Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/l7Sy_u1SLnLwKZyR3ICtPnbQjEc.roa
File: l7Sy_u1SLnLwKZyR3ICtPnbQjEc.roa (raw, json)
Hash identifier: DZygiMiiV4two7ozGzVwVYBMZ02APoiJLfMPkYInGos=
Subject key identifier: 97:B4:B2:FE:ED:52:2E:72:F0:29:9C:91:DC:80:AD:3E:76:D0:8C:47
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 018CC9BCDA973620E144EC2D553CCEE8CC21
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/l7Sy_u1SLnLwKZyR3ICtPnbQjEc.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42183
IP address blocks: 185.82.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:da:97:36:20:e1:44:ec:2d:55:3c:ce:e8:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b4b2feed522e72f0299c91dc80ad3e76d08c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:72:47:97:72:eb:e3:00:87:31:b8:15:7e:
a3:1f:a0:b6:0a:e0:25:bc:67:03:83:c1:05:7b:32:
66:f5:ad:f1:5f:33:96:82:02:b9:3c:ac:a2:cd:5e:
86:48:ef:86:e2:8c:2d:e8:8d:8b:59:66:34:42:6a:
64:63:b6:58:d3:7e:c5:45:36:4f:1e:32:14:7b:2b:
61:be:61:80:35:48:cc:b8:05:3c:06:1f:ce:8e:ca:
e1:74:77:e9:0f:79:71:e9:c2:ad:56:7c:68:5b:b1:
f1:06:af:5d:5e:07:1e:29:02:45:61:17:17:34:81:
49:4f:12:9d:7b:3e:6a:34:58:f7:38:1c:f9:e1:59:
91:7f:7f:f7:ee:f5:a3:01:02:df:4e:7c:0e:6c:fd:
ff:b6:23:9a:d6:af:17:07:18:bc:e0:e3:ac:f3:4c:
d3:1c:c4:b6:b9:f6:66:1d:82:14:ea:f5:d0:07:11:
c8:30:a4:34:d9:1b:98:df:97:d3:20:14:6e:f4:1c:
b5:f5:b4:86:ef:7f:b4:f6:09:9b:dd:ec:f5:d2:c7:
7c:6e:9e:6b:97:33:57:3e:8a:8b:1f:86:2c:b8:68:
33:a1:de:ef:f7:46:a9:aa:63:94:5f:9b:4b:c8:95:
ea:6b:32:5b:e9:56:bd:9d:02:e3:68:7d:15:8d:ab:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:B2:FE:ED:52:2E:72:F0:29:9C:91:DC:80:AD:3E:76:D0:8C:47
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/l7Sy_u1SLnLwKZyR3ICtPnbQjEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.96.0/22
Signature Algorithm: sha256WithRSAEncryption
97:59:de:89:88:2c:26:b1:a6:a9:fd:e6:33:87:bb:a0:cd:3f:
d1:0e:9b:2c:cd:f9:77:03:f1:12:87:a4:fd:e3:34:27:f8:c7:
9f:57:03:32:2c:b5:03:b1:1e:06:b3:f5:d6:07:83:79:e2:b4:
d2:43:96:01:f5:c2:f1:e7:ce:36:09:b1:b0:ca:66:2a:99:e2:
fd:8b:ef:96:60:5b:7c:e0:6e:8c:8b:3c:81:56:62:a1:98:e8:
7c:7f:f3:4a:2c:bb:94:52:fe:ae:22:b3:8c:c0:66:fe:82:2e:
21:00:b8:16:14:4b:00:0f:25:9c:81:11:40:43:ab:31:7b:0b:
fe:2a:63:68:a3:ac:8d:41:49:91:bd:9f:d2:fe:5d:89:82:b7:
83:1d:b9:48:4f:be:aa:b7:bf:ba:e7:90:08:ce:22:0b:77:22:
03:7b:d0:ef:43:e1:5a:1c:21:b6:72:44:7d:ff:c8:d8:4f:79:
1a:99:a2:b6:e1:94:1f:c5:d9:6e:b2:47:df:d5:c6:22:a5:1a:
3f:f0:00:2d:7c:4a:81:7b:31:c5:00:4f:c1:08:61:c0:a0:2c:
5e:3a:69:4a:ca:d3:3b:6f:71:98:8a:2c:a3:8f:cb:46:03:ed:
6c:21:23:ac:ad:e2:c2:cd:d3:b9:40:7f:78:89:b9:db:cd:5b:
8e:0f:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:57:43 2024 by rpki-client on console-ams.rpki-client.org