Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/xGEflSiaaMX_nHlWSr2NIQ778JE.roa
File: xGEflSiaaMX_nHlWSr2NIQ778JE.roa (raw, json)
Hash identifier: fPRyQQ3N02S4yQYxmDgFwr+Z+Jo7+KdwSwA2T9WtbVA=
Subject key identifier: C4:61:1F:95:28:9A:68:C5:FF:9C:79:56:4A:BD:8D:21:0E:FB:F0:91
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 018CC9BB498B60D26464130B64C25332F340
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/xGEflSiaaMX_nHlWSr2NIQ778JE.roa
Signing time: Tue 02 Jan 2024 10:32:23 +0000
ROA not before: Tue 02 Jan 2024 10:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202223
IP address blocks: 185.49.164.0/22 maxlen: 22
185.49.164.0/24 maxlen: 24
185.49.166.0/24 maxlen: 24
185.49.165.0/24 maxlen: 24
185.49.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:49:8b:60:d2:64:64:13:0b:64:c2:53:32:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Jan 2 10:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4611f95289a68c5ff9c79564abd8d210efbf091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:72:13:a6:b9:90:6b:aa:6c:4c:40:83:20:
20:c1:74:5b:30:6e:2f:18:98:bd:00:2b:d1:31:30:
04:a4:95:8a:9c:ca:a9:d0:f9:41:5f:0c:0a:b6:4f:
13:8c:24:21:60:1e:00:6c:4f:e6:16:87:85:9d:32:
06:2a:6b:6e:03:c4:35:fe:fb:3a:35:89:85:1b:18:
4e:0c:75:3f:fc:25:5e:a8:47:58:5a:24:54:20:aa:
23:12:ea:1a:73:4b:c0:27:e8:a8:1f:74:6f:15:25:
80:4d:ca:28:41:0d:ab:32:a6:75:a7:b3:78:ce:04:
ca:af:c3:55:f0:bd:9c:ca:b9:58:cc:2b:b3:01:23:
02:c6:62:01:86:1e:b2:30:4d:f2:d5:dd:cd:d8:e4:
31:10:dc:07:3b:bb:b2:14:94:df:16:04:5f:2d:ab:
91:bb:eb:6e:fd:8a:1d:88:1a:f7:31:0f:46:29:5c:
01:32:2b:4d:71:b8:16:d1:14:2a:53:f1:f9:1a:24:
46:cc:06:42:45:b4:de:d6:ba:04:a8:b4:9b:f6:e7:
e7:4c:5d:a5:9a:7d:8a:1a:17:3e:5c:28:5e:74:67:
ca:cf:04:ea:a8:0a:61:4e:ad:2c:b6:23:d5:28:43:
bc:de:80:75:94:f5:25:cf:7e:c5:2b:55:d9:a9:41:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:61:1F:95:28:9A:68:C5:FF:9C:79:56:4A:BD:8D:21:0E:FB:F0:91
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/xGEflSiaaMX_nHlWSr2NIQ778JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.164.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d6:43:7e:d1:06:e9:ae:b0:64:4b:a0:74:0b:da:83:86:3c:
8a:54:06:29:aa:ac:bc:78:df:d4:46:06:60:bb:16:a1:28:3a:
05:12:d2:5d:23:b5:03:c6:1f:37:40:6a:7c:3a:3c:86:90:2a:
a4:4c:32:3b:45:f7:4c:43:fc:ff:be:db:dc:fd:26:05:f6:eb:
a2:e1:80:e8:02:dc:2d:b2:88:b6:47:be:2a:7c:7e:8d:80:80:
c9:c4:5a:ad:65:8c:41:b1:e7:4f:50:47:d0:ae:6f:0e:e4:96:
4c:9e:a8:af:82:03:55:09:bb:31:60:2f:7c:95:cb:4b:c8:ec:
46:7e:9c:06:13:35:2f:19:00:38:27:bb:cc:0b:e4:cd:81:ae:
e1:82:41:5d:5c:2b:23:2b:cf:2c:96:96:be:1e:01:d5:49:3a:
b9:6b:d7:17:0a:2e:5f:62:d3:bb:fc:08:8b:74:d6:d0:ed:d8:
ef:7b:b9:95:88:89:76:34:ca:2d:c9:95:74:c2:87:f9:81:af:
64:f9:23:1a:e0:74:3a:30:b4:b7:11:a3:9b:42:b6:16:71:9d:
a5:39:21:4c:22:ea:8c:d5:1f:54:89:4a:d9:37:bc:35:5a:2b:
ef:d0:2a:30:fa:aa:18:95:ed:4d:ea:a0:34:24:53:91:46:93:
2c:2e:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:04:25 2024 by rpki-client on console-ams.rpki-client.org