Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/kIloyVyJI__sMWlF1-qfi9ifaBY.roa
File: kIloyVyJI__sMWlF1-qfi9ifaBY.roa (raw, json)
Hash identifier: SJO82AXsG4IHlQc9s0T6wOlLg7hE3qLvHWqPgGoSzN0=
Subject key identifier: 90:89:68:C9:5C:89:23:FF:EC:31:69:45:D7:EA:9F:8B:D8:9F:68:16
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 018CCA2A2A36FCE881580693FDB8E9CA39F6
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/kIloyVyJI__sMWlF1-qfi9ifaBY.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41405
IP address blocks: 185.7.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2a:36:fc:e8:81:58:06:93:fd:b8:e9:ca:39:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=908968c95c8923ffec316945d7ea9f8bd89f6816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:db:eb:17:94:33:87:a5:11:c4:3d:7e:5f:
e1:08:be:0b:36:f1:78:2f:1d:50:ac:56:e5:e9:5b:
a7:9a:9f:83:b8:6f:f7:58:58:d7:8d:c2:18:a4:ae:
37:3e:68:0b:a7:ac:af:0c:99:74:65:a3:63:6e:1b:
d4:24:20:be:31:3e:a1:da:37:01:fc:49:b5:d4:d0:
80:a1:38:ef:1d:5e:7c:0f:0e:d4:64:a4:50:b3:ef:
be:4d:7b:00:dd:60:12:d9:d4:4a:16:2d:f5:fc:29:
a4:45:07:d3:07:c1:bf:89:d9:5a:ce:99:09:bd:bc:
da:0a:6d:75:38:22:b1:69:ad:fb:64:b7:9c:21:3b:
2c:7b:5b:3a:45:78:73:f0:75:51:bc:c3:55:4f:52:
b7:62:3c:83:4b:a4:83:86:69:3a:90:12:32:5e:b5:
27:62:c0:f0:13:99:5a:22:25:bd:cb:99:86:31:7a:
bc:4f:c8:7e:80:d3:88:d4:9c:c1:27:a3:42:4c:54:
ad:58:7d:b4:90:2a:27:8e:81:8d:5a:85:52:de:90:
64:f2:cc:00:69:b1:be:99:0e:73:eb:43:65:42:b1:
db:93:ce:36:f8:6e:29:33:db:f3:2b:ad:ac:e2:e6:
b8:1a:f7:16:4d:a0:fb:b1:1c:78:bf:84:63:e1:d2:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:68:C9:5C:89:23:FF:EC:31:69:45:D7:EA:9F:8B:D8:9F:68:16
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/kIloyVyJI__sMWlF1-qfi9ifaBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
Signature Algorithm: sha256WithRSAEncryption
09:e6:c7:60:e2:be:86:5e:21:f3:c5:48:90:57:68:ce:fa:d9:
3c:c0:83:39:2c:fe:7c:d1:65:e1:a5:96:a7:4d:8b:ec:78:55:
5e:99:6c:56:d0:bd:3a:c0:6a:50:e1:c1:fd:de:3f:46:01:0c:
bb:b6:ff:2d:4d:ae:46:0e:c9:22:ab:82:1b:c5:54:ee:68:d2:
eb:39:19:5d:02:67:4f:7c:a1:ec:4b:9d:3e:7b:97:fd:46:b4:
25:24:f4:19:95:b4:5f:14:5b:6a:2d:01:3a:d7:7e:6c:d5:b0:
7b:9a:ac:04:3c:0e:63:0f:c2:bd:9d:bc:ee:d8:3e:67:14:26:
b8:ac:3b:97:91:20:f1:e5:d0:82:90:ac:9d:b0:02:e3:11:1c:
41:a3:58:f9:a9:3f:48:27:e8:32:91:bf:f7:c5:37:38:7b:bc:
97:40:bc:8d:b5:9e:54:d6:2a:09:e1:37:68:54:11:69:52:c8:
16:33:f3:80:5a:c7:01:f4:ee:69:e0:06:4e:f9:f9:af:38:91:
48:d0:3e:2c:60:29:a6:da:0d:fd:8f:15:47:41:4a:01:aa:47:
96:49:7d:c1:4e:37:6f:a6:af:b8:08:ff:c5:a4:38:67:00:ed:
a2:10:c6:dd:bb:c7:2a:0c:52:3e:8b:12:e7:9e:b5:ba:10:49:
f9:a8:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:55:18 2024 by rpki-client on console-ams.rpki-client.org