Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/THI3epOjz7ojyW93aVDwbqxw0VI.roa
File: THI3epOjz7ojyW93aVDwbqxw0VI.roa (raw, json)
Hash identifier: LAJYCQ96Xfuj+C6m3Ca48gkUepdNGTvGFfdWZ2oPKDI=
Subject key identifier: 4C:72:37:7A:93:A3:CF:BA:23:C9:6F:77:69:50:F0:6E:AC:70:D1:52
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 018CC5DC4CCC2288693C3823DA24EE68A0F0
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/THI3epOjz7ojyW93aVDwbqxw0VI.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31673
IP address blocks: 185.87.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4c:cc:22:88:69:3c:38:23:da:24:ee:68:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c72377a93a3cfba23c96f776950f06eac70d152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:4a:27:38:8c:87:92:d4:70:ae:df:a1:c1:
a6:6d:60:8d:d7:99:4b:e5:c1:70:0a:11:e0:63:28:
be:1b:2f:5c:f4:6a:6f:b2:f1:92:bc:78:79:37:63:
f7:10:17:98:3d:6d:f5:a4:e4:0e:83:ba:63:ab:95:
72:58:6b:8b:19:c0:91:c2:6b:f3:32:a3:9d:8a:e8:
5e:92:3f:52:6c:35:63:20:2c:8e:a9:41:bd:39:0f:
bb:e3:fc:3f:d0:8b:27:bf:7a:9e:94:45:8d:b0:82:
99:8e:6d:8a:09:e8:ce:cd:66:0f:67:c2:1f:03:0a:
93:40:6a:fc:ed:5c:95:6c:ad:fc:b8:a5:84:51:6c:
59:2c:3a:62:f8:d8:b9:11:28:d8:3b:bc:e7:eb:64:
0f:f2:c0:dd:9f:6d:f1:2b:01:2b:25:bd:86:b0:e8:
b2:14:6e:c1:87:8c:ea:20:1d:55:4f:af:43:9b:15:
a7:c6:b0:d6:6a:e6:78:04:7b:21:2e:3b:c7:a2:d7:
8f:fc:2e:15:5e:59:14:3a:91:9e:0b:0b:91:64:c6:
78:56:eb:ff:93:81:e6:72:dd:db:6d:5f:b9:50:a6:
be:2f:87:b3:82:bb:ba:01:fa:2b:84:1a:b8:21:a4:
08:44:4a:f7:38:01:2c:10:93:cd:d6:4e:67:0e:b4:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:37:7A:93:A3:CF:BA:23:C9:6F:77:69:50:F0:6E:AC:70:D1:52
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/THI3epOjz7ojyW93aVDwbqxw0VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.152.0/22
Signature Algorithm: sha256WithRSAEncryption
45:25:db:61:10:2f:16:55:ce:31:81:91:1a:bc:e8:ff:34:85:
e9:88:af:a0:cd:56:d1:cf:ab:1a:bd:cc:ec:5f:08:d6:ac:71:
f2:06:ae:67:a5:ef:54:da:eb:a0:26:ee:0f:d5:6e:2f:c9:29:
89:51:f6:84:5d:d0:74:5a:18:2c:43:fb:e4:03:b7:4a:6b:0d:
8c:f8:37:e8:7a:3b:60:36:77:65:f8:91:0e:0a:e0:4f:f8:bb:
0d:02:b8:0f:66:38:08:e0:90:c7:60:17:9d:c2:8a:d6:0f:c1:
8a:fc:b1:3c:7e:11:0e:81:08:b3:2b:d8:27:21:a8:1f:e5:40:
04:91:d3:e5:ec:6d:37:8f:be:48:01:2a:f0:4c:2f:54:56:2d:
e7:23:9e:b2:b9:c2:35:db:a1:ae:76:9d:49:3f:27:17:8b:3b:
67:e5:49:f1:ba:37:5d:29:4d:21:56:60:5e:a2:99:48:fb:85:
41:bb:1a:4a:95:ac:4b:17:08:83:ae:c8:f8:66:23:ec:52:bd:
9c:36:25:0a:e6:11:01:dd:2f:38:b6:20:b8:cf:5d:28:9b:51:
7c:c4:53:24:17:dc:8c:97:69:f6:f8:ce:7c:04:44:7c:ff:b3:
e6:c9:40:2d:6a:9f:3d:6b:3e:e7:0e:22:cc:02:4b:08:fc:20:
04:88:01:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:21:06 2024 by rpki-client on console-ams.rpki-client.org