Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/o8zD2IGBlzulvLXs9qOnMVZxxmg.roa
File: o8zD2IGBlzulvLXs9qOnMVZxxmg.roa (raw, json)
Hash identifier: Yb8vad5+QwH1rVbORScU4bk/O0cB5m4yCYy8PogpZLI=
Subject key identifier: A3:CC:C3:D8:81:81:97:3B:A5:BC:B5:EC:F6:A3:A7:31:56:71:C6:68
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 018F2F7FFDB0A75021D035CEF99AE046C478
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/o8zD2IGBlzulvLXs9qOnMVZxxmg.roa
Signing time: Tue 30 Apr 2024 14:54:28 +0000
ROA not before: Tue 30 Apr 2024 14:54:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58282
IP address blocks: 185.49.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:7f:fd:b0:a7:50:21:d0:35:ce:f9:9a:e0:46:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Apr 30 14:54:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ccc3d88181973ba5bcb5ecf6a3a7315671c668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:a1:70:21:11:cd:af:cb:c0:a2:8e:25:14:
8d:79:5f:53:3e:4f:21:49:9a:a1:5a:13:36:ef:77:
25:19:e9:c3:c6:09:4d:b5:5f:b5:e5:06:dd:4f:3b:
c2:54:a7:5b:89:7a:b3:c6:e6:95:ec:cd:e2:eb:eb:
f6:90:35:9f:48:6d:05:eb:79:34:cf:8c:81:c0:cd:
a7:13:f6:72:ad:4c:2b:41:de:f1:5d:96:a4:60:07:
4a:64:c6:9e:61:29:a1:4d:b8:0e:65:a8:3f:95:b0:
81:38:98:ce:a2:6a:a6:e8:b3:12:d7:43:b5:5c:da:
46:2d:8c:d5:33:39:dc:e2:09:52:7e:e6:04:e6:48:
5f:cd:39:35:70:90:f5:22:5f:93:02:84:74:6c:f0:
f7:96:53:6f:4d:77:a7:58:dc:af:f1:cc:6e:7c:58:
c1:be:41:bf:f4:15:91:ef:9b:60:c7:07:a4:79:35:
72:48:3a:74:d2:5b:47:68:ea:78:07:45:38:79:15:
34:c7:9e:b9:44:2e:0f:f8:ec:6d:99:4a:11:b0:73:
90:7d:4c:da:bf:47:2e:3a:f8:54:b5:63:19:01:16:
50:58:76:15:20:71:df:c3:03:b5:a2:9e:64:69:9c:
02:2f:79:e3:d2:2d:9b:e1:ab:7a:c5:a1:d4:c5:a5:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:C3:D8:81:81:97:3B:A5:BC:B5:EC:F6:A3:A7:31:56:71:C6:68
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/o8zD2IGBlzulvLXs9qOnMVZxxmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.252.0/22
Signature Algorithm: sha256WithRSAEncryption
39:6c:bc:60:1c:2e:64:bd:d7:0e:80:4a:2f:d1:a0:ad:30:79:
78:9a:e4:5d:27:33:fb:02:a7:0b:bf:f1:08:de:83:0c:46:8e:
af:00:e2:60:0a:25:46:34:ba:e5:37:11:a7:1e:8e:0f:7e:f6:
ea:3f:a5:39:c6:98:5c:9e:ba:c6:14:2a:24:c4:2b:85:05:9f:
5a:ae:79:91:e9:38:11:c6:fd:2c:b5:23:07:fa:97:9f:40:37:
7b:ef:c3:85:52:91:30:c1:77:0b:3e:7d:12:8f:ba:c9:17:a4:
a1:44:d3:35:71:b8:17:42:8c:7d:fc:61:34:fd:53:58:4d:7f:
70:18:86:5e:0c:9e:df:69:6a:0f:4c:65:51:b7:fb:5b:74:3d:
bb:08:10:b2:ee:77:cb:0c:e3:44:9c:32:15:f5:3e:d8:d2:76:
b4:b6:f6:37:74:c4:b8:2b:3e:e6:14:90:80:06:84:a4:ed:c1:
5e:07:89:e4:e4:6e:f5:3f:b8:82:da:38:53:13:74:29:71:2c:
3a:ab:41:9f:d3:81:0f:3d:1c:47:61:8c:8f:03:fa:ef:75:53:
ea:9d:63:90:96:22:a4:a9:1b:59:92:c6:bb:8b:1f:18:0c:54:
c0:66:8a:82:aa:2b:f9:06:63:95:32:9b:ae:b3:be:2b:89:2b:
c1:5c:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:44:43 2024 by rpki-client on console-ams.rpki-client.org