Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/RqZnGmacnsFYhNcluA6a1pyH76Y.roa
File: RqZnGmacnsFYhNcluA6a1pyH76Y.roa (raw, json)
Hash identifier: 1mjhuxve4tpaPvMqg/bbyaA4xpWDRArGV9uOotwCNhQ=
Subject key identifier: 46:A6:67:1A:66:9C:9E:C1:58:84:D7:25:B8:0E:9A:D6:9C:87:EF:A6
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 018CCA96F89EE154B2AE65BF88B88F289F28
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/RqZnGmacnsFYhNcluA6a1pyH76Y.roa
Signing time: Tue 02 Jan 2024 14:32:20 +0000
ROA not before: Tue 02 Jan 2024 14:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57219
IP address blocks: 185.198.18.0/23 maxlen: 23
2a0a:8240::/29 maxlen: 29
2001:7f8:b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:f8:9e:e1:54:b2:ae:65:bf:88:b8:8f:28:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jan 2 14:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a6671a669c9ec15884d725b80e9ad69c87efa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:df:af:cb:1a:2d:93:ea:8d:1a:02:ca:1d:
55:07:e4:c9:2e:93:44:46:4a:bf:8b:28:ed:0c:7f:
4f:bf:32:27:39:cc:e2:84:9b:ae:c1:11:73:ec:20:
fa:0b:83:79:ad:1f:52:4f:ff:a2:6b:e6:c1:a0:eb:
92:8b:61:3a:4d:81:df:20:52:ba:8f:1d:f5:c1:cf:
fa:b3:8a:9b:ec:ea:e3:66:54:91:93:39:47:bb:a9:
07:fb:4f:b6:59:98:5a:19:ad:73:e0:88:16:f6:4e:
0e:f6:1b:38:64:91:de:eb:db:4a:9b:4c:81:75:8f:
9a:80:68:b9:37:b8:78:7d:c7:99:ac:7b:1b:d1:24:
15:c8:92:16:65:e0:9b:ce:71:ed:db:fd:5b:8b:97:
0d:4d:2f:44:f6:51:63:6c:60:e0:eb:a4:c5:d6:35:
7f:8d:6c:fe:5b:3e:2b:da:a7:71:73:7a:b6:91:3d:
ad:52:8c:54:e0:5a:11:59:ed:cb:05:20:4c:27:de:
27:8f:dc:2c:c1:5c:f8:5e:a6:b3:75:e2:13:57:4f:
b8:2d:c3:eb:3a:92:3c:8c:e7:72:e4:c9:12:c1:7a:
75:6d:98:f1:a8:99:4b:58:e6:81:3f:81:34:81:78:
1c:3b:58:51:58:d0:0f:ac:62:79:d1:d6:a7:eb:6d:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A6:67:1A:66:9C:9E:C1:58:84:D7:25:B8:0E:9A:D6:9C:87:EF:A6
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/RqZnGmacnsFYhNcluA6a1pyH76Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.18.0/23
IPv6:
2001:7f8:b3::/48
2a0a:8240::/29
Signature Algorithm: sha256WithRSAEncryption
67:66:5b:21:55:3f:f3:17:cb:ab:52:84:72:dd:ff:95:8d:e2:
71:2b:ba:1d:a0:4e:c2:d7:f0:c2:92:1e:bc:91:c0:33:69:5c:
2d:1e:0d:b1:63:9e:56:ba:3b:d9:c4:49:c2:2f:42:7a:f5:e0:
55:bf:c9:11:79:dd:65:05:15:4d:16:0a:db:38:ef:6e:b7:b5:
a7:6b:f4:b5:6b:d7:20:e5:7a:a6:15:b6:de:ab:88:78:bb:bb:
8e:d2:83:31:de:1e:85:84:22:6b:3f:1b:e8:fc:a5:45:c0:2c:
bc:68:cc:77:5d:90:d3:55:f0:a5:dc:f0:a8:b9:d8:a1:a3:ba:
b6:b5:e3:b6:da:02:34:3a:23:12:32:59:2f:93:8c:f5:1f:b6:
0b:ac:bb:8a:45:31:66:5c:94:b3:f7:8c:da:e7:31:bb:bd:7a:
21:e7:a4:73:1a:f1:87:9d:16:59:f3:d7:2a:1c:14:b4:b6:37:
e9:d7:fd:77:ab:fd:6e:07:d5:8d:43:87:cd:38:2a:b4:bc:5e:
17:e7:18:c4:2c:f8:e6:f6:7f:08:fa:01:eb:5b:06:3c:84:ee:
df:fd:ac:54:24:8c:3b:34:0d:e0:32:4a:36:b0:ea:d9:4f:22:
ca:15:c8:d1:29:51:72:bf:11:3f:9a:4d:80:1d:4f:18:02:c3:
c1:a2:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:15:49 2024 by rpki-client on console-ams.rpki-client.org