Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/4dem9-WtM4WhcWz7i3En58hPsd8.roa
File: 4dem9-WtM4WhcWz7i3En58hPsd8.roa (raw, json)
Hash identifier: a5EoPaEF2r9LgQpxGrHaSUkko4/7aENYqzeYn/LSocw=
Subject key identifier: E1:D7:A6:F7:E5:AD:33:85:A1:71:6C:FB:8B:71:27:E7:C8:4F:B1:DF
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 018CC794E20D29517C05D4EEF066BD5DB81B
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/4dem9-WtM4WhcWz7i3En58hPsd8.roa
Signing time: Tue 02 Jan 2024 00:31:12 +0000
ROA not before: Tue 02 Jan 2024 00:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34680
IP address blocks: 185.243.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e2:0d:29:51:7c:05:d4:ee:f0:66:bd:5d:b8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Jan 2 00:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1d7a6f7e5ad3385a1716cfb8b7127e7c84fb1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:4f:ee:16:ab:aa:2a:98:58:56:b5:28:1c:
58:0f:35:92:84:3c:df:44:fb:1c:a9:f6:7e:e0:c7:
e3:aa:b8:63:49:e7:4c:98:0f:ae:b4:b6:29:47:72:
2b:30:ba:76:3a:78:35:f8:4a:38:18:13:e3:a2:92:
e4:4e:97:2a:38:33:e7:0d:54:c3:ac:80:6b:4c:cb:
8c:2a:4f:ca:de:30:47:6a:45:1a:9a:a5:8c:0b:af:
08:ca:a4:78:69:31:5f:e8:5a:a6:3a:7e:5d:7d:6f:
7b:f0:a5:4d:34:ab:aa:80:99:a0:4b:43:c4:82:47:
f9:e4:b4:56:c0:45:4c:d3:84:37:73:dc:d8:c2:f3:
b8:64:ef:6b:f9:e2:37:52:cd:53:27:79:5e:cf:58:
ab:1d:cc:29:a5:0a:42:97:9c:ad:07:a0:62:48:16:
5c:e0:ce:c0:81:7a:95:d2:e5:ff:64:ff:15:74:f0:
d4:13:08:1b:e9:f2:1e:78:8e:63:8b:25:82:a4:6a:
e1:58:32:ed:c3:81:8e:75:01:16:a8:88:c8:59:12:
fa:68:eb:ca:df:e9:ef:d9:9d:8f:fc:52:07:59:d7:
43:99:c8:cf:a2:a1:e6:d6:1a:df:ce:5e:97:b7:69:
89:41:59:c1:15:47:a8:92:0d:bf:38:c8:2c:db:48:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:A6:F7:E5:AD:33:85:A1:71:6C:FB:8B:71:27:E7:C8:4F:B1:DF
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/4dem9-WtM4WhcWz7i3En58hPsd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.36.0/22
Signature Algorithm: sha256WithRSAEncryption
85:87:ec:36:b6:7f:b7:a1:65:69:6f:ae:63:74:ca:31:3e:39:
ce:cd:30:71:86:9d:32:d1:58:16:a4:a3:86:ca:b6:1a:a9:62:
4e:a5:03:43:f1:ac:c4:3c:3b:5a:6c:d1:9a:ed:5b:cc:66:f9:
af:e2:c3:ac:a4:da:68:e7:16:f7:74:c2:4b:a6:01:15:ad:29:
81:9e:13:fd:b1:28:2b:37:82:25:9b:74:91:6c:58:1a:a2:a6:
c9:c9:77:07:8b:d8:8a:cb:25:c0:2c:60:a1:de:9e:8c:7a:67:
d7:36:4d:56:f4:69:ed:95:c8:b8:ff:40:5d:43:52:41:72:6e:
f5:bd:f8:77:07:bf:dc:d6:da:09:46:9c:96:ae:a7:23:cc:fb:
70:fe:88:17:05:6d:90:26:f1:dd:b4:a4:d3:f7:d8:18:fe:21:
5c:bc:9d:c5:68:1c:99:be:9a:6d:b1:aa:c0:6a:77:26:11:e6:
03:e9:a8:5f:76:5d:0f:8e:8f:bc:f4:7d:e7:80:f4:b9:74:3d:
c6:37:1a:1a:5e:40:f7:55:d2:83:ce:55:65:97:89:a1:9a:9a:
76:15:42:98:b2:9b:dd:28:e0:6e:fa:ba:6b:10:fc:12:fc:2a:
24:1e:1e:2f:c2:0c:d9:6f:f4:25:80:3e:c8:24:aa:b2:29:5e:
11:e6:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:22:48 2024 by rpki-client on console-ams.rpki-client.org