Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/htN14cnMUnqbGDwEoagkUzfwueg.roa
File: htN14cnMUnqbGDwEoagkUzfwueg.roa (raw, json)
Hash identifier: CdIQK49ieADGcdalD/7hsdVFaC96uyzNHe/zifPVrbI=
Subject key identifier: 86:D3:75:E1:C9:CC:52:7A:9B:18:3C:04:A1:A8:24:53:37:F0:B9:E8
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 018CC9BB1CDE784A2F7974D40873E51BC463
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/htN14cnMUnqbGDwEoagkUzfwueg.roa
Signing time: Tue 02 Jan 2024 10:32:12 +0000
ROA not before: Tue 02 Jan 2024 10:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205265
IP address blocks: 185.222.16.0/22 maxlen: 24
2a0c:f000::/48 maxlen: 48
2a0c:f000:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:1c:de:78:4a:2f:79:74:d4:08:73:e5:1b:c4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jan 2 10:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86d375e1c9cc527a9b183c04a1a8245337f0b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:a6:e2:34:d9:7e:4f:13:4c:4a:d1:36:3d:
b8:af:27:fd:df:9c:d2:8d:1f:4a:37:c5:03:12:81:
8e:eb:2b:1f:17:4a:5c:04:62:7f:8b:be:fd:7f:4e:
54:d1:00:ea:50:5c:8d:0b:7a:19:18:ee:b9:12:4a:
8e:6a:25:c5:6a:e0:9b:f1:51:04:b3:43:1a:fc:82:
88:43:74:f5:0d:84:73:69:b0:af:36:9f:72:ee:6d:
30:a1:68:22:19:8c:60:1e:fa:d3:84:90:b9:34:27:
15:51:1f:38:95:72:f3:2e:31:a0:66:d5:80:41:f5:
38:26:87:e3:01:3e:80:98:ab:42:92:70:5c:e0:3c:
de:2c:ff:b2:c3:67:c0:5c:bc:59:c5:c6:7e:b6:02:
1c:43:a5:01:2d:98:d6:77:02:15:9a:49:ba:34:e0:
e5:e2:25:79:ec:5a:10:36:6a:5d:3d:eb:ed:80:79:
0c:45:21:0a:23:0b:0d:78:ee:ef:77:99:95:bb:eb:
eb:e6:53:38:33:74:d0:53:a1:60:bc:19:44:ec:0e:
1b:be:63:d2:73:28:27:62:57:74:0b:ee:31:ee:9e:
44:4e:36:aa:2a:93:3d:99:38:e4:6d:32:36:a6:d3:
79:8e:7a:cb:12:27:94:40:5a:e3:8b:22:1f:b0:fc:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D3:75:E1:C9:CC:52:7A:9B:18:3C:04:A1:A8:24:53:37:F0:B9:E8
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/htN14cnMUnqbGDwEoagkUzfwueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.16.0/22
IPv6:
2a0c:f000::/48
2a0c:f000:2000::/48
Signature Algorithm: sha256WithRSAEncryption
56:3e:65:6f:da:a8:19:52:92:b9:16:94:28:92:fb:38:2d:21:
03:91:ac:d7:92:80:53:b0:25:c1:99:d0:a7:64:79:cb:7d:03:
b7:d3:05:ef:bc:9f:e1:3b:fc:fe:e2:7f:ea:4c:8b:76:c5:0a:
82:b2:99:d4:82:47:b1:33:16:b5:d9:2b:f8:48:ef:a3:d0:1a:
e7:e0:e9:9d:d2:d4:4e:3f:aa:9a:3e:63:44:60:44:ed:03:85:
a6:b5:ad:70:c9:e1:f6:f0:1a:71:24:8c:d9:2b:25:27:fb:55:
f6:b5:e8:f7:20:36:48:1e:c5:58:6e:bc:16:51:79:bc:59:35:
f8:7d:c1:5d:0a:d5:e5:92:3b:37:9a:cd:bc:c3:17:b8:97:30:
7f:4d:65:7b:32:c6:d0:5e:a3:fa:ab:58:1f:a5:3f:9c:37:d2:
d7:d4:70:1d:61:2d:34:49:00:6f:38:66:23:9a:8b:15:1b:74:
54:0b:5c:fd:f6:cc:d4:7e:56:59:b3:fd:49:98:75:c1:38:16:
92:d5:4d:26:ac:dd:ce:c3:c4:c9:a1:2b:27:89:51:0e:cb:fc:
02:2a:b3:4f:e8:9d:6b:53:64:e3:58:72:b3:c5:33:03:8d:10:
de:46:f5:93:86:84:a8:1a:7c:9e:25:71:49:05:20:04:ec:05:
7f:2c:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 05:09:00 2024 by rpki-client on console-ams.rpki-client.org