Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/H4s92AgEMFapmq2_EcpG162UaRA.roa
File: H4s92AgEMFapmq2_EcpG162UaRA.roa (raw, json)
Hash identifier: N5EIuGKLBpuaHolKW7mhQMMdbKcIISodwbkMAHbTrto=
Subject key identifier: 1F:8B:3D:D8:08:04:30:56:A9:9A:AD:BF:11:CA:46:D7:AD:94:69:10
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 018CC64B01C4DB2B3769F3B99498646C2349
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/H4s92AgEMFapmq2_EcpG162UaRA.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51468
IP address blocks: 141.138.172.0/22 maxlen: 22
2a03:3c00:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:01:c4:db:2b:37:69:f3:b9:94:98:64:6c:23:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f8b3dd808043056a99aadbf11ca46d7ad946910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:07:12:76:c0:3c:43:13:b2:25:b2:14:f3:
c7:c1:0d:07:71:14:9d:4e:1b:e6:cc:e0:aa:b4:75:
f5:e5:35:e0:f2:b4:3e:33:f1:b6:63:7e:28:e3:75:
52:ce:67:4c:ed:0a:0c:64:00:05:53:d7:13:36:c0:
5f:b3:58:6d:6b:61:99:87:39:3f:00:2f:cf:57:36:
2f:5c:75:66:4a:16:93:ab:b7:23:7b:3a:e7:1b:39:
52:8d:14:9b:21:a8:00:64:0f:67:a0:9b:30:c4:df:
68:bb:27:bd:ca:cb:85:a4:67:02:04:26:9a:51:53:
07:ce:6c:fb:bb:3e:f1:20:dd:dc:80:dc:e2:9a:eb:
05:6a:f8:e0:0a:53:b6:b9:ca:2d:0b:44:ac:ae:b0:
16:29:2a:05:79:b3:f2:00:f2:79:33:83:78:93:6c:
15:0f:6d:04:01:cf:7a:3d:2a:3d:61:21:01:11:8d:
2e:74:5e:67:1f:a7:c3:27:6c:25:f8:51:14:ab:ae:
7b:1e:bd:6f:c7:ef:02:bb:65:1b:f6:45:e3:80:aa:
04:07:4a:ff:a2:28:79:ab:84:af:05:7b:fc:84:50:
b7:30:8a:e7:50:1d:ce:35:ab:97:6f:04:3c:eb:70:
0e:4d:54:80:97:b7:28:34:eb:e3:06:20:54:49:da:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:3D:D8:08:04:30:56:A9:9A:AD:BF:11:CA:46:D7:AD:94:69:10
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/H4s92AgEMFapmq2_EcpG162UaRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.172.0/22
IPv6:
2a03:3c00:c000::/34
Signature Algorithm: sha256WithRSAEncryption
3a:84:d3:1f:5f:ee:9a:ac:37:75:5b:9c:36:bf:46:48:36:15:
7e:aa:2e:ea:20:2e:d4:28:7e:4d:ac:15:6a:c2:c1:98:b0:26:
d0:1a:08:49:00:92:de:a6:50:99:e6:c0:c0:76:ef:ce:59:d6:
1d:57:85:6c:4d:33:b0:95:48:0a:4a:13:e7:ea:28:ec:8b:48:
74:6d:e6:1a:87:14:6d:c2:a7:9b:46:b9:53:8f:67:e1:f6:9c:
fb:16:56:ca:a0:30:14:70:b6:fc:2b:73:88:55:f9:32:69:1f:
e5:27:dd:18:00:fd:5e:b9:bd:51:4d:62:4a:5e:db:97:db:5e:
9c:c8:72:99:5a:86:ee:e4:89:a9:1b:66:4f:d5:cf:97:60:66:
df:a1:02:2f:14:8d:b5:08:86:13:65:15:95:c1:cc:98:15:c3:
a1:9e:4c:72:3e:07:6d:4d:96:d7:b8:fe:ed:c3:b7:28:0b:1d:
6b:32:78:68:18:21:27:32:92:b7:ea:3a:5e:e1:41:38:a1:ee:
cf:5e:0b:24:dc:58:fe:5c:16:df:6a:db:24:07:60:b7:1e:b9:
fd:45:60:8b:c1:30:29:9b:27:4a:fb:53:51:20:3e:18:89:14:
a0:6e:ea:71:9c:bf:f0:6d:d9:69:11:3c:bb:bd:aa:8b:81:08:
c7:ce:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:25:10 2024 by rpki-client on console-fra.rpki-client.org