Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/Is49VjIl9Spx4sccyOy4NLVibOE.roa
File: Is49VjIl9Spx4sccyOy4NLVibOE.roa (raw, json)
Hash identifier: ptZYwlwC44VDmxvmMEdXgfPwwKxZZhSyrfkPLPU3BPQ=
Subject key identifier: 22:CE:3D:56:32:25:F5:2A:71:E2:C7:1C:C8:EC:B8:34:B5:62:6C:E1
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 018CC64B3848E19AD60C939613ECACB6D0B6
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/Is49VjIl9Spx4sccyOy4NLVibOE.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 185.130.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:38:48:e1:9a:d6:0c:93:96:13:ec:ac:b6:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22ce3d563225f52a71e2c71cc8ecb834b5626ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:fe:f3:07:6f:fc:2f:fc:78:06:04:f8:25:
16:2e:b3:2f:1f:96:7a:c5:5d:ae:38:f5:ea:ab:de:
c6:f5:94:8f:cb:d9:f7:98:cd:48:bc:92:35:f1:4a:
6f:55:ad:c7:22:a9:b6:43:cb:08:72:8d:86:82:41:
5c:a7:f5:e4:3e:c0:10:4f:e2:97:f7:3e:c4:e1:7e:
09:0b:b7:35:d2:d7:b4:69:ae:6e:d6:c2:23:76:31:
ac:b9:c0:8e:ec:09:49:44:e0:61:19:30:86:f4:c8:
eb:de:5c:a7:4f:d9:a3:16:86:d9:64:e5:9c:1b:5b:
f4:d7:34:57:e1:0f:74:e4:95:c6:51:a5:e7:32:ef:
a8:67:f7:83:b6:6b:19:76:dc:99:7d:7b:8d:f2:22:
b2:e9:76:82:34:73:fe:30:3a:70:0e:7f:79:14:b0:
56:c8:68:57:6f:19:f9:c2:08:ff:af:c4:39:62:c7:
9b:82:ea:48:39:52:c3:61:fc:cd:26:d8:2f:1f:e0:
60:c7:09:28:0a:2a:7b:af:34:e3:ea:af:8a:25:eb:
f6:16:2e:3d:04:d6:85:44:c9:2d:d2:e6:2f:37:c9:
0d:fe:82:38:d6:3e:a3:dc:df:c4:d5:d3:3b:3f:fa:
77:1d:4e:b1:a5:b5:4f:79:ed:87:74:44:d8:3a:59:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:3D:56:32:25:F5:2A:71:E2:C7:1C:C8:EC:B8:34:B5:62:6C:E1
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/Is49VjIl9Spx4sccyOy4NLVibOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:1c:02:33:20:ef:50:b9:7b:8b:19:f3:f3:e4:ee:a8:e4:c9:
d0:9d:13:12:4b:98:c3:05:cc:db:a3:a8:f0:5f:fb:3a:92:d6:
d5:f3:54:3e:ba:c8:cb:9a:12:4b:15:bf:51:a0:73:a0:cd:0e:
63:fe:ef:ef:ec:8d:fa:6c:ef:6c:1c:71:a1:c7:19:2b:e9:be:
1d:a6:56:bd:05:99:18:06:f8:cd:b1:3d:9e:d6:0e:1f:62:25:
59:79:5e:9d:8a:53:90:9a:35:88:ca:a8:98:c2:7c:94:4f:c3:
c5:17:93:29:51:8c:89:5d:36:76:4a:12:1f:f0:99:00:6f:9a:
60:fa:9c:ec:d1:52:12:66:1a:f5:29:72:8c:df:85:72:24:aa:
20:29:8b:f1:8c:a5:b1:96:01:aa:58:64:4d:7f:a6:9a:df:e6:
f2:84:be:9d:cd:d7:6d:95:9e:13:09:b0:ef:dc:e2:32:49:d2:
d6:3e:a2:e6:08:2c:64:54:56:33:27:5b:fa:58:94:e4:82:c1:
d2:93:99:b6:0a:f1:fe:e2:37:d3:b3:03:94:ff:ab:fa:58:48:
8c:fe:91:a2:9e:15:4e:b8:02:10:fd:1b:68:5d:67:1c:43:49:
4e:d6:53:d4:0f:07:70:70:eb:36:82:22:45:d6:30:da:a9:02:
8f:db:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:24:20 2024 by rpki-client on console-ams.rpki-client.org