Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/ictJ0d8FgLEiwOsZZzfTOICMkZo.roa
File: ictJ0d8FgLEiwOsZZzfTOICMkZo.roa (raw, json)
Hash identifier: PJGpUD19ZSR7uWNWJVq5Ib8zst+XvKBZ18nbUSEm2yA=
Subject key identifier: 89:CB:49:D1:DF:05:80:B1:22:C0:EB:19:67:37:D3:38:80:8C:91:9A
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 018CC5012C058B66BC05690B4C7DDB83335D
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/ictJ0d8FgLEiwOsZZzfTOICMkZo.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198760
IP address blocks: 185.236.116.0/22 maxlen: 24
185.208.116.0/22 maxlen: 24
185.241.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2c:05:8b:66:bc:05:69:0b:4c:7d:db:83:33:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89cb49d1df0580b122c0eb196737d338808c919a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:19:f0:a5:e4:f6:81:fb:a1:f2:b4:88:74:
ac:db:94:46:f0:81:fc:01:2d:27:f3:4c:33:03:9b:
e7:9d:3d:96:26:2a:8d:58:47:f6:54:06:2a:39:0d:
40:bf:c2:b0:2f:09:cd:fa:97:45:68:e3:bc:72:36:
c8:26:b6:a4:db:ed:74:68:41:79:c4:5e:e1:40:06:
cb:1a:7a:12:09:0b:8c:71:2d:31:22:7e:93:84:83:
73:21:50:f8:bb:86:7c:38:80:22:a6:cb:b3:ca:1f:
64:e3:87:da:eb:5e:72:c9:4c:be:bf:f9:8e:11:b6:
66:7a:6c:e8:86:ed:46:ff:3a:f0:86:a9:25:ed:a9:
a6:2b:bb:55:d6:78:16:6d:0f:6d:21:41:f8:fa:11:
3c:72:99:52:45:ad:52:78:8f:c2:75:7b:4f:36:44:
85:29:d8:75:bf:75:15:a0:77:38:8f:84:5b:e9:d5:
f3:ac:cf:0d:d0:f9:4a:ee:35:85:10:03:ba:82:ff:
0b:9a:1b:b1:8d:96:93:00:54:2a:42:8a:d9:dd:cf:
44:df:20:2b:b0:cb:5c:b8:68:39:ee:a0:f5:2e:4e:
4a:ab:ec:7d:b8:b0:cb:61:f6:2e:74:02:a0:08:12:
a4:f5:1a:01:fa:12:5f:4c:cc:65:9c:c1:85:71:18:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:49:D1:DF:05:80:B1:22:C0:EB:19:67:37:D3:38:80:8C:91:9A
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/ictJ0d8FgLEiwOsZZzfTOICMkZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.116.0/22
185.236.116.0/22
185.241.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c0:09:1e:7f:34:2d:9a:0b:37:19:cc:4c:a3:2a:9b:7b:51:
fb:c0:db:68:23:52:7f:01:2e:63:6c:66:13:0f:2b:14:46:cd:
66:0e:45:34:13:22:18:58:1b:c8:50:96:42:c0:65:19:ae:95:
d6:d1:de:5c:6f:f5:a0:6d:5b:27:86:b5:e4:cf:46:66:85:7b:
0d:72:d3:57:59:18:1b:9c:f5:d0:cf:59:0c:02:ad:b5:58:08:
b6:d8:6f:36:ba:37:7f:a8:62:cc:12:5e:ff:2b:ec:ae:2f:ef:
9e:f7:19:ae:ef:bd:b5:ae:9f:cf:89:23:b0:be:d3:90:17:6e:
9c:2b:08:3e:b1:1a:e1:4b:ad:eb:91:af:fa:d0:5d:e6:ab:a3:
64:99:93:81:16:61:ef:02:68:30:53:74:bd:b1:db:84:20:61:
20:06:1b:13:de:18:21:dd:3e:e8:80:15:8f:ff:ee:02:d3:38:
14:96:56:6d:11:44:7a:6b:08:e7:5b:07:8d:5c:3b:87:fa:b4:
b3:27:0a:fd:98:56:3b:f2:39:0c:3f:8e:cb:e3:e9:66:5c:31:
3f:d1:db:f7:56:1e:f8:bc:ca:dc:81:c1:55:a0:51:c2:91:3e:
ed:9c:0a:f2:97:29:98:85:a4:85:f2:0d:88:f8:f5:1e:e2:c0:
c1:a3:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:11 2024 by rpki-client on console-ams.rpki-client.org