Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/c1px2pkOzTIYBRhJdwY5ADyj50M.roa
File: c1px2pkOzTIYBRhJdwY5ADyj50M.roa (raw, json)
Hash identifier: msJWWJzuD6uMhJVJMnJjkD9zkpxMNqa9+30wdc4H768=
Subject key identifier: 73:5A:71:DA:99:0E:CD:32:18:05:18:49:77:06:39:00:3C:A3:E7:43
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 018CC56EA637596D37BEC812EEDBAD6D0F3A
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/c1px2pkOzTIYBRhJdwY5ADyj50M.roa
Signing time: Mon 01 Jan 2024 14:30:12 +0000
ROA not before: Mon 01 Jan 2024 14:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198288
IP address blocks: 185.208.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a6:37:59:6d:37:be:c8:12:ee:db:ad:6d:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735a71da990ecd3218051849770639003ca3e743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:7f:8a:00:02:09:b5:af:69:c6:2b:9b:fc:
56:52:2f:90:14:59:4b:72:96:5c:be:f8:33:b0:ef:
7f:80:89:7a:eb:1a:08:dc:5b:6d:04:c4:0d:f8:b3:
8f:ff:d6:09:c2:af:d2:32:68:21:50:02:3b:75:c0:
f0:b4:93:c0:40:05:da:39:f2:05:41:f8:63:c4:78:
b1:78:bf:16:3e:cd:c1:36:a0:d4:1b:62:41:19:65:
7c:2e:3e:0f:2a:2d:fe:e8:64:cd:ee:46:7c:1a:00:
06:e6:09:4d:05:6f:d5:48:6e:e4:c0:8f:2b:33:fa:
c4:c4:c6:af:48:9a:62:fc:97:db:eb:1e:e2:96:56:
4b:2d:70:3d:5c:c2:58:d0:51:8b:6c:43:77:06:7b:
67:eb:cb:cb:8f:bc:3a:41:37:5e:30:e8:15:4a:2e:
0a:59:c4:07:f0:c3:74:bc:89:d0:66:9a:9f:c8:f0:
9d:a8:02:ac:ea:89:cc:ce:e2:97:80:49:6f:29:41:
d2:13:b2:52:37:ce:9a:5b:4d:96:37:81:40:dd:b4:
9b:f4:aa:fa:f3:f7:8b:47:47:3a:54:f5:83:42:7d:
e9:ac:66:f2:c6:9c:66:85:b1:dd:6a:46:e5:66:e6:
4b:7d:68:f0:65:26:a5:23:09:aa:44:9b:f4:33:d2:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:71:DA:99:0E:CD:32:18:05:18:49:77:06:39:00:3C:A3:E7:43
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/c1px2pkOzTIYBRhJdwY5ADyj50M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:55:29:92:5c:16:cf:c0:f4:7f:f0:59:4c:e3:8e:0c:76:00:
ff:cb:f7:a3:fd:8d:58:af:bc:4f:69:45:59:fa:3d:bc:ab:63:
b2:52:57:21:5e:61:8f:3d:61:74:49:5e:69:17:ee:85:e4:ce:
be:2d:2d:8f:49:d4:0d:84:00:40:da:a6:06:99:15:d2:3c:a3:
56:61:ef:1d:7f:e5:7d:3d:cb:b0:62:88:be:d1:a1:20:78:39:
c3:37:dd:44:2a:9e:a0:31:0d:47:e2:0d:28:23:be:28:19:f1:
20:a2:3d:47:e7:1e:14:be:66:14:1e:27:d4:98:7b:93:e5:46:
00:85:47:19:fe:4b:e4:15:4b:0c:12:9b:9d:9a:af:2a:59:93:
5f:24:e6:f1:84:11:6e:25:0e:20:a5:d2:19:b1:51:c1:52:a7:
a0:1d:6c:26:9b:22:74:31:43:f3:4e:2a:7d:0b:9c:94:01:82:
91:af:5f:44:2a:07:51:d0:f2:c2:b4:e7:f4:a4:62:2c:3a:ba:
68:ba:68:73:fd:ab:29:71:54:ac:c4:15:c2:8e:4c:07:1a:3e:
a9:e3:a8:a0:dd:9a:fc:e7:31:cc:0c:ae:9d:01:18:ca:d1:0e:
ff:27:8b:38:eb:2f:b9:bf:65:6e:36:b4:ad:6f:5c:ca:83:88:
ed:0f:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:20:38 2024 by rpki-client on console-fra.rpki-client.org