Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/9GEUrkamyMvDeGYUazMAyN0CLPI.roa
File: 9GEUrkamyMvDeGYUazMAyN0CLPI.roa (raw, json)
Hash identifier: WpvwKHpM9RBrUlgzYRDY7fSY1tMRSNe/cueJ7QkJvMY=
Subject key identifier: F4:61:14:AE:46:A6:C8:CB:C3:78:66:14:6B:33:00:C8:DD:02:2C:F2
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 018CC49324E2BCE42F7DD1CFB478A44701A8
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/9GEUrkamyMvDeGYUazMAyN0CLPI.roa
Signing time: Mon 01 Jan 2024 10:30:26 +0000
ROA not before: Mon 01 Jan 2024 10:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204439
IP address blocks: 185.248.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:24:e2:bc:e4:2f:7d:d1:cf:b4:78:a4:47:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jan 1 10:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f46114ae46a6c8cbc37866146b3300c8dd022cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:67:5e:e8:6a:8f:54:a4:7f:80:74:19:af:
5f:ff:00:95:2c:e5:bb:3b:fe:ff:f4:d9:b8:32:90:
af:7b:ed:4b:07:0c:0d:97:09:fd:4a:6c:3f:7d:0a:
cd:d6:6d:83:04:36:49:8b:eb:78:f1:c0:65:cc:4b:
2d:06:74:7b:d6:22:23:71:e2:2f:38:10:3c:ad:dc:
81:80:72:05:2a:47:82:1e:a6:71:fb:cc:dc:84:8e:
63:00:f6:64:e8:17:dc:77:14:c5:56:3e:7c:5f:03:
d5:3c:72:73:84:a6:f4:be:db:e8:4d:cf:2a:3b:54:
35:1f:0e:93:f2:1b:bc:d5:71:78:25:0a:60:bd:a0:
d1:48:61:36:48:2d:f0:76:42:5c:a5:3d:9b:1d:26:
a7:84:95:cb:a3:2b:8f:64:7a:7b:aa:04:6b:dc:d0:
e3:99:40:fe:79:c3:4b:e6:32:38:a2:db:c0:27:74:
e6:4d:a7:60:66:19:08:03:a6:04:8a:d9:de:1b:0a:
bb:68:45:e8:84:2d:ab:53:5d:fa:93:b4:2d:6e:04:
7c:04:6f:b3:2b:d8:f6:b4:28:e3:fd:50:de:f9:8c:
9d:8a:72:57:14:58:83:de:6c:17:b3:cd:66:b5:13:
ba:00:61:98:3e:3c:54:eb:b9:5a:59:d3:d6:10:c8:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:14:AE:46:A6:C8:CB:C3:78:66:14:6B:33:00:C8:DD:02:2C:F2
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/9GEUrkamyMvDeGYUazMAyN0CLPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:17:71:63:3a:5d:40:bf:7a:9c:6f:41:3e:2f:af:4c:74:b8:
1f:87:97:78:7f:08:b1:8a:ba:ca:c5:c7:1f:65:5d:99:49:38:
b2:f2:7a:ce:9f:bb:e5:df:db:89:84:95:b0:eb:54:5a:1d:d2:
35:10:b7:e2:0b:b3:ec:bc:b0:7d:2d:63:93:b9:82:db:42:10:
50:b2:82:e1:49:62:3e:33:82:d5:55:06:8a:ef:6d:6d:4d:83:
dc:f2:de:e1:7d:b3:13:b2:ef:99:06:dc:6c:d6:68:fa:d3:a8:
f4:23:b5:f0:e6:d8:da:18:ce:0d:75:42:91:ff:8e:bf:2c:fc:
4b:c4:b3:89:03:f5:86:79:a5:84:6c:24:bc:42:94:ff:1d:ca:
4e:18:e6:b6:7a:df:a4:b6:62:e1:61:38:71:02:4a:e5:72:3d:
10:d5:f9:fc:2a:96:20:2b:59:40:fb:e6:df:04:ae:bd:fe:f9:
d1:b4:ee:fd:da:d8:6f:74:5b:50:00:df:72:4a:48:fa:69:35:
ba:19:1f:e5:1f:ff:17:86:ca:80:3b:64:22:1b:18:53:e4:46:
45:14:3e:aa:9f:e4:85:ae:1b:aa:d5:db:b2:a6:c0:dc:df:65:
e9:e5:43:fa:5f:92:31:58:5a:3c:4c:74:1a:8c:5a:c3:51:ce:
f5:81:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:00:49 2024 by rpki-client on console-ams.rpki-client.org