Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rbKFWjx2swBX3laNlkJgOyfr3SQ.roa
File: rbKFWjx2swBX3laNlkJgOyfr3SQ.roa (raw, json)
Hash identifier: PAgN7nV9daykknqiVtU3vULAhbcl+yysKvw6uyQk3+k=
Subject key identifier: AD:B2:85:5A:3C:76:B3:00:57:DE:56:8D:96:42:60:3B:27:EB:DD:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCCFE74F55B3C150A4D7D62DF26399
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rbKFWjx2swBX3laNlkJgOyfr3SQ.roa
Signing time: Tue 02 Jan 2024 06:29:23 +0000
ROA not before: Tue 02 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15440
IP address blocks: 194.180.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:cf:e7:4f:55:b3:c1:50:a4:d7:d6:2d:f2:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adb2855a3c76b30057de568d9642603b27ebdd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:5d:55:82:7a:34:7f:ee:d1:6a:f8:28:13:
ff:2a:12:66:14:97:01:31:db:ea:36:2d:e5:cd:c2:
ad:d2:f0:c1:a3:2d:ca:e6:4c:56:a7:81:ac:d1:3d:
1c:3a:00:01:62:8a:13:fb:7f:52:6d:43:ef:72:49:
ab:4c:f0:df:49:e5:68:52:9d:30:41:91:4f:68:80:
25:ac:61:6f:4f:f8:4b:aa:1c:17:93:ee:86:60:19:
a6:93:12:7c:ae:69:47:e1:10:17:ec:cd:a8:c2:fb:
2b:bc:5a:23:8a:02:e1:85:9b:34:0b:b4:4d:10:1e:
c1:bf:3f:4c:75:a5:0b:89:93:77:47:f2:c9:43:15:
aa:d4:01:74:7d:81:25:20:e1:0a:f3:f1:91:f8:ab:
1c:f4:68:0e:8d:5b:a8:05:cc:45:ec:44:db:1f:b3:
b1:9d:09:80:83:02:bd:de:ac:a8:50:16:70:9d:3d:
71:1b:dc:e6:27:cd:e7:99:4f:3f:6b:15:d0:52:01:
cc:4e:09:ed:1f:54:82:99:78:d1:f2:d5:05:89:48:
d4:1e:72:d8:1f:6b:17:86:4f:88:23:94:ff:d3:53:
de:b0:0c:7a:13:6b:37:7f:38:03:3d:48:fa:d5:cc:
11:d2:6b:c8:f7:44:39:d8:e3:74:83:e7:4e:79:f1:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:85:5A:3C:76:B3:00:57:DE:56:8D:96:42:60:3B:27:EB:DD:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rbKFWjx2swBX3laNlkJgOyfr3SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
99:54:fd:27:25:c5:ef:45:be:83:b9:f7:a9:6d:10:5e:9a:4f:
e2:80:4d:3d:3a:ba:4a:69:c8:e7:ef:b3:a8:23:70:2b:3e:40:
75:8c:fa:21:cf:e1:97:c5:51:98:64:53:fb:59:70:40:92:cc:
62:03:a8:39:79:11:1e:dd:b2:33:71:94:a6:04:bc:d2:13:65:
b6:2c:a1:a8:50:28:df:56:28:b3:71:45:35:f3:98:97:d4:d1:
46:bf:81:aa:a2:53:8a:68:32:48:ea:ba:d4:53:26:7c:d9:ce:
f1:cb:f5:f9:87:2b:95:1c:41:43:b0:cc:d8:f1:07:87:b2:3f:
2e:75:db:1b:8e:82:36:79:c5:66:b4:9e:b6:01:35:6f:6d:66:
55:eb:87:a5:ee:da:ce:0f:da:cf:1d:b5:a5:9d:40:00:58:4c:
0d:34:56:e0:47:51:76:9c:09:a9:e5:19:d3:c1:b4:62:75:bf:
2e:15:1f:3d:bb:41:df:76:bc:26:57:17:70:e9:f2:41:4e:b5:
ed:a0:90:2c:29:02:a3:e1:d5:44:30:49:8e:75:fa:63:03:bf:
35:d0:b3:34:54:5a:65:c6:d4:f5:3f:65:e3:d5:aa:06:d7:81:
9c:3d:fd:7b:a2:cd:46:0c:c4:5a:b3:95:b0:2c:cf:4d:e9:ae:
5a:c4:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:19:04 2024 by rpki-client on console-fra.rpki-client.org