Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/_Max0Z4EpViarfxIxq5QV6fb_rg.roa
File: _Max0Z4EpViarfxIxq5QV6fb_rg.roa (raw, json)
Hash identifier: 0eNDE+Z/vl8zKAlKb8QGfnBh2dq3T1pVxEjMKP19s00=
Subject key identifier: FC:C6:B1:D1:9E:04:A5:58:9A:AD:FC:48:C6:AE:50:57:A7:DB:FE:B8
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 018CC80112A03C5858939C071582EC66A857
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/_Max0Z4EpViarfxIxq5QV6fb_rg.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57357
IP address blocks: 185.11.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:12:a0:3c:58:58:93:9c:07:15:82:ec:66:a8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc6b1d19e04a5589aadfc48c6ae5057a7dbfeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:4c:95:7a:f7:a6:d1:24:92:9a:ec:3c:93:
f6:ff:00:0a:d6:00:76:54:69:44:0a:58:3f:73:3d:
87:73:fa:df:94:ea:a7:75:c8:03:f5:96:32:9b:24:
49:54:fd:2f:ac:02:9a:88:17:87:34:14:7f:82:bd:
5a:31:20:01:b0:f8:32:69:85:09:cf:f9:7b:e0:c0:
24:51:d4:4c:10:4d:28:84:07:e1:23:49:1e:ef:0c:
38:56:fe:b0:55:e1:3c:e2:f2:6c:e3:e1:7d:47:1e:
aa:a9:d4:80:99:6c:f3:b0:6e:f2:d4:e2:0c:9d:d8:
05:f2:c5:61:d9:1f:9f:2c:16:57:79:eb:90:aa:31:
b8:0e:fb:1f:33:ce:83:f6:38:d1:6e:d6:6b:8c:18:
64:d4:e0:69:ca:48:8b:6c:ce:4b:4b:99:bc:aa:56:
3a:b3:83:99:ce:90:27:63:45:8c:1a:bf:cb:b1:66:
c5:c2:eb:74:05:03:ab:8c:66:7b:bf:ff:fa:a9:51:
f4:5d:8b:94:8e:3a:fc:32:7c:6e:b7:30:09:3c:d6:
ae:96:58:89:fc:86:1f:7b:e7:5c:4d:a0:8a:75:04:
ba:d6:d9:bc:4f:e9:d0:fa:00:e6:b1:42:bd:8b:fe:
2c:5c:9f:87:95:b4:e6:e0:dd:9c:b9:fc:49:58:48:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C6:B1:D1:9E:04:A5:58:9A:AD:FC:48:C6:AE:50:57:A7:DB:FE:B8
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/_Max0Z4EpViarfxIxq5QV6fb_rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0f:d6:f8:32:2d:fb:c5:f1:64:ee:90:a8:14:ac:bc:5a:af:
af:bd:63:02:85:8a:ae:58:43:a1:46:f4:ee:3d:a9:ad:15:a4:
d9:55:28:fa:3d:95:61:15:34:85:a7:f6:8e:c9:2c:28:0e:c0:
e1:c3:be:f1:ac:b4:d7:3b:5c:ab:3e:cc:80:67:06:fd:14:02:
f2:c3:33:85:3e:39:79:66:0f:df:94:d0:52:95:8c:c6:f2:1b:
0c:97:60:58:f7:ac:f2:16:b4:73:cd:ba:42:4c:bb:55:6e:92:
2f:6c:65:f8:ea:ff:e9:e8:3e:ea:0d:47:b8:20:09:7b:77:2c:
d9:cc:be:0a:ab:ab:98:93:fa:93:dd:40:fe:4a:ab:9e:de:d4:
14:97:4a:34:60:38:93:10:f4:ae:2d:cd:a9:55:9f:85:20:1f:
21:09:91:3a:25:f8:ad:2f:63:90:22:7f:d3:d4:6a:19:77:85:
ee:b4:4e:1c:bf:78:40:7d:e2:eb:3b:1f:a4:25:b9:f9:ea:fa:
b1:e5:cb:22:75:8d:4e:03:61:bc:13:89:34:b7:cd:6b:a3:84:
e5:e3:48:95:ca:ca:8c:89:d8:b1:72:61:4d:ec:b3:64:5a:ae:
03:d0:4b:17:19:7d:0e:ee:06:5e:dd:18:29:14:2f:bb:ef:fb:
4d:88:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:22:58 2024 by rpki-client on console-ams.rpki-client.org