Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/IoqtWeCdVH8DHVLIaRpGU-blUe8.roa
File: IoqtWeCdVH8DHVLIaRpGU-blUe8.roa (raw, json)
Hash identifier: Sx2kacD0TJvhk/JtGsEN09rRLqwG4Id48BO6hIGCO7A=
Subject key identifier: 22:8A:AD:59:E0:9D:54:7F:03:1D:52:C8:69:1A:46:53:E6:E5:51:EF
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 018D4212D04DFD6F9897252F518B31995873
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/IoqtWeCdVH8DHVLIaRpGU-blUe8.roa
Signing time: Thu 25 Jan 2024 19:22:25 +0000
ROA not before: Thu 25 Jan 2024 19:22:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.145.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 12:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:42:12:d0:4d:fd:6f:98:97:25:2f:51:8b:31:99:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Jan 25 19:22:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228aad59e09d547f031d52c8691a4653e6e551ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:09:a5:0a:8d:e4:82:4c:e9:d1:4f:b2:a5:
74:0d:2a:a3:e5:5b:83:c9:9f:19:f6:21:80:7b:76:
48:45:42:31:15:72:ed:16:6b:e5:53:6d:87:34:5e:
3a:38:e7:e1:d4:f8:8a:69:7f:d4:c6:e3:aa:35:3e:
75:17:58:07:b6:be:de:79:ff:30:92:2d:ea:fa:ce:
c0:05:73:8c:92:3b:14:52:b4:73:40:1a:5a:2d:5f:
88:63:f7:03:ea:7f:f2:4e:21:0e:a4:01:6a:59:c0:
cb:97:ff:72:3f:9c:5e:fa:cb:71:56:28:df:a3:8b:
bb:f7:b3:f9:b7:ce:42:07:a7:e7:3c:16:43:2e:f4:
3e:15:a8:fd:c8:07:00:1c:0e:43:87:df:20:2b:92:
88:25:23:10:eb:7c:6e:23:ef:81:43:6c:36:45:ee:
34:ed:67:00:19:d4:b1:34:8a:27:16:bd:f4:67:81:
5e:39:c2:97:99:3c:ab:4f:e9:0d:4c:d6:0b:e4:8f:
5f:56:08:ea:2f:fb:62:5c:1e:8d:bc:47:64:43:de:
64:73:d7:dc:af:83:fc:74:0b:1b:1d:bd:90:ea:04:
84:44:76:55:df:f0:ac:3e:e8:81:f3:d4:1a:b9:8a:
48:40:de:67:d2:57:5f:db:d1:c5:fd:ed:96:d7:fb:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:AD:59:E0:9D:54:7F:03:1D:52:C8:69:1A:46:53:E6:E5:51:EF
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/IoqtWeCdVH8DHVLIaRpGU-blUe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ee:ab:2a:8f:ef:1e:cc:d0:a4:bd:b1:76:55:b7:f8:7b:7b:
37:c8:7a:92:4a:7c:fc:7e:a7:ee:a9:41:e8:8b:b7:a4:d4:1b:
41:23:c6:70:73:c5:82:7d:31:5c:a4:5d:b3:03:39:ff:71:37:
42:c7:07:cf:67:e3:14:64:f0:a3:91:42:7b:2c:8f:10:7e:3c:
60:db:91:a5:4a:9f:91:8b:20:3e:b1:fe:56:57:f5:ad:ad:35:
af:74:42:26:67:47:7e:17:97:f4:d2:fa:0e:3e:ac:1b:f6:f1:
1d:0f:77:a4:69:17:f0:fe:79:6e:40:6b:cb:82:76:05:de:24:
79:27:78:af:19:b1:d0:98:1f:4a:ab:e8:13:64:56:95:fc:a9:
3a:62:3c:a2:df:e7:05:3b:90:be:52:27:16:44:26:bb:09:91:
54:5f:46:96:fb:fa:a2:45:16:68:ad:0f:f1:05:d4:75:04:1e:
b3:a3:35:35:34:09:4d:12:46:13:5f:1c:60:a8:6b:cb:fb:d6:
78:e7:b9:28:4f:db:dd:59:36:70:ae:24:21:61:4c:19:9b:8e:
03:42:7b:90:86:c1:73:1d:90:88:7d:32:c2:a7:42:3b:ae:aa:
5c:df:8f:5e:f0:75:ce:f1:9d:da:e0:cb:b6:32:e0:ef:48:7e:
0f:43:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:19:00 2024 by rpki-client on console-fra.rpki-client.org