Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/04bqLsnrZQouW_STiAE_a-XMkdE.roa
File: 04bqLsnrZQouW_STiAE_a-XMkdE.roa (raw, json)
Hash identifier: 9QleosLdwwLcfDjpD334UzFtZkErw+JHnKq87iHgDaA=
Subject key identifier: D3:86:EA:2E:C9:EB:65:0A:2E:5B:F4:93:88:01:3F:6B:E5:CC:91:D1
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 018CC2DB593849E583FF952D9C01ABACF618
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/04bqLsnrZQouW_STiAE_a-XMkdE.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.238.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:59:38:49:e5:83:ff:95:2d:9c:01:ab:ac:f6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d386ea2ec9eb650a2e5bf49388013f6be5cc91d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:37:67:64:16:3c:d6:e3:c5:05:36:6a:95:5e:
2f:77:61:3c:96:0a:9b:e3:40:bb:b1:b1:2b:4c:dc:
01:81:7b:c6:0d:52:cb:b8:2f:6f:31:7f:eb:08:13:
e8:ad:62:82:5e:d3:8f:8f:58:12:25:84:73:23:ff:
96:fa:0b:2f:bf:4d:4e:14:6d:2c:c7:89:96:92:65:
b6:ff:b9:63:63:f5:b8:b5:b3:07:67:fb:1d:8e:25:
97:fd:8b:02:1c:9c:ee:8b:28:0d:1e:30:3f:0e:51:
c0:e2:d1:ca:40:98:8b:c1:d7:13:9b:ee:0d:90:10:
b5:9b:e3:48:e8:52:5f:5f:81:26:70:84:d5:ff:d1:
ca:2b:e4:8a:e3:83:37:29:f4:7f:1c:76:f5:91:98:
f5:22:79:00:22:7b:bd:c2:fa:2e:17:3e:4e:7e:5a:
4b:53:ee:c8:bc:e0:06:3d:0c:5c:81:2c:7d:43:f3:
99:5b:56:ba:e0:c5:ed:5b:51:b8:f9:5d:de:e7:81:
d6:c1:9c:de:9c:26:9a:ae:cc:89:da:5c:3a:4f:19:
1c:d7:e2:e1:3d:8b:bd:4d:45:f5:3d:90:a8:87:d1:
55:e7:e1:7f:8b:e2:40:3f:ab:c2:95:ad:39:c4:93:
49:cb:5a:94:14:6d:70:19:4e:48:d1:b5:13:4a:90:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:EA:2E:C9:EB:65:0A:2E:5B:F4:93:88:01:3F:6B:E5:CC:91:D1
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/04bqLsnrZQouW_STiAE_a-XMkdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.214.0/23
Signature Algorithm: sha256WithRSAEncryption
38:bd:25:3b:ea:c6:bd:83:94:55:db:a9:bd:46:e7:d7:b9:f7:
a3:75:d8:cd:c1:ab:e1:05:28:4c:3d:59:c7:c0:4f:3f:59:b9:
07:c5:86:39:4f:a4:08:0d:b0:fb:1d:1f:91:44:cc:c3:38:7a:
be:8c:98:b7:f7:7c:2e:5e:de:ce:94:83:3c:4e:a7:1e:4f:03:
55:8b:c2:c2:8a:14:0a:77:97:57:ed:ed:be:86:74:02:1c:f0:
48:af:05:13:09:14:a8:c1:b1:c8:11:59:7f:3e:fb:4c:9a:c2:
93:0f:00:a3:33:74:b8:15:c3:d2:9e:97:35:b7:fa:a6:f4:9d:
83:b7:65:1e:54:43:48:d3:dd:fc:4d:54:15:21:ec:0f:a8:7b:
14:b3:e9:25:d4:8e:34:34:7e:07:e3:04:91:34:9d:fb:33:fb:
0c:d9:8b:d8:af:a1:d7:fc:4b:f9:42:31:79:ff:f3:0a:cd:9c:
af:7f:fa:cc:e6:da:71:68:70:9e:f4:79:c7:04:fe:3f:5b:f9:
30:ab:04:1d:62:d8:84:f6:33:0e:27:80:29:58:a9:ff:e8:1f:
1f:13:b9:26:09:26:8f:00:6f:3e:75:29:67:36:35:e8:10:9e:
51:40:84:88:fd:9f:f9:30:28:9c:77:25:df:60:f4:e7:a0:70:
ea:55:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:54:09 2024 by rpki-client on console-fra.rpki-client.org