Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/ulj2w9JN4ZRjx_VwY1Md4hcACis.roa
File: ulj2w9JN4ZRjx_VwY1Md4hcACis.roa (raw, json)
Hash identifier: rylcW47HXkwq6CMKuNMQEvu00QUWBlQNzcfXJmFscCY=
Subject key identifier: BA:58:F6:C3:D2:4D:E1:94:63:C7:F5:70:63:53:1D:E2:17:00:0A:2B
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 018CC8704341EE1100592C95E4B4CE4BFB35
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/ulj2w9JN4ZRjx_VwY1Md4hcACis.roa
Signing time: Tue 02 Jan 2024 04:30:49 +0000
ROA not before: Tue 02 Jan 2024 04:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41847
IP address blocks: 185.144.220.0/22 maxlen: 24
185.144.220.0/24 maxlen: 24
185.144.222.0/24 maxlen: 24
185.144.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:43:41:ee:11:00:59:2c:95:e4:b4:ce:4b:fb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 2 04:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba58f6c3d24de19463c7f57063531de217000a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a5:1a:28:05:8c:ee:d5:a0:81:4f:3f:f7:8c:
09:06:8a:a9:f1:d1:3b:27:55:9c:b2:d8:b2:f3:3d:
b3:16:fd:a1:e2:83:3b:38:bc:35:ad:3c:00:05:90:
0b:44:41:f6:b2:84:b8:7f:ea:83:b0:69:29:67:79:
a7:d0:55:6d:8c:a1:41:3d:3f:fd:e7:d6:fe:97:f1:
50:cc:a7:fc:ba:d6:0a:34:3a:d9:39:46:93:ad:5d:
f9:d0:14:b6:e1:a7:06:d4:03:bc:d1:f9:49:52:0a:
85:8a:4b:4d:0e:b7:06:dd:49:27:34:99:4d:78:3e:
38:c5:bd:a4:50:4e:54:30:08:2d:fa:57:02:31:67:
16:af:f4:7e:67:54:5f:0a:53:d3:0c:55:11:fd:fd:
90:88:1b:76:74:44:b3:44:90:9c:99:94:4f:89:5c:
2a:07:b0:52:0e:23:c8:06:4d:c5:ae:d3:29:93:24:
28:51:01:13:db:bc:62:5a:8b:de:8e:33:1e:a7:08:
e3:66:02:88:b7:3b:34:be:01:76:db:37:21:c8:d7:
5b:5a:50:3b:3a:5d:45:55:ef:59:fe:ab:13:a5:59:
c5:6e:70:da:55:1a:e4:1f:2c:58:2f:3e:5b:99:e4:
36:ce:cd:e7:72:8e:e5:84:6c:db:00:ef:1e:d6:73:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:F6:C3:D2:4D:E1:94:63:C7:F5:70:63:53:1D:E2:17:00:0A:2B
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/ulj2w9JN4ZRjx_VwY1Md4hcACis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.220.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:36:8c:dc:14:46:1e:3b:cf:dc:7c:e1:35:39:53:6b:20:95:
c4:c3:fe:be:7f:ab:c5:59:53:69:c2:68:d0:89:ef:39:4b:a0:
f6:f5:f3:d1:e1:ce:cd:d1:f6:67:1f:c8:d0:75:b0:b6:fe:fc:
e0:2b:3f:63:99:b9:1e:8d:d3:1b:a7:b6:3c:13:e6:f7:fe:ab:
c4:66:d7:79:3b:e6:9e:f5:0c:66:5d:7b:24:cf:19:d7:f1:53:
02:58:4b:67:86:4b:69:5a:4f:74:e5:e0:cc:dd:3a:96:0e:0c:
83:cf:40:fc:68:b0:a2:84:54:7d:69:df:44:90:50:bd:e1:42:
43:0e:1e:22:36:40:29:39:7b:f4:ba:6e:90:e7:2a:ad:58:93:
e5:d6:16:3c:66:c0:82:e2:39:42:74:ed:b0:e7:7b:22:51:e4:
3f:9a:a4:8f:d4:c6:1c:f9:6a:99:dd:ba:16:0d:d1:6f:3c:88:
ac:88:5d:57:4c:2d:cc:9e:23:5e:a8:ea:be:7a:48:96:e0:d7:
9f:79:7c:9e:40:ac:6e:5d:6a:72:e5:1e:09:c2:dd:94:ce:db:
f2:e2:4f:28:66:39:9b:11:6a:37:d5:11:0e:3e:fd:78:2b:be:
58:7d:88:8e:79:12:32:aa:11:06:df:a4:43:9e:fd:23:7c:46:
a3:6d:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:27:16 2024 by rpki-client on console-ams.rpki-client.org