Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/hMOfdz7IYRfRAquZke5ca-f2lS4.roa
File: hMOfdz7IYRfRAquZke5ca-f2lS4.roa (raw, json)
Hash identifier: MNCxsQPuaTgXMceVCtAdg4znJP3oml1ywl3NLZrSODc=
Subject key identifier: 84:C3:9F:77:3E:C8:61:17:D1:02:AB:99:91:EE:5C:6B:E7:F6:95:2E
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 018CC7953003685889C494A5BC57D72BC738
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/hMOfdz7IYRfRAquZke5ca-f2lS4.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39455
IP address blocks: 185.85.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:30:03:68:58:89:c4:94:a5:bc:57:d7:2b:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84c39f773ec86117d102ab9991ee5c6be7f6952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:3f:b6:44:fc:2e:ec:cc:52:dc:f0:30:cb:
19:55:96:fb:c9:18:8c:15:a2:8b:42:e3:29:c6:d2:
be:57:8f:d2:dc:58:84:ae:d9:ce:62:2e:67:0b:c4:
4a:9d:0f:a5:7a:d1:60:ca:7f:d3:f7:6b:98:a4:17:
36:9c:74:96:a8:13:1e:86:92:1e:76:76:c3:f4:9e:
5b:66:c5:6f:cb:fe:43:81:55:cb:b3:85:1c:dc:4d:
5a:cc:6a:30:49:b4:11:97:2b:9f:3f:29:2c:5a:38:
91:a8:01:82:37:7b:a3:45:0c:89:e1:dd:20:5c:32:
22:d9:97:cf:bb:c5:a1:b8:5a:da:84:17:40:4e:b8:
bc:ae:5b:a7:57:60:7d:c4:5b:83:80:47:3d:28:b5:
49:b7:aa:bb:45:66:51:23:4b:bd:09:1b:7f:20:e5:
b7:9b:c0:eb:e7:f5:48:cd:3f:27:ea:e3:55:19:5f:
0a:20:24:eb:c8:ec:85:6c:50:41:19:91:cc:71:f0:
af:02:74:52:47:8f:b9:0b:7b:b4:b5:b6:5a:ae:f7:
67:e1:a7:86:8c:98:ab:c4:01:2c:ed:12:01:0e:32:
67:e1:d9:93:7e:b3:87:7a:aa:be:fd:ca:37:d3:98:
15:8f:58:3b:79:ea:15:6b:32:57:0c:bd:7f:2f:55:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:9F:77:3E:C8:61:17:D1:02:AB:99:91:EE:5C:6B:E7:F6:95:2E
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/hMOfdz7IYRfRAquZke5ca-f2lS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.36.0/22
Signature Algorithm: sha256WithRSAEncryption
48:1e:f6:4f:47:a0:bf:75:89:aa:48:6b:bb:68:4b:70:8e:d8:
27:e8:04:5f:32:72:33:7b:79:0f:65:a8:30:80:10:bb:0a:13:
e4:25:09:cf:5d:96:54:c6:30:6a:36:be:c4:6d:cc:62:c6:d3:
3c:14:3b:6f:5c:de:00:2b:83:1d:b7:1d:5f:86:6e:84:3f:fe:
5e:a2:25:3c:db:70:02:b3:90:7d:32:da:58:b5:05:d7:0d:07:
bd:b7:ed:b2:f0:ab:8a:71:d8:30:26:01:c4:92:c8:94:0c:8f:
89:13:c6:f2:11:c2:c4:82:9f:3a:22:b9:34:9e:c1:23:05:2e:
8b:a3:60:af:71:8b:70:45:4a:75:94:f0:b7:a9:ec:8c:bf:af:
d0:94:5b:1e:5f:8e:ec:2f:40:2d:94:3c:81:6b:c8:0d:9d:67:
77:aa:48:83:23:45:25:98:52:a8:50:a9:9b:95:fb:b7:ff:16:
7a:e4:bb:23:ff:33:a3:1b:47:b4:5e:b3:c5:9b:69:f8:4f:91:
83:11:e8:b4:a6:bb:c9:c0:2c:8d:7d:fa:b5:9d:6b:aa:ae:ed:
89:5e:10:9b:37:1b:cc:d5:63:dd:b8:44:3b:55:20:ae:4d:3a:
07:c3:bb:76:57:0e:ab:ce:72:a0:e3:dc:06:3d:46:5e:4b:c9:
59:1d:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 21:11:53 2024 by rpki-client on console-ams.rpki-client.org