Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/g17VcGIry43b1jhcbCqk6x6GiNs.roa
File: g17VcGIry43b1jhcbCqk6x6GiNs.roa (raw, json)
Hash identifier: ZoKEFQaBp3L8DpKqJzThTeCjRKGEQO4KDVlIOA3sy1A=
Subject key identifier: 83:5E:D5:70:62:2B:CB:8D:DB:D6:38:5C:6C:2A:A4:EB:1E:86:88:DB
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 018CC500727FCA499C1146E1BDBFD4BC4226
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/g17VcGIry43b1jhcbCqk6x6GiNs.roa
Signing time: Mon 01 Jan 2024 12:29:50 +0000
ROA not before: Mon 01 Jan 2024 12:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202774
IP address blocks: 185.155.32.0/22 maxlen: 22
2a07:9100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:72:7f:ca:49:9c:11:46:e1:bd:bf:d4:bc:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 12:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=835ed570622bcb8ddbd6385c6c2aa4eb1e8688db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:c7:e2:34:3c:d8:a1:d7:7b:54:da:26:60:
1a:dc:d1:9e:ae:66:30:e9:e4:b2:bf:15:d4:1b:92:
f2:2c:a4:a4:c2:14:bf:52:8e:ab:9b:b9:67:0b:53:
6d:d3:8e:bc:3d:e2:0b:61:3f:70:c7:17:a9:e8:fe:
9c:3a:e0:04:c8:d0:cf:65:b1:aa:c5:8b:0e:d2:85:
6f:95:5d:5a:84:6e:58:8d:1a:a3:f1:16:6e:c3:72:
6c:9e:f7:f4:67:66:45:a6:22:35:b7:de:80:23:ff:
91:a7:99:92:28:e1:b9:18:0d:77:20:37:30:bb:9c:
29:e7:f4:f4:5f:85:52:07:68:cb:0e:09:55:ae:72:
51:fa:c9:65:d3:38:5c:c3:24:b0:43:4c:8c:a4:a0:
77:7a:32:59:1c:cb:61:18:6a:b5:e3:cc:ee:a0:2a:
21:b0:55:c3:cb:e8:db:3d:1b:96:96:66:b6:54:3b:
44:f2:02:d2:44:ac:59:0f:f1:d6:cc:5d:82:60:97:
78:66:80:48:26:da:8c:39:cc:22:bf:b6:1f:0b:f4:
be:d7:e0:98:c0:6e:2f:32:11:47:d1:ee:1f:b0:cd:
f3:d6:fa:5f:90:84:41:fa:c7:99:c1:5a:e9:ee:4b:
7a:a6:ce:d5:aa:fb:a3:16:f9:dc:e4:b5:11:69:48:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:D5:70:62:2B:CB:8D:DB:D6:38:5C:6C:2A:A4:EB:1E:86:88:DB
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/g17VcGIry43b1jhcbCqk6x6GiNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.32.0/22
IPv6:
2a07:9100::/29
Signature Algorithm: sha256WithRSAEncryption
a6:9a:79:fd:ca:b0:91:d3:4b:9e:71:67:4b:83:95:55:6a:41:
8c:e8:0a:d2:df:d7:07:74:b3:d3:dc:e6:cf:fd:47:bf:39:a8:
2c:8c:dc:0c:03:0f:4d:c8:a0:32:8f:70:01:8c:25:df:9d:90:
74:a3:12:47:4b:bb:60:f7:8f:8a:7a:ef:20:99:fa:b0:24:bc:
67:2a:85:0f:d6:28:3c:3b:2a:85:fb:59:47:4b:ab:66:8c:e2:
89:bd:80:96:19:7a:bb:51:1e:1e:7e:84:18:34:44:b6:4c:cd:
cb:0d:5a:03:a7:b6:84:5c:34:c0:d4:bb:45:3a:08:12:a1:a0:
da:46:1e:90:71:90:5f:8c:26:59:41:63:ba:82:a4:fc:7c:80:
3c:eb:a8:5a:9c:23:63:71:66:8f:4c:1f:7a:5d:d9:14:d6:02:
5e:05:b2:23:5b:3e:b9:f6:c1:6b:8b:8a:6c:08:23:d1:4f:9d:
f4:80:6a:c8:68:20:1e:3f:90:70:e3:9c:99:15:84:48:5d:68:
64:91:0e:ab:59:a1:15:4b:0f:35:9f:14:ee:d5:1c:a3:04:ae:
1d:f8:07:8e:61:b3:ce:a2:a9:65:4b:ef:98:be:92:b3:50:f6:
91:4b:41:de:39:15:92:5c:75:19:0b:67:23:65:33:55:58:ab:
af:bc:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:40:24 2024 by rpki-client on console-ams.rpki-client.org