Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/xHKshER5QYpE0aBUDW_N7prbPfA.roa
File: xHKshER5QYpE0aBUDW_N7prbPfA.roa (raw, json)
Hash identifier: GP1rPA90joR59YbSSd2k6kU/yZWU9evGWUqluE5gTWA=
Subject key identifier: C4:72:AC:84:44:79:41:8A:44:D1:A0:54:0D:6F:CD:EE:9A:DB:3D:F0
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 018D8906B8425A345C12A898BBFA250E283D
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/xHKshER5QYpE0aBUDW_N7prbPfA.roa
Signing time: Thu 08 Feb 2024 14:02:15 +0000
ROA not before: Thu 08 Feb 2024 14:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 185.3.4.0/24 maxlen: 24
185.3.5.0/24 maxlen: 24
185.3.6.0/24 maxlen: 24
185.3.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:06:b8:42:5a:34:5c:12:a8:98:bb:fa:25:0e:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Feb 8 14:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c472ac844479418a44d1a0540d6fcdee9adb3df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:de:b6:fd:f1:a9:3c:b8:55:4b:3c:c5:64:
ad:69:85:fa:d7:d0:6c:16:d1:35:2a:0d:ec:e6:e2:
54:7c:82:e8:69:f7:57:81:3e:08:71:fa:f6:ce:e8:
cf:49:06:94:18:1b:c9:42:87:a9:a6:f3:b8:77:4b:
fc:b3:6b:2c:75:88:fe:a0:62:c5:7f:52:e3:c7:43:
1f:20:28:28:c5:45:6f:fd:d7:a9:8e:68:f9:53:62:
b5:44:0c:5e:f9:a6:ef:39:02:f9:d6:cb:ae:c0:bd:
a4:16:00:3b:2d:92:47:fa:3d:41:25:61:05:12:51:
4a:3f:d5:14:9f:95:fb:73:de:10:40:5e:a2:86:ef:
69:8b:14:1d:83:51:25:79:b3:15:40:48:6a:d2:cf:
54:8f:7f:76:bc:f3:b8:ea:77:76:4f:96:f7:d5:56:
24:62:d5:df:26:87:ca:0f:4a:05:eb:c6:7f:a8:82:
ef:aa:e8:65:d9:f1:ec:1b:60:0e:e1:c5:31:02:dc:
99:75:d9:cd:06:86:cf:68:2e:72:06:9b:f9:33:0f:
57:fa:77:11:19:0e:96:b7:33:94:08:09:19:62:b7:
37:74:a8:65:a6:74:a7:fe:da:58:aa:0d:98:aa:90:
34:d6:63:c3:6f:18:d6:b9:bb:61:aa:d5:10:bc:ca:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:AC:84:44:79:41:8A:44:D1:A0:54:0D:6F:CD:EE:9A:DB:3D:F0
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/xHKshER5QYpE0aBUDW_N7prbPfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.4.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d7:5d:cb:a1:73:ea:8d:a9:00:12:a4:87:03:e1:76:8b:ff:
77:33:ec:0f:28:88:d6:f8:04:24:46:57:89:5b:b8:c4:4e:89:
48:28:67:aa:15:40:18:d6:d1:e0:52:20:fc:4f:ed:51:bc:08:
1f:15:a9:35:35:5a:33:2a:f5:9f:2d:99:28:0a:9b:e3:5b:6a:
05:bf:a4:6e:7e:9b:45:7d:7e:d7:c0:5f:e0:a2:00:85:71:9a:
4c:c2:97:8d:4b:35:5e:64:5f:7a:d3:3e:ff:39:93:cc:ec:a9:
a0:b9:51:91:ac:7d:a0:74:67:9f:53:7d:a5:c4:c6:44:56:dc:
92:cb:55:25:be:d1:9e:cf:fd:68:c9:f7:09:8d:95:eb:0c:6d:
e7:b2:5e:45:15:38:6d:8b:95:40:30:48:60:e1:92:18:6e:af:
6e:59:58:1a:22:ea:63:ff:1a:52:2a:6c:61:3c:67:2e:57:6d:
dc:d0:d3:20:b7:4e:84:4f:b2:48:f9:7d:b0:4e:b5:11:fb:d4:
09:4a:9d:7b:06:47:fd:ea:2f:ac:7a:ea:96:7e:f3:aa:7e:f6:
f1:ac:4f:f0:50:fd:87:6e:66:7a:1e:c3:db:e3:93:81:01:80:
31:c1:cc:e5:2d:83:94:a2:11:82:9a:5f:11:bc:5d:29:2a:ca:
82:77:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:18:43 2024 by rpki-client on console-ams.rpki-client.org