Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/iHaMn4urqhUFiAEsBo6sY2IxnQE.roa
File: iHaMn4urqhUFiAEsBo6sY2IxnQE.roa (raw, json)
Hash identifier: CSAC52KeJKQTjd9dqiFIf0Io2BEtx88O+sHUf+eZTnM=
Subject key identifier: 88:76:8C:9F:8B:AB:AA:15:05:88:01:2C:06:8E:AC:63:62:31:9D:01
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 018CC56E511DA42FBF68D0F5BBFB815CCF0F
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/iHaMn4urqhUFiAEsBo6sY2IxnQE.roa
Signing time: Mon 01 Jan 2024 14:29:50 +0000
ROA not before: Mon 01 Jan 2024 14:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206692
IP address blocks: 185.178.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:51:1d:a4:2f:bf:68:d0:f5:bb:fb:81:5c:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Jan 1 14:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88768c9f8babaa150588012c068eac6362319d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:6c:f3:70:19:37:d9:f7:58:31:46:ab:8e:
64:bf:c6:58:94:b1:59:0a:5a:82:90:99:f7:be:88:
1d:f4:4c:17:a6:57:48:53:74:cb:57:05:64:c4:8e:
bf:60:7f:7e:e7:b2:55:93:9a:b8:0a:26:19:ba:e6:
d6:f4:2d:49:81:b4:6e:a0:82:4f:ac:e6:2d:21:53:
a4:3a:5e:63:98:dd:b8:51:0d:63:c4:68:02:89:bf:
36:4f:b7:d7:2b:a1:74:69:ca:12:c8:a1:42:48:7c:
b6:6c:51:3e:ba:5e:3a:92:70:d1:ac:e7:87:00:6d:
37:a6:2c:08:0c:b0:6e:70:7a:4b:f9:0d:92:88:0d:
d3:28:0e:a4:fe:6f:b8:32:27:03:1d:d4:b1:18:21:
91:1a:25:2c:af:a4:74:a2:a9:62:ec:4a:d0:0a:11:
cc:d1:e9:6f:64:d6:50:a4:f2:61:30:18:3b:12:7d:
8f:5a:da:b1:5e:c9:fd:df:53:f3:6f:68:c4:98:df:
72:49:7f:ac:53:f2:09:de:79:5c:22:9e:ff:a3:69:
da:9a:e3:1d:89:54:32:64:5a:79:f2:9d:13:6f:55:
1a:d0:d7:53:fe:f8:ab:3d:c1:ed:74:bc:aa:0a:aa:
c4:8f:a7:a3:a7:2a:6e:e6:b9:82:44:46:db:0e:9e:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:8C:9F:8B:AB:AA:15:05:88:01:2C:06:8E:AC:63:62:31:9D:01
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/iHaMn4urqhUFiAEsBo6sY2IxnQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.220.0/22
Signature Algorithm: sha256WithRSAEncryption
06:37:7a:bb:cd:77:8c:b4:e4:50:0f:b2:ad:72:58:d6:62:44:
99:f3:07:19:2c:84:15:95:7c:fb:01:c1:2f:3d:1b:56:3d:62:
2e:1d:f8:f7:d7:59:1c:16:aa:73:aa:a6:ad:95:d7:ed:97:d1:
ff:34:be:53:68:e3:71:01:a5:6e:ee:f2:75:14:9f:be:bb:d9:
92:00:2e:1c:5d:8f:ca:64:08:40:c9:97:54:51:d2:78:3d:24:
71:e9:69:21:78:d2:81:b4:a8:82:05:d2:b7:0e:e6:a1:a4:46:
97:a3:70:4c:65:5a:a7:5e:79:bb:8e:99:0c:2c:b1:65:4c:f1:
ca:1d:16:1e:ec:61:fd:00:38:59:0a:60:79:d6:37:a8:f3:9c:
98:c5:7d:cf:8e:3a:bb:77:0a:b9:15:71:66:f7:84:69:0c:9c:
6b:67:e7:93:8a:b8:fa:11:f3:af:bb:4d:85:7c:28:9e:48:d2:
06:d7:29:28:6c:e7:b0:f4:55:cd:4e:40:e4:64:dc:12:8f:b5:
aa:6d:17:00:1a:a9:d0:a1:d5:22:d1:bc:e9:42:d0:c2:d3:f2:
14:05:6a:d6:0f:77:db:d9:d4:ee:fc:f6:fe:7b:df:e9:cb:c4:
b8:f4:6f:9f:e7:91:90:14:0d:fa:71:a0:d9:f1:63:b0:10:d3:
c8:88:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:04:01 2024 by rpki-client on console-ams.rpki-client.org