Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/L-j_qBC3hzCwOi0HtyhYJFFEozc.roa
File: L-j_qBC3hzCwOi0HtyhYJFFEozc.roa (raw, json)
Hash identifier: aKSuaS1FaHamPbGumQ0i4L2wPK0bS50AvYZMUS7iULc=
Subject key identifier: 2F:E8:FF:A8:10:B7:87:30:B0:3A:2D:07:B7:28:58:24:51:44:A3:37
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018F855DA2471C89C84689899BF680AFE9AE
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/L-j_qBC3hzCwOi0HtyhYJFFEozc.roa
Signing time: Fri 17 May 2024 07:04:17 +0000
ROA not before: Fri 17 May 2024 07:04:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49203
IP address blocks: 185.118.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:5d:a2:47:1c:89:c8:46:89:89:9b:f6:80:af:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: May 17 07:04:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe8ffa810b78730b03a2d07b72858245144a337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:7d:18:84:de:8f:08:9c:61:71:66:26:e7:
3a:dd:cc:4d:b9:f8:f2:88:f4:73:fc:5a:ce:3c:0b:
01:09:3a:e8:b3:07:44:55:86:b6:88:97:28:48:0f:
80:1a:e3:53:fc:32:54:4b:7e:47:1a:ad:fd:6f:a1:
52:fa:68:81:93:56:6f:7d:c2:b3:da:0f:fb:22:1a:
4d:23:12:1a:4b:b3:f6:35:75:28:f3:30:3d:e6:ec:
0a:69:bb:3c:61:b4:c6:04:d3:68:fe:d3:3c:a7:a6:
71:7e:45:31:88:7a:60:aa:f0:4d:98:1e:a0:ee:37:
a3:db:a5:48:3e:b8:ac:ed:45:49:7a:a6:f2:d3:23:
3e:4f:15:e9:7f:81:6d:4f:84:8e:e5:2f:7b:78:f3:
53:9a:8f:07:3b:4e:93:09:d6:cf:e4:5b:24:98:1c:
55:79:93:aa:8e:4e:6d:dc:8e:95:f2:89:44:da:77:
b7:4b:51:82:8e:e1:36:c3:73:35:c3:62:88:62:c5:
54:df:be:49:80:f8:c0:02:4e:c1:3c:fb:9b:fd:4d:
1b:de:73:2e:c1:f0:0f:26:d9:a0:94:2d:30:51:83:
7e:23:56:3d:6f:74:8f:16:93:10:f8:82:fc:79:b6:
2b:20:50:5a:29:a8:ac:be:57:46:27:bc:8e:33:c8:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:FF:A8:10:B7:87:30:B0:3A:2D:07:B7:28:58:24:51:44:A3:37
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/L-j_qBC3hzCwOi0HtyhYJFFEozc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.4.0/22
Signature Algorithm: sha256WithRSAEncryption
05:3b:15:a7:6d:2c:7f:ca:dd:8d:fe:40:49:56:58:fb:01:06:
57:71:fc:b6:45:a3:38:39:18:61:81:94:b5:72:2a:df:92:89:
12:1a:31:c8:62:f6:15:32:8f:e9:62:3e:80:ed:43:b4:ab:fa:
9d:5c:b1:37:ad:9c:6f:87:05:70:56:c0:4a:01:e2:23:db:26:
9e:dd:3c:72:4d:d0:0d:46:c5:ab:dc:36:d6:94:f0:30:e5:28:
d8:52:33:77:74:3c:15:14:d2:59:19:8f:e2:20:74:25:5e:18:
a1:7d:c9:94:72:a7:a4:33:af:b2:45:18:11:d8:3d:e4:3d:a2:
fa:5d:e3:f3:c7:0d:07:f5:d4:8f:50:a7:8f:58:84:72:5e:12:
1d:25:d3:6f:eb:5d:5b:77:09:36:31:b2:ed:5e:e1:ed:bc:c1:
39:9b:b7:74:28:40:55:e0:be:c4:3d:2e:29:53:c7:2c:0a:ad:
82:85:1a:a0:72:cd:47:ae:6d:42:1a:7f:c1:2f:2b:9c:ee:b4:
72:8c:25:3d:4b:d9:47:72:2c:93:83:f8:ca:47:4b:f1:08:b5:
a4:0c:ef:dc:31:16:4a:e9:20:d4:a8:f3:a6:fa:df:3e:dc:22:
7d:06:0c:a9:cf:8b:30:8f:c0:b1:86:38:80:c6:0d:68:08:59:
b7:7d:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:50:00 2024 by rpki-client on console-ams.rpki-client.org