Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/AZq3Kiq8vV5rftBhwG7XxN06HdA.roa
File: AZq3Kiq8vV5rftBhwG7XxN06HdA.roa (raw, json)
Hash identifier: VT++U8DRwX39ClzUac2dzMvqw/ZyGdOLG9UH1rfVl0k=
Subject key identifier: 01:9A:B7:2A:2A:BC:BD:5E:6B:7E:D0:61:C0:6E:D7:C4:DD:3A:1D:D0
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 018CC425326D380E52F507836A580F993691
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/AZq3Kiq8vV5rftBhwG7XxN06HdA.roa
Signing time: Mon 01 Jan 2024 08:30:21 +0000
ROA not before: Mon 01 Jan 2024 08:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62313
IP address blocks: 185.141.200.0/22 maxlen: 24
185.188.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:32:6d:38:0e:52:f5:07:83:6a:58:0f:99:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: Jan 1 08:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=019ab72a2abcbd5e6b7ed061c06ed7c4dd3a1dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:b6:6d:56:0b:c8:82:d7:9a:e1:65:d2:99:
be:b1:18:20:38:4c:c5:4f:22:3d:82:ce:ae:13:56:
d7:43:cc:f0:a5:a6:2c:a2:a6:49:52:20:ed:63:df:
36:5b:73:b8:b7:94:74:00:92:09:4d:2a:a4:08:76:
da:af:9d:a6:84:43:ff:b9:f1:b0:aa:46:13:4c:40:
e6:3c:c6:0a:5d:04:a7:e6:be:20:78:6d:dc:8a:cd:
ac:b7:75:ff:07:dc:a8:45:4d:07:83:98:a0:25:b7:
d2:76:0f:0d:45:24:4c:39:8c:77:87:d7:95:5e:36:
a5:1b:76:eb:dc:19:56:ca:09:43:80:43:8c:59:03:
43:25:86:ed:1d:6c:83:73:39:c4:b1:e6:4e:6d:ca:
c5:e4:9a:33:c6:70:c7:54:57:db:3d:2a:02:10:99:
9d:4b:65:26:23:b7:e8:a5:e8:af:1b:ac:41:11:6e:
4f:21:a0:09:b9:cf:16:a6:18:5b:b5:55:85:2f:da:
32:a6:2f:42:94:bc:c3:78:f6:cb:a8:a6:8c:cb:15:
56:3b:a2:1d:d2:4e:5e:5b:0f:cc:a6:0d:2b:8c:99:
b3:58:e1:6d:aa:db:16:f5:c4:c3:86:5b:bd:76:84:
07:24:34:9f:6e:7f:35:ca:7b:3d:e2:1a:5b:9c:f3:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:B7:2A:2A:BC:BD:5E:6B:7E:D0:61:C0:6E:D7:C4:DD:3A:1D:D0
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/AZq3Kiq8vV5rftBhwG7XxN06HdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.200.0/22
185.188.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:c2:4a:c5:5b:b1:28:9e:c3:59:0f:a2:f7:6e:5e:40:ce:6d:
4b:40:f9:58:7b:d2:91:76:ea:15:58:de:7a:c4:2e:26:f1:64:
88:d4:22:74:f7:03:4d:05:ee:93:d1:23:c0:3a:bf:09:f3:39:
56:ad:83:b6:c9:65:69:31:cd:6d:db:c4:b7:b7:9f:88:57:64:
f0:38:b9:b5:25:9c:91:a1:e3:e0:03:e7:ff:b6:ad:6c:da:34:
4b:b5:1f:93:08:31:bc:8d:f8:d7:45:34:c3:84:e3:9c:00:b5:
72:cb:96:b2:11:0c:7e:c2:74:9e:aa:dd:43:05:cc:cd:20:bf:
00:76:bb:af:c7:95:0e:82:73:70:d7:f1:30:a3:a2:06:50:8f:
d0:5c:b5:be:04:cd:af:68:4b:42:6e:a5:9c:22:79:83:bd:12:
6c:f2:b4:13:ca:9b:3f:a5:22:e9:4d:17:2e:80:bf:aa:aa:52:
a8:07:95:12:64:ca:f6:26:54:50:b6:b7:20:c4:91:db:35:b6:
9e:ea:37:97:f1:b1:e0:5e:7b:92:87:f0:44:79:89:d8:15:51:
2c:1f:d0:c0:b4:18:51:4f:9e:55:c0:37:2e:1e:73:7f:88:7c:
07:a8:26:1d:57:b8:c7:23:23:c2:9d:50:7e:be:07:90:bf:b9:
6e:f8:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:52 2024 by rpki-client on console-fra.rpki-client.org