Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1SqdzzeqeCA424gzLkjgqW8lV6k.roa
File: 1SqdzzeqeCA424gzLkjgqW8lV6k.roa (raw, json)
Hash identifier: Cf2EbRx0fRuF/4X6Sh5MwqAD318CJakNyUn7AGlkTfc=
Subject key identifier: D5:2A:9D:CF:37:AA:78:20:38:DB:88:33:2E:48:E0:A9:6F:25:57:A9
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 018CC5DC0868D298E73F98580CBEE86EB2DE
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1SqdzzeqeCA424gzLkjgqW8lV6k.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.103.4.0/22 maxlen: 22
185.103.6.0/24 maxlen: 24
185.103.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:08:68:d2:98:e7:3f:98:58:0c:be:e8:6e:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52a9dcf37aa782038db88332e48e0a96f2557a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:8e:41:24:89:73:65:c8:5d:c0:a7:ff:bc:
69:32:37:6b:2b:4e:29:75:77:f3:81:6d:d4:8d:0b:
fe:17:40:16:37:67:4b:ca:d1:7a:db:04:ab:6c:5e:
fd:ea:38:88:69:db:02:99:bc:dd:8a:8d:1d:5d:a5:
e6:54:b3:b8:df:bf:45:a5:31:3c:b6:1e:7a:56:c9:
75:33:cd:00:43:2c:a7:9b:65:91:68:ca:6d:7c:7e:
ba:5f:f5:03:55:69:11:03:9e:e2:85:61:4c:5e:cb:
21:10:52:9a:5c:73:c3:e1:e2:3f:4f:40:54:e4:8b:
e0:18:74:d9:25:f3:91:36:00:b8:73:ce:9b:e2:0d:
74:aa:5d:14:78:5c:6b:d2:d5:70:b3:57:c4:3d:a0:
25:b5:16:5c:60:e7:99:31:ca:2d:89:89:ee:f9:5b:
d5:68:86:bd:d2:9b:de:94:66:25:d1:e8:1f:a6:ab:
44:06:f1:9e:a7:eb:e6:20:8a:80:a4:61:ce:c0:f1:
93:91:a2:07:3f:56:fc:a8:fd:4b:ab:22:3e:27:8c:
40:af:3b:87:67:ec:4f:d7:f9:17:c4:3a:23:77:d4:
d5:d7:e2:ab:af:6c:1b:36:97:75:15:fc:ce:69:4f:
cf:09:bf:d8:01:80:b1:b3:83:73:64:69:cf:f0:72:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:9D:CF:37:AA:78:20:38:DB:88:33:2E:48:E0:A9:6F:25:57:A9
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1SqdzzeqeCA424gzLkjgqW8lV6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b7:72:23:20:bf:6b:49:4d:ab:22:af:36:ef:d1:e2:e8:79:
91:3c:b5:67:d2:96:50:29:f2:b1:cb:da:97:fd:52:7f:25:b2:
a1:91:c3:cb:bb:10:a2:8b:cc:8f:de:72:44:b3:f2:af:67:16:
62:36:b3:66:8e:2f:aa:82:29:fe:7c:26:e6:2e:1f:a9:74:a5:
5d:ea:32:33:0f:1d:4a:00:d9:b9:14:13:85:b1:88:9d:f9:53:
f9:23:da:a1:45:d9:40:c8:56:23:b9:e9:d4:21:ce:0f:32:2a:
40:ff:96:0d:1a:19:ce:e3:1d:ed:aa:3e:bc:e9:83:a5:30:6d:
4b:23:eb:fe:dc:91:e2:62:fc:90:29:ee:51:84:eb:fe:20:c0:
d3:d8:55:29:60:64:78:6b:75:24:e3:23:75:e6:c2:29:95:ec:
e5:db:6e:54:59:67:30:4b:7f:a4:a0:b6:4f:7d:81:7d:bd:41:
59:de:77:62:55:4a:63:76:e4:3f:de:fd:c5:1a:79:e1:b4:c0:
01:13:c0:06:78:3c:e2:df:0b:c2:dc:9d:c9:08:c6:4f:5b:da:
5f:40:2c:dc:fa:29:59:6b:f5:f8:92:ca:86:7b:8d:0b:32:b4:
06:73:e5:1e:c7:eb:38:eb:ff:84:f2:fd:e8:99:5a:9c:21:4a:
07:9f:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:58:30 2024 by rpki-client on console-ams.rpki-client.org