Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/SS6qD5hBHFZ8XKrXwxjOwAyw4eE.roa
File: SS6qD5hBHFZ8XKrXwxjOwAyw4eE.roa (raw, json)
Hash identifier: 37OtCU7A1BccKYEfilvoTJixDGeyzRpxrLAnzsQ3+dU=
Subject key identifier: 49:2E:AA:0F:98:41:1C:56:7C:5C:AA:D7:C3:18:CE:C0:0C:B0:E1:E1
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 018CC795814D023F5213FB992644B7AE296C
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/SS6qD5hBHFZ8XKrXwxjOwAyw4eE.roa
Signing time: Tue 02 Jan 2024 00:31:52 +0000
ROA not before: Tue 02 Jan 2024 00:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60232
IP address blocks: 185.40.72.0/22 maxlen: 24
195.142.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:81:4d:02:3f:52:13:fb:99:26:44:b7:ae:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 2 00:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=492eaa0f98411c567c5caad7c318cec00cb0e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:fc:4d:f2:99:53:a2:bc:3e:68:71:9b:80:
6a:5f:61:7a:db:35:b5:2a:dd:96:27:ee:a6:77:65:
dc:19:05:4c:0e:36:ea:43:86:09:24:b0:3e:7e:b8:
8d:c5:58:55:b8:8f:8c:30:08:e5:ba:24:12:ed:58:
f8:cc:be:94:2e:3b:95:84:f5:a8:76:5f:29:90:ae:
dc:17:0d:45:15:f6:37:81:e3:f5:bd:7e:8c:b3:a9:
e4:eb:00:bf:f1:a6:76:fb:96:71:a8:45:1d:64:b3:
53:51:d1:d0:51:72:8f:dc:9d:65:4b:1d:6c:39:db:
3d:f1:a9:fa:37:69:fa:47:de:a8:d9:0d:35:fb:1a:
84:55:2a:51:e7:1c:3a:4a:0e:ff:48:b6:0f:dc:fc:
bd:0e:a8:9c:1d:07:25:68:be:ae:f9:1c:50:a8:a0:
7e:e7:f9:6c:a7:8d:fe:a8:c6:d8:e3:60:be:cd:2c:
64:48:a9:13:15:90:13:c3:d1:a4:d4:84:9f:d1:e4:
31:f3:0d:1a:84:61:97:47:d6:d8:32:8d:17:16:93:
42:f5:2a:bb:75:1a:c3:65:1b:fd:8e:4b:25:ca:b1:
18:af:14:d5:c4:44:1b:a2:ad:69:03:07:7b:b5:87:
af:ea:7b:78:f0:2e:d2:30:cb:fe:12:bd:13:01:5e:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:AA:0F:98:41:1C:56:7C:5C:AA:D7:C3:18:CE:C0:0C:B0:E1:E1
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/SS6qD5hBHFZ8XKrXwxjOwAyw4eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.72.0/22
195.142.194.0/24
Signature Algorithm: sha256WithRSAEncryption
23:92:65:ca:ee:c6:96:9a:37:39:b0:d4:53:de:72:5b:a5:46:
55:9a:75:b3:a6:9c:82:99:f9:d3:49:67:33:f5:8b:3f:08:70:
4c:ee:1e:4e:e8:5f:88:56:2e:86:54:ec:96:ed:c6:03:6b:27:
80:03:e9:86:a6:77:c1:3e:56:1f:ea:c7:b7:49:ea:5f:08:60:
69:a5:40:8d:da:56:bb:58:12:3a:19:99:28:dd:d3:7d:32:07:
44:63:b8:68:16:2a:8f:25:ae:46:09:2c:2a:5a:b7:2a:cd:2e:
bb:64:47:a6:f4:a6:a4:e3:93:52:60:66:f3:f6:a9:21:ab:20:
56:be:4d:10:61:47:2e:83:9e:82:4d:ae:fe:ac:51:a5:27:3a:
6e:45:46:85:c1:42:4a:cb:e4:ab:52:65:f0:6e:4d:1c:6b:f0:
43:15:53:8f:9a:28:e1:64:8a:3f:1c:d5:45:65:68:8c:5b:f6:
94:6e:d1:64:93:8a:a1:a3:96:eb:88:41:05:87:6f:0a:b8:9e:
d8:cd:e0:65:a2:0d:b1:27:c1:27:71:4a:32:94:b1:42:f6:b5:
3f:a3:73:34:c8:ec:e0:ac:77:fb:62:fc:67:41:86:08:69:c4:
f3:c9:15:4b:80:08:46:06:5a:64:c9:a8:9b:87:57:9e:4e:31:
88:e9:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:06:37 2024 by rpki-client on console-ams.rpki-client.org