:ff:b9:17:7d:45:a4:dd:3b:93:c5:dd:
aa:ee:14:fc:09:f6:e9:de:8e:86:be:63:1b:dc:ef:c8:dd:79:
c2:ee:d8:48:c6:d0:fd:9d:08:d8:2e:ee:6c:fe:fb:9d:21:ae:
da:ad:46:27:61:5d:1b:7d:d9:65:cb:21:87:68:72:8e:2b:09:
05:24:05:c5:a4:ff:a0:46:8b:48:cc:dc:fc:bb:f5:15:44:3a:
8c:8a:df:db:c0:b1:cc:0f:f5:cb:06:7f:dd:76:36:8d:3e:97:
44:b1:3d:a7:e0:4b:ee:59:b0:3d:e3:84:52:bb:33:65:e3:b9:
f7:a5:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:57:18 2024 by rpki-client on console-ams.rpki-client.org