Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/j_b5uzB9KTZtfAkHQigct4z8uk0.roa
File: j_b5uzB9KTZtfAkHQigct4z8uk0.roa (raw, json)
Hash identifier: 3LiUdZQ8L762CGCZsACDBi0SssUAYTuOKw8guNWP7mg=
Subject key identifier: 8F:F6:F9:BB:30:7D:29:36:6D:7C:09:07:42:28:1C:B7:8C:FC:BA:4D
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 018D68F273E1921C9CCB5580711106409DDB
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/j_b5uzB9KTZtfAkHQigct4z8uk0.roa
Signing time: Fri 02 Feb 2024 08:32:16 +0000
ROA not before: Fri 02 Feb 2024 08:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43242
IP address blocks: 185.171.92.0/22 maxlen: 22
185.171.92.0/24 maxlen: 24
185.171.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:f2:73:e1:92:1c:9c:cb:55:80:71:11:06:40:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Feb 2 08:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff6f9bb307d29366d7c090742281cb78cfcba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:ea:d7:ad:ca:2b:54:a3:09:26:66:5d:37:
1e:a7:21:48:a0:b1:ab:71:59:6c:ac:bf:c4:93:3a:
e4:54:2e:3a:79:a6:de:8d:a8:70:ee:fa:02:88:ff:
ea:ed:d7:de:6f:50:06:52:d5:66:79:d8:f3:ea:24:
94:66:c7:3a:d5:66:ff:d9:7e:fe:31:f1:ee:d1:2a:
bf:e1:58:43:db:ce:74:fd:39:0b:94:30:73:25:1a:
0a:d8:bd:f4:0d:65:59:dc:2e:f3:7d:a5:e6:61:32:
91:c2:24:b9:7b:9f:d3:c9:61:53:27:2f:b7:b8:9b:
96:bb:0d:fc:04:2f:d1:23:4e:82:c0:c4:c0:f2:dc:
3d:69:13:dd:35:ab:2e:dc:fc:89:d6:b2:b2:ca:82:
4d:04:44:50:12:de:38:24:5c:96:59:be:d4:98:60:
9c:25:10:16:1f:dd:d7:fd:8f:0a:07:19:ec:a6:65:
dd:df:ea:ad:da:54:eb:4e:c2:69:73:f1:9a:31:c1:
63:28:f9:91:e5:ea:51:4d:0b:8d:0c:cf:d8:90:15:
b3:8b:57:a1:f8:f7:35:06:e4:0b:a0:1a:1d:72:bb:
1c:f4:d3:78:fd:53:0e:2a:42:a2:5c:44:4c:00:8f:
a8:b4:1f:8e:28:20:20:ec:52:77:75:58:21:63:43:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:F9:BB:30:7D:29:36:6D:7C:09:07:42:28:1C:B7:8C:FC:BA:4D
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/j_b5uzB9KTZtfAkHQigct4z8uk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.92.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:04:94:d3:9f:39:a7:9d:84:b2:cc:e5:9d:e8:f0:6f:30:e0:
67:4d:85:b0:82:d8:c8:94:d1:9e:99:9c:23:cc:f0:0e:29:e2:
0f:2e:73:20:fc:18:9e:ca:dd:05:88:21:f9:56:07:e8:8e:ce:
be:2e:4b:1d:0e:70:34:d9:36:8c:67:c0:51:96:21:46:26:cc:
e4:33:5d:7d:f4:68:43:12:19:97:df:08:a0:9a:a4:da:31:f2:
5a:35:a1:fd:e4:2e:19:54:a8:d5:c7:89:d6:a8:05:36:23:1d:
c1:5f:d7:6f:89:15:b2:01:27:bc:4f:6d:08:52:d6:69:3c:f4:
b2:d2:ed:1b:a6:58:00:e3:67:91:67:43:86:9f:24:f6:33:33:
e4:f9:fa:ae:68:26:b4:4c:f2:55:53:a7:8a:cf:70:70:dd:93:
2a:ed:02:b7:1d:07:11:93:81:9c:fd:84:6c:df:f5:9c:9c:41:
b7:c4:b5:8c:1d:9b:11:40:ec:75:7f:66:ce:dc:30:38:1f:a2:
e3:30:0c:7d:de:c5:09:ac:b1:d4:de:69:8c:e2:18:2d:17:3b:
35:5d:8f:57:55:1b:87:f6:d9:fb:df:73:26:b5:42:91:4c:39:
85:69:99:bc:85:cc:e6:76:97:8e:de:e0:08:73:f9:e9:d1:6c:
68:6a:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:44 2024 by rpki-client on console-fra.rpki-client.org