Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fKKQkLh7hJtbWT2X90nA1pXBG2Y.roa
File: fKKQkLh7hJtbWT2X90nA1pXBG2Y.roa (raw, json)
Hash identifier: MTXmm5QLs6LEg8tvgdKqsv62iMgm3KUnhhuQZVA6WS0=
Subject key identifier: 7C:A2:90:90:B8:7B:84:9B:5B:59:3D:97:F7:49:C0:D6:95:C1:1B:66
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0900A4ACD343FF68851E162E5E1C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fKKQkLh7hJtbWT2X90nA1pXBG2Y.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 146.185.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:09:00:a4:ac:d3:43:ff:68:85:1e:16:2e:5e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca29090b87b849b5b593d97f749c0d695c11b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:f9:34:ec:29:98:ec:3b:4d:8d:04:a3:e2:
e7:c0:d5:6d:7c:9f:bc:be:f9:24:41:b8:f9:31:22:
ed:e7:1d:c5:f0:e3:27:1a:d2:b0:b1:ff:5c:35:73:
7c:89:65:a9:51:e2:3c:cd:9f:ca:87:df:8d:2c:c1:
0c:67:22:dd:ad:26:4e:ae:ff:f2:0b:49:78:86:37:
73:90:c2:f7:9f:9e:f6:77:8f:01:4e:f6:7e:69:ca:
89:4b:a4:8c:61:4c:a6:bc:39:14:cc:9d:ac:5c:50:
03:8e:26:91:f8:51:1a:e5:35:92:68:ea:c6:a3:7c:
54:8a:f2:30:3a:4a:c4:3b:33:66:41:9b:b0:8d:c4:
97:97:c2:1b:4b:4e:c0:b1:2c:35:b3:14:e8:22:c7:
ec:c6:2e:81:ee:3b:75:2b:cb:52:54:92:42:97:a3:
3b:11:b8:c1:1f:6d:b4:3f:18:3b:28:19:27:31:45:
47:86:44:1a:ba:ee:a1:72:0f:3f:9e:9e:ce:1d:77:
aa:be:d5:26:87:66:d4:b3:bd:4b:80:68:0c:af:0e:
5d:97:2e:94:a4:de:58:39:a0:6d:7f:aa:fd:9c:2b:
87:9c:5e:06:a8:5f:f2:7a:05:e5:4d:16:40:bf:eb:
6d:d9:06:f8:7a:35:cb:3b:d8:54:3a:82:41:a6:96:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A2:90:90:B8:7B:84:9B:5B:59:3D:97:F7:49:C0:D6:95:C1:1B:66
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fKKQkLh7hJtbWT2X90nA1pXBG2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.235.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b3:51:59:a5:93:91:77:12:d5:8c:73:2e:1b:df:9c:73:18:
42:93:2e:01:33:0c:1f:e3:ed:95:ed:17:7f:7a:74:74:83:4e:
df:cf:a5:5a:ec:6b:96:13:f0:43:e8:e3:ce:8e:f2:aa:6c:75:
2c:1a:ba:57:4a:7e:96:95:2b:d0:d7:66:91:5b:d5:64:99:96:
fa:79:f1:ed:c4:ad:04:e7:1b:f3:c9:7d:c1:4f:3b:fb:e2:48:
62:af:6e:4c:b5:6a:ab:f0:32:d6:c9:95:43:89:2c:b0:47:14:
1d:50:a4:64:20:89:3a:5f:c5:0f:9b:f4:bd:43:40:4d:05:44:
8a:ac:4f:2f:60:17:71:94:64:02:6e:7b:bb:da:f1:0d:b4:19:
39:95:58:c1:d6:48:dc:8e:ee:56:8b:15:46:0a:88:25:52:bb:
76:a3:4e:03:c7:1b:c4:7c:09:f7:98:fd:9d:8a:60:46:98:94:
2a:2b:f6:df:04:53:8c:df:c3:ea:4b:c8:c5:23:22:27:9d:7f:
85:e4:91:8d:66:2f:87:25:13:e9:1b:75:c8:1c:bb:f1:84:09:
f2:6f:2b:38:b8:82:71:2f:f3:e7:c0:62:2e:3d:59:f0:1a:20:
5b:98:c7:04:1a:38:04:99:9f:18:13:15:92:93:e4:46:d1:9c:
76:a0:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:25:39 2024 by rpki-client on console-ams.rpki-client.org