Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/RKWaBJlrRKZLhWRWq8U29Mmn89g.roa
File: RKWaBJlrRKZLhWRWq8U29Mmn89g.roa (raw, json)
Hash identifier: SzuQIGPldwwtZKcKFlwiJQddqi+nsxzZOmIZ2R2bcxU=
Subject key identifier: 44:A5:9A:04:99:6B:44:A6:4B:85:64:56:AB:C5:36:F4:C9:A7:F3:D8
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 018CCA285269EC98FA954971D1533E3077FF
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/RKWaBJlrRKZLhWRWq8U29Mmn89g.roa
Signing time: Tue 02 Jan 2024 12:31:29 +0000
ROA not before: Tue 02 Jan 2024 12:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56871
IP address blocks: 185.154.216.0/22 maxlen: 24
213.184.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:52:69:ec:98:fa:95:49:71:d1:53:3e:30:77:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Jan 2 12:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a59a04996b44a64b856456abc536f4c9a7f3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:42:15:05:f5:87:39:f4:77:16:3a:f9:f9:
d1:ea:6e:31:03:61:66:8d:b1:2d:bc:96:68:a5:73:
62:c3:7a:6f:46:a1:8e:68:1e:df:2e:98:43:83:96:
53:6a:14:f9:3c:5f:20:ef:c4:86:64:ac:38:c2:b1:
79:28:c7:e4:5f:52:27:3d:a2:e4:b9:bb:fb:26:50:
83:55:9c:ee:9b:f0:c0:89:23:cc:6d:42:9a:5c:0a:
3c:e8:6c:9e:d5:88:15:0f:89:ca:52:2c:d2:3e:ff:
63:a2:7b:ed:7a:b6:94:7f:85:8a:e0:c9:69:c9:12:
76:9c:61:96:d3:40:3c:68:b4:57:aa:92:31:2c:88:
5f:38:f0:53:a7:a8:31:14:c3:ad:5e:dd:8c:d3:01:
88:b1:63:42:79:d6:39:03:b7:2c:0b:53:65:2e:66:
21:b1:34:07:2d:7a:63:c1:a4:7f:55:c7:14:66:e3:
77:3a:d6:25:85:f0:90:dd:4a:94:51:97:01:4f:87:
a6:3d:3f:a8:c8:d7:09:59:04:1a:e7:1d:d9:eb:eb:
8d:60:3f:9b:93:21:5f:a6:e9:6b:45:cc:ce:3e:d6:
7a:bd:5c:99:40:73:7d:b5:9b:e3:54:1e:02:3c:03:
2a:40:2a:65:f2:ec:44:03:81:45:c6:28:ca:e0:05:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:9A:04:99:6B:44:A6:4B:85:64:56:AB:C5:36:F4:C9:A7:F3:D8
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/RKWaBJlrRKZLhWRWq8U29Mmn89g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.216.0/22
213.184.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ef:7b:e7:16:8d:81:92:9e:10:3e:2a:a1:12:7a:a4:c5:27:
02:bd:b1:b4:51:ef:49:62:08:15:fc:d1:0a:48:05:98:29:5d:
2f:6e:fa:6e:b5:68:12:40:67:6a:d3:a9:0b:02:19:39:10:16:
33:24:25:c5:f7:44:46:40:ac:c0:87:61:73:9d:0a:97:46:2d:
18:13:9d:96:44:f5:71:d6:1e:8c:ad:fe:61:91:b2:15:12:77:
c9:b0:58:dc:2a:88:c5:7b:e8:47:52:2d:87:67:03:4e:42:05:
6a:15:c3:49:9d:22:45:fd:31:91:cf:7c:8b:1e:0c:ff:d5:bb:
cd:6b:28:3b:17:7a:37:7d:31:9d:be:53:da:9e:17:eb:7a:43:
6f:19:65:29:e9:b2:42:46:ee:50:2f:3a:58:e3:62:03:91:a1:
e5:c1:52:27:d5:2f:98:d2:c4:d9:4b:f9:9e:b0:c3:7d:65:a7:
82:7f:3b:ca:a0:e0:53:37:b1:bf:be:22:20:34:e3:3e:b9:54:
62:d0:46:30:d2:a0:1e:75:c4:e2:40:95:c0:64:19:24:9f:30:
f1:82:40:15:33:aa:76:0d:72:46:86:38:05:7d:99:7f:e7:3b:
9e:5a:f1:e9:4a:c1:b4:70:7b:24:c3:5e:e1:35:fa:15:20:c1:
1f:8f:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:13:11 2024 by rpki-client on console-ams.rpki-client.org