Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k2RVdjuED5__yVTQHluIady8jLs.roa
File: k2RVdjuED5__yVTQHluIady8jLs.roa (raw, json)
Hash identifier: dnktAuxi2AS5nZe2n3n2nKvWz50Ojy7+IihS+xgVpxk=
Subject key identifier: 93:64:55:76:3B:84:0F:9F:FF:C9:54:D0:1E:5B:88:69:DC:BC:8C:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CD3505CD41847FB52A63C97DA24FFDFB1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k2RVdjuED5__yVTQHluIady8jLs.roa
Signing time: Thu 04 Jan 2024 07:11:48 +0000
ROA not before: Thu 04 Jan 2024 07:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 185.221.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:50:5c:d4:18:47:fb:52:a6:3c:97:da:24:ff:df:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 4 07:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=936455763b840f9fffc954d01e5b8869dcbc8cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:6e:82:6b:15:74:b8:8a:7e:19:65:4b:ca:
71:5f:67:1a:b0:be:80:5d:16:9e:4d:28:c0:b4:c1:
20:b5:45:f2:ae:2f:04:c7:2e:19:dc:c3:66:57:58:
ba:86:b6:45:c0:17:20:e5:6b:bd:3e:52:72:3b:56:
76:b5:e7:19:bf:bb:bc:d4:07:ca:a2:e8:c8:b9:9a:
0a:fc:da:1d:a4:e6:c2:d4:b1:e0:07:88:6b:31:b3:
6e:f4:2d:25:0c:99:d6:4e:b5:01:48:f6:cf:be:5c:
08:22:92:58:da:8e:ef:f2:2e:96:b2:fa:ae:13:9c:
ac:1b:af:a1:bf:b7:63:7a:a1:e0:0c:f3:30:86:93:
4f:ed:de:43:14:f2:25:81:c0:d8:14:34:b4:15:e3:
14:a4:d9:8d:f8:7a:95:f8:6a:8e:4c:ef:aa:60:b4:
75:33:4f:67:b3:69:66:7d:8a:5c:43:d1:52:96:98:
c8:c5:4f:97:f3:66:26:0f:ca:1a:f0:96:cb:78:19:
c6:0f:79:5e:fe:58:84:83:29:86:56:46:62:14:8c:
31:83:98:b9:83:a9:5f:ea:19:0d:98:a7:a2:6b:31:
9c:43:60:35:8e:9c:60:b3:a9:4b:32:a1:b7:69:d9:
10:e9:34:a6:de:fe:90:99:b6:01:c4:87:35:89:4f:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:55:76:3B:84:0F:9F:FF:C9:54:D0:1E:5B:88:69:DC:BC:8C:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k2RVdjuED5__yVTQHluIady8jLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:ba:7d:7d:3f:b8:c8:1a:d0:d4:53:1e:d4:74:75:fd:1e:
31:f0:d8:e3:06:ec:f1:76:a8:49:2d:69:35:e1:6c:bc:0a:14:
37:46:58:c9:91:6e:93:0b:d3:77:76:3d:68:43:16:54:a5:b5:
b5:3b:db:9a:45:40:5e:03:8c:9b:86:46:bf:81:10:83:8b:9f:
40:a5:3b:eb:2a:b0:17:f0:ed:38:94:77:ef:42:25:ac:58:88:
a0:85:e8:6f:3a:13:92:6a:ae:cf:ac:fe:37:38:c8:4d:66:46:
12:b1:64:52:49:fd:e8:cc:f8:a5:75:a1:b8:39:fe:d2:df:c6:
6c:43:5d:1e:e7:41:e0:08:ec:e6:18:96:3b:c2:16:79:a8:7b:
5c:a9:1f:02:2e:19:a6:8b:97:5e:87:d4:3f:2d:8d:9e:9d:8f:
35:ad:23:80:f9:1c:fd:80:55:bc:46:f0:71:58:8c:0b:01:b9:
88:f8:a0:57:00:03:5a:e0:67:80:c7:51:ed:cf:79:87:a1:1c:
f3:83:ff:b4:e4:f2:36:46:cf:f4:90:41:ba:21:78:7a:ce:ef:
a7:0c:f5:44:db:39:20:a0:cf:a4:ee:37:bd:8a:fb:ec:ac:01:
05:af:a0:06:cd:e6:57:15:68:6a:81:fe:2b:2f:32:f9:31:c3:
99:19:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org