Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/l74AtNQ5zvX4bAO_kiGIGSned5A.roa
File: l74AtNQ5zvX4bAO_kiGIGSned5A.roa (raw, json)
Hash identifier: YeJLx7FcJHRjZBWO6S0l07q2Y/2NSvB5JH42E1nOSEw=
Subject key identifier: 97:BE:00:B4:D4:39:CE:F5:F8:6C:03:BF:92:21:88:19:29:DE:77:90
Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial: 018DA80ED9A264F9865231872961C876FB58
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/l74AtNQ5zvX4bAO_kiGIGSned5A.roa
Signing time: Wed 14 Feb 2024 14:39:21 +0000
ROA not before: Wed 14 Feb 2024 14:39:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206853
IP address blocks: 185.174.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:0e:d9:a2:64:f9:86:52:31:87:29:61:c8:76:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Validity
Not Before: Feb 14 14:39:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97be00b4d439cef5f86c03bf9221881929de7790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:0e:05:c2:3b:0e:0e:fc:d3:77:e1:98:bb:
72:25:4b:86:1b:ba:2b:7f:9f:32:1f:41:42:80:0a:
67:68:fc:db:c3:cd:10:ee:dc:8c:76:71:66:8a:0f:
20:8e:ef:fe:11:52:6f:50:90:f2:48:bc:bd:ba:f4:
35:e0:5b:85:4e:d0:05:65:db:b0:e3:47:da:d2:da:
ab:c9:f8:bd:b2:37:bc:8d:7c:f0:2b:42:21:65:2b:
f4:0e:04:a9:ef:e4:f7:6a:c1:90:df:4b:79:50:c9:
07:0c:53:8c:4e:fd:2c:d2:8b:2b:93:bf:bf:73:88:
2e:2d:17:ae:c3:3e:d2:fa:34:10:89:ad:5c:80:91:
4f:45:ef:eb:c1:9b:24:46:81:02:26:90:f8:ef:17:
67:1a:67:a9:5f:d4:f1:cd:3c:2b:f5:64:ce:f1:0a:
72:da:9b:da:10:51:ae:44:3c:99:c7:e1:a3:a6:e9:
b6:f6:78:09:0c:8d:a6:eb:c1:79:2c:57:d8:ad:2e:
0f:0c:92:8c:ab:0a:19:d8:bc:8f:8a:cb:25:9d:71:
64:78:e7:33:c6:62:e8:4a:d8:5a:7d:ad:2f:43:5b:
9a:ab:4c:4b:aa:e6:71:40:cd:79:82:84:e1:51:bf:
d3:68:ae:f5:30:9e:bb:04:85:8c:1c:a0:0d:20:cd:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:00:B4:D4:39:CE:F5:F8:6C:03:BF:92:21:88:19:29:DE:77:90
X509v3 Authority Key Identifier:
keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/l74AtNQ5zvX4bAO_kiGIGSned5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.80.0/22
Signature Algorithm: sha256WithRSAEncryption
20:a1:7d:31:f8:47:cb:e2:c8:fc:71:8a:5f:23:b6:a2:8c:55:
15:57:25:d1:d2:a6:d4:94:9d:57:95:a5:87:f3:0d:77:73:03:
83:40:ab:96:a4:ce:b2:6a:61:3f:b3:1d:16:bd:5c:f0:cc:d9:
cb:e8:4a:a7:83:af:bc:c3:3b:35:02:56:0c:dd:71:56:5d:67:
dd:50:70:c4:cd:14:c6:5d:88:05:f3:37:cb:2f:c0:62:0b:ea:
fa:d7:fa:35:b4:f7:7f:64:14:4b:a4:34:c1:e1:5a:f4:04:7e:
90:60:0c:29:bc:b8:40:10:1a:af:e1:43:ad:7a:ba:1e:f9:1b:
28:98:a6:4b:f6:a3:83:f9:9d:bf:fd:c4:1d:54:1e:07:8f:f1:
11:80:6c:6c:b9:13:0a:8d:35:a1:7d:75:a0:13:65:e7:49:32:
4c:4f:ad:b7:6d:9d:a0:0c:5e:4b:45:d2:42:14:20:6b:39:e3:
ac:66:f3:b3:5f:1f:af:c7:78:d4:a3:d4:ff:ea:65:c7:c9:fc:
7e:39:f8:49:1a:97:e4:7c:5e:07:55:4f:65:50:59:e4:b6:04:
62:60:8d:34:67:a2:48:08:ae:4e:95:9a:8e:34:28:00:b1:58:
ec:4c:c8:04:89:bc:99:ac:e5:23:9f:a2:dc:a9:21:80:d3:e3:
f5:bd:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:53 2024 by rpki-client on console-fra.rpki-client.org