Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P1mYZVuL9NL_-_7OIaeC4hkyehc.roa
File: P1mYZVuL9NL_-_7OIaeC4hkyehc.roa (raw, json)
Hash identifier: oyyXoE2j6XxjV+NFeVMr0PfxpmNHCWmSlCQbnA9UgJs=
Subject key identifier: 3F:59:98:65:5B:8B:F4:D2:FF:FB:FE:CE:21:A7:82:E2:19:32:7A:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EBC3C07E01F37166AD155AEF67E0899B0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P1mYZVuL9NL_-_7OIaeC4hkyehc.roa
Signing time: Mon 08 Apr 2024 05:43:54 +0000
ROA not before: Mon 08 Apr 2024 05:43:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197937
IP address blocks: 185.222.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:3c:07:e0:1f:37:16:6a:d1:55:ae:f6:7e:08:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 8 05:43:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f5998655b8bf4d2fffbfece21a782e219327a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:75:7d:e2:28:7a:3e:2c:f1:56:4a:91:c6:
91:1d:05:61:42:08:36:df:b9:40:f3:b4:11:87:10:
59:f3:b9:f8:3e:b3:12:54:0b:39:e2:b1:2c:95:af:
8f:8a:6e:0d:c5:ea:5a:80:e2:1d:bc:3c:66:ae:27:
3f:0b:1e:67:74:b8:9b:23:56:7b:18:ea:06:bb:9f:
d6:fb:bc:d0:c4:56:15:49:fc:58:ed:0e:43:f6:ea:
9d:ea:21:fd:bd:a7:a4:07:4e:65:bf:78:b3:07:a6:
0b:b3:44:72:a6:d2:8a:6d:db:22:e2:3c:7f:53:ae:
b8:d8:b6:ac:d0:2a:ec:02:15:aa:20:02:87:24:a3:
c6:a8:66:32:69:1e:4d:f7:cd:f2:19:75:01:69:cc:
46:6b:13:85:6d:81:46:02:a2:3f:3a:50:a0:a4:31:
20:47:55:a7:d5:0b:ad:02:eb:f9:f6:d3:f9:7f:d2:
2c:cd:73:5a:97:27:e9:ec:f9:d5:92:7a:d9:0f:1b:
d1:f3:c1:2b:69:c1:cd:af:36:93:92:90:e8:a5:c4:
1b:c7:ad:32:09:57:ce:16:c0:99:88:6e:73:26:ba:
49:bb:3c:eb:78:a3:b3:75:5f:7a:fa:5c:9e:01:52:
2a:83:d1:16:dc:60:13:9f:72:e6:94:05:e9:fc:20:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:98:65:5B:8B:F4:D2:FF:FB:FE:CE:21:A7:82:E2:19:32:7A:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/P1mYZVuL9NL_-_7OIaeC4hkyehc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.163.0/24
Signature Algorithm: sha256WithRSAEncryption
88:64:2e:d4:03:2e:68:83:c6:2f:cf:0b:11:b2:7a:28:fa:b3:
b9:60:7e:bc:cc:f7:70:c2:d3:4b:d3:51:08:91:f3:f9:2b:05:
ce:4b:ef:d2:11:1d:b7:2d:ae:4e:13:e4:3a:7c:1d:c8:0f:79:
08:12:ca:70:4b:00:e5:b9:d6:43:f7:99:19:38:df:27:51:56:
13:fe:d6:56:d1:e0:b6:16:f5:f3:e7:39:fe:02:ff:76:88:21:
7c:30:95:6c:f1:6b:3f:1d:53:c3:75:c3:5a:56:11:42:a0:da:
60:7d:21:f7:04:84:a9:68:30:46:a8:62:a1:18:7b:2d:17:75:
03:0a:b9:d1:bf:d1:3c:5d:0f:af:ad:3c:2f:15:31:e5:f0:48:
db:52:58:bd:fd:62:80:50:d0:53:76:49:61:f1:c2:3f:f8:31:
97:48:fb:07:a9:7b:53:75:db:ef:d8:f4:aa:6f:6d:17:2f:7c:
ac:be:72:dd:a0:7c:4a:61:6d:05:95:96:ad:36:2b:68:5f:37:
66:1f:2f:e5:f1:71:e5:bf:3e:c8:36:e2:27:81:22:f6:db:34:
8c:05:80:2c:a5:8f:57:82:5e:9c:ed:cc:fb:fa:be:fd:d7:6c:
a6:91:ce:22:3f:26:11:d2:c1:21:5c:b7:0f:c6:df:32:7a:d7:
e3:cf:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:30:47 2024 by rpki-client on console-fra.rpki-client.org