Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/iRQrWPVJqcNrK5zGNh4R0DekwQA.roa
File: iRQrWPVJqcNrK5zGNh4R0DekwQA.roa (raw, json)
Hash identifier: IWZ/xFk+du4w+cwGrZAdJ6I9C36jfm93DINYsOKLIlA=
Subject key identifier: 89:14:2B:58:F5:49:A9:C3:6B:2B:9C:C6:36:1E:11:D0:37:A4:C1:00
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 018CC56EE8752D03D6868FE9AA4ACE6D243B
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/iRQrWPVJqcNrK5zGNh4R0DekwQA.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204918
IP address blocks: 185.135.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e8:75:2d:03:d6:86:8f:e9:aa:4a:ce:6d:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89142b58f549a9c36b2b9cc6361e11d037a4c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:72:55:6f:66:e4:9a:ba:70:3d:ee:fb:ee:
74:3c:78:0b:48:b9:df:d9:4d:f4:91:51:67:a4:c5:
ea:0c:e0:c1:29:24:71:08:1c:a4:54:36:71:46:f7:
0d:f1:dd:f5:7e:1c:22:ea:18:a8:c5:d0:b4:2b:af:
d7:39:fc:68:1d:66:52:71:15:e0:81:b9:2d:c2:8a:
d1:cb:f7:63:d8:f1:d7:92:57:bd:bd:18:1f:5e:33:
8f:63:51:23:b0:ac:9d:f7:df:7e:21:b1:1f:9b:7e:
8b:e3:4b:ea:03:fe:35:41:8a:19:d1:18:e8:48:58:
46:1e:03:78:06:c5:6c:f6:9e:19:86:9d:8f:2f:e4:
5d:71:e0:59:22:5c:63:ba:dd:73:dc:67:19:6a:fc:
a3:1e:17:85:4a:d3:0a:b8:54:99:8e:00:ca:dd:cf:
0e:d7:44:4c:cb:c0:b9:06:a9:69:25:5d:30:6f:3f:
5a:2e:73:84:95:48:01:f8:33:ca:ea:12:0a:79:55:
fe:96:c1:45:e3:c3:5b:fa:86:ef:c2:28:3b:32:ad:
0e:29:5d:1c:01:db:f0:56:a0:54:17:f4:c4:06:0b:
f0:ff:7d:cf:ff:58:37:3a:ab:d7:a3:ce:1d:89:30:
a2:22:e3:91:34:55:e6:a8:3d:99:6d:b4:2d:98:ca:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:2B:58:F5:49:A9:C3:6B:2B:9C:C6:36:1E:11:D0:37:A4:C1:00
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/iRQrWPVJqcNrK5zGNh4R0DekwQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.96.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ee:9d:3c:18:91:ba:cc:cf:37:d4:d7:d1:b0:b6:8e:a8:0f:
42:bb:c4:6f:46:1b:98:7d:a8:ea:81:0b:e1:64:ea:ed:a6:b6:
2c:f3:b0:4d:53:fb:f5:99:02:66:db:01:05:e5:69:f7:8e:e9:
1f:c6:71:79:b5:05:0e:7a:02:2c:71:dd:6e:fa:ec:a4:9b:68:
1b:e8:2f:54:20:03:11:93:24:ff:e6:b2:00:12:e8:3c:2e:d1:
9c:92:70:59:ec:15:d6:09:1b:ff:5a:bf:cd:5b:99:e5:3e:e2:
b2:5a:56:71:2c:12:9c:99:f0:3a:fb:6d:52:19:52:a5:b9:b1:
b9:a9:79:af:a3:ee:c1:fa:8d:e0:65:23:e1:1c:d0:60:99:98:
48:52:c5:85:9b:a3:7c:8d:15:ce:c1:46:38:38:93:99:a4:db:
74:f1:2d:88:5c:69:a7:61:93:c4:3f:a8:52:74:57:a1:54:02:
27:b3:c7:5e:f2:8a:0b:c2:47:72:12:a4:76:22:7a:37:1c:cb:
2f:83:fc:10:b2:03:51:83:9a:f8:f3:f4:65:17:35:49:55:c7:
ff:0d:8f:cd:96:59:0a:61:6a:db:89:93:ad:88:68:23:cb:c9:
b7:d2:fd:b6:8d:05:88:99:12:31:c5:73:bd:13:a9:8c:ad:8a:
48:ad:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 16:45:34 2024 by rpki-client on console-ams.rpki-client.org