Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Ct5K8CyXUvzvWZE1EnWXACu79c0.roa
File: Ct5K8CyXUvzvWZE1EnWXACu79c0.roa (raw, json)
Hash identifier: AUF5J7M+VrJ8hPO0OwpJS06fzU5ix/1r9l6HQIcEFHE=
Subject key identifier: 0A:DE:4A:F0:2C:97:52:FC:EF:59:91:35:12:75:97:00:2B:BB:F5:CD
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 018CC6499FD3B89B9FDC555F3E7BACB8D2D9
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Ct5K8CyXUvzvWZE1EnWXACu79c0.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 185.68.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9f:d3:b8:9b:9f:dc:55:5f:3e:7b:ac:b8:d2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ade4af02c9752fcef599135127597002bbbf5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:d0:65:e3:83:70:2a:88:ae:94:be:d8:87:
b2:d9:4b:f8:6d:6a:94:7c:48:83:21:3f:64:f3:0d:
c1:6c:9f:08:32:7d:46:c0:c6:00:e6:d8:5d:61:a4:
73:75:91:93:65:7b:f3:a8:7e:94:f5:9b:0a:5d:99:
5f:6f:1e:fb:78:e4:5d:f0:73:b4:7c:13:a4:8b:20:
76:ea:87:b4:07:0c:b6:dc:9d:1c:68:81:e0:1f:6c:
b4:4c:b8:5f:0c:81:d7:2d:b7:6b:e1:b5:25:42:c5:
5e:9c:a5:c2:dc:b4:3b:71:76:6b:83:b2:58:9a:f8:
f1:60:c9:51:45:58:95:9e:eb:26:f7:da:0f:3f:c6:
04:1f:3f:d5:01:ca:90:36:41:46:3d:e5:e7:17:28:
0c:95:14:4b:4b:2c:07:e1:d6:d0:b6:e4:f0:c4:0c:
bb:7c:94:b9:3d:67:5a:b5:11:a1:5d:0a:73:a7:4d:
2e:dd:00:75:13:69:ef:c7:60:39:39:1b:c0:ee:3d:
c7:69:db:47:43:b9:ce:f8:b4:b5:3d:cc:24:77:04:
23:82:f2:77:4b:7c:75:e0:15:6b:84:29:12:78:0d:
96:09:7f:3a:10:dc:56:e9:9d:b1:e7:18:b5:52:15:
1a:ed:64:9d:61:ff:cd:c4:3f:61:49:3a:cf:cf:4e:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:4A:F0:2C:97:52:FC:EF:59:91:35:12:75:97:00:2B:BB:F5:CD
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Ct5K8CyXUvzvWZE1EnWXACu79c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:db:cf:c5:ca:e4:03:7c:56:06:d6:e8:ff:80:05:0d:b5:a3:
e1:0a:a2:0b:a0:69:35:cd:6a:63:e9:96:1c:60:b9:20:f8:1a:
50:dc:17:31:b4:50:c8:67:61:34:be:1a:59:3f:af:20:bb:b4:
d8:00:3f:bb:6f:14:ad:4d:6f:94:94:b8:0f:b3:dd:7a:a7:14:
ec:b6:6d:3d:d7:3d:34:6f:eb:4c:45:e9:ef:71:9d:69:3d:a0:
09:98:a9:80:15:0e:8a:aa:d8:89:c5:81:3d:0a:d9:e7:76:30:
b3:63:46:f5:47:b4:f0:de:7c:c5:0d:68:d3:82:21:25:63:74:
3d:c9:e7:eb:32:75:44:92:88:12:a6:36:93:b1:6d:3a:dd:b8:
fa:9d:90:3e:30:a2:2b:22:8e:69:3d:78:e2:22:ab:68:5f:a5:
c2:1f:ed:7c:a1:ec:a2:e7:2c:ee:0f:eb:53:86:c3:22:8f:e8:
06:95:12:94:b5:e8:64:29:1c:b7:8f:f1:e6:8f:1e:b9:94:48:
7a:48:67:f3:40:f1:ba:98:c9:7b:db:2e:a1:d5:5a:05:ca:50:
20:20:4d:54:49:4d:91:c6:88:54:9f:50:eb:4c:03:5a:83:b8:
eb:ce:10:65:56:e8:d1:83:bb:7a:4f:e1:a9:9e:4d:c8:e1:de:
b2:21:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:40:19 2024 by rpki-client on console-ams.rpki-client.org