Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/rQ_7jjrs8Nx-cpQcBKjn9lwoLbM.roa
File: rQ_7jjrs8Nx-cpQcBKjn9lwoLbM.roa (raw, json)
Hash identifier: 3K0PyOTewchdoIscJoG7H/Yg2Mje4dOyrhQyhxVmh48=
Subject key identifier: AD:0F:FB:8E:3A:EC:F0:DC:7E:72:94:1C:04:A8:E7:F6:5C:28:2D:B3
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 018CC5DC029A798F27035B453E9D8D8303A6
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/rQ_7jjrs8Nx-cpQcBKjn9lwoLbM.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2094
IP address blocks: 185.4.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:02:9a:79:8f:27:03:5b:45:3e:9d:8d:83:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad0ffb8e3aecf0dc7e72941c04a8e7f65c282db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:fb:61:85:b3:09:92:c4:a6:a0:58:6e:62:
da:92:1d:b2:77:63:6a:b2:cd:49:d5:3b:c8:b6:bc:
85:e7:71:fe:52:4e:5b:cf:df:e9:b5:54:a8:a6:38:
96:64:3f:e1:be:f3:e6:5d:9a:37:f9:9e:fb:ac:fd:
c9:3e:b4:e4:9d:a0:f3:20:54:64:ff:53:b4:af:48:
f8:c9:9b:af:e2:65:23:4c:28:0d:7f:e6:78:2c:0c:
a7:80:5a:df:46:46:05:33:96:45:07:ee:00:64:8a:
4d:68:37:b9:62:05:12:90:bb:bd:a2:41:eb:26:77:
a5:7b:2d:ad:10:96:e7:3f:b8:1f:01:a9:ff:02:f9:
29:dc:e0:22:fd:31:5a:38:95:b5:98:29:76:7d:63:
cd:c0:97:69:1e:0f:29:d3:b5:6f:fe:f3:28:17:79:
96:1c:73:32:98:3b:c0:8f:5c:f0:3c:23:aa:95:17:
3a:83:98:b1:29:fc:5e:67:b0:d6:a4:c9:62:73:5d:
57:4b:ba:5f:5d:54:0e:e8:e9:e7:90:a2:44:1e:be:
3e:ac:26:5b:08:e4:da:f4:f9:10:26:18:17:af:79:
04:ba:07:7b:88:18:e7:00:9a:86:d5:55:72:60:f5:
b5:d9:84:7d:41:0f:88:bd:2d:e6:6e:71:7a:8e:49:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:FB:8E:3A:EC:F0:DC:7E:72:94:1C:04:A8:E7:F6:5C:28:2D:B3
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/rQ_7jjrs8Nx-cpQcBKjn9lwoLbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ea:13:99:70:e0:8e:03:4d:ec:d3:01:32:48:68:27:f0:30:
cf:e1:a3:ee:70:2a:67:5c:e6:48:63:15:7b:08:66:4f:4e:72:
0b:79:23:01:95:b7:2c:63:71:96:ad:34:71:f3:33:1d:15:c1:
5f:bc:d5:34:51:a0:28:ec:78:24:99:83:9d:a7:d5:a0:02:bb:
90:d8:5b:22:38:70:68:9d:b4:d9:e6:fc:88:4f:10:a6:88:33:
8b:c8:12:26:2b:b2:84:fe:a4:b7:c5:0f:0b:ec:81:ea:74:8f:
18:d9:db:cd:5a:fe:8c:97:3e:19:85:33:af:85:c0:28:70:94:
d9:e9:2b:35:49:90:12:75:66:89:2f:12:48:ad:37:80:3a:05:
13:8a:8d:e5:3a:c8:e3:67:35:6b:3a:e2:7d:19:c4:d4:dd:23:
35:ab:72:29:46:1b:2a:71:d0:62:0b:77:ef:c2:7c:08:31:1a:
10:a5:8d:35:62:93:4e:57:00:8f:af:88:35:1f:af:20:58:27:
d3:ce:61:af:37:e0:61:a1:ac:6c:2a:4a:09:e3:52:87:bd:0d:
ee:a0:d7:c3:71:c0:a2:b2:83:6b:df:4f:27:64:c4:58:d6:f9:
f6:2f:45:e0:06:e0:e3:83:f2:c1:d3:86:6b:97:ee:9f:69:ed:
79:61:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:34:07 2024 by rpki-client on console-ams.rpki-client.org