Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/cZOHtkVhBVNCNcOZW0gn2PcacPE.roa
File: cZOHtkVhBVNCNcOZW0gn2PcacPE.roa (raw, json)
Hash identifier: aYzyffGxSO7xzoq21OHenDEUmWhAVw1CKaAj84parkg=
Subject key identifier: 71:93:87:B6:45:61:05:53:42:35:C3:99:5B:48:27:D8:F7:1A:70:F1
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 018CC80197C7F1D1482D3B704F2822DC0370
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/cZOHtkVhBVNCNcOZW0gn2PcacPE.roa
Signing time: Tue 02 Jan 2024 02:29:56 +0000
ROA not before: Tue 02 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62176
IP address blocks: 185.38.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:97:c7:f1:d1:48:2d:3b:70:4f:28:22:dc:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719387b6456105534235c3995b4827d8f71a70f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:4a:11:ab:4c:72:80:ff:13:ef:eb:34:91:
55:58:02:69:d2:31:ef:61:18:9f:a2:f9:d6:5c:e8:
19:f9:58:4f:21:e8:ed:1b:d0:d9:e6:6b:fe:da:45:
d8:52:e7:6c:22:a7:85:f2:af:5f:c7:88:93:1f:8c:
00:d5:c5:d4:9e:6d:63:05:bc:2b:2c:5a:cd:e6:5f:
c0:53:63:44:eb:45:66:55:57:f5:cd:63:36:c1:a0:
93:20:c1:fe:37:20:7d:c8:b3:c3:d4:ad:20:87:91:
bd:71:da:5a:8d:dc:8b:b1:4c:86:36:51:d0:bd:9b:
7d:63:75:d6:57:63:52:11:32:6f:5e:4f:df:10:3c:
41:4e:36:23:9e:7d:f6:78:aa:32:dd:ae:ea:aa:ae:
d2:2f:53:0f:10:cb:a2:a1:b2:10:c2:36:89:59:53:
57:a6:a5:dd:1b:73:a2:01:ee:5e:9d:2a:43:6f:00:
dc:ec:f6:f1:f9:3b:cd:2d:8b:85:31:09:ba:1c:59:
82:68:d3:cc:61:97:ca:10:33:72:87:b5:1b:58:5c:
3b:93:0b:c7:b5:9f:c6:89:03:11:01:1a:85:b9:0b:
4c:ee:e6:0b:a9:a0:99:4f:c3:7b:05:b8:87:5a:0f:
4f:19:29:fe:aa:10:77:bf:8a:86:ed:2d:22:f0:6f:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:87:B6:45:61:05:53:42:35:C3:99:5B:48:27:D8:F7:1A:70:F1
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/cZOHtkVhBVNCNcOZW0gn2PcacPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3b:cd:43:cf:0e:91:fd:f1:a8:43:80:da:b9:bb:ec:35:53:
b8:0e:1b:6a:70:26:80:af:da:61:82:62:35:90:46:e0:e8:c6:
ba:a2:fc:d8:38:30:4c:53:95:88:c1:0f:d2:3a:e7:96:58:32:
5a:26:55:ac:46:91:29:a7:dc:5b:11:42:da:70:ed:8d:39:e2:
5d:75:fd:42:c1:91:37:27:1b:d0:81:e2:31:03:e7:db:b3:ed:
ed:1f:0e:15:a8:4f:7a:f1:bb:a9:c7:27:4f:72:b7:48:4a:61:
9e:72:7e:0a:fb:8b:2b:a8:ee:83:5b:13:84:96:36:a6:3a:54:
9d:9a:0c:28:15:a9:11:63:e0:13:17:f4:55:8c:0e:04:bd:16:
95:95:ae:cb:92:dc:43:97:b1:fd:a1:73:a3:7f:f3:18:4c:48:
a9:79:0b:5f:96:a7:ab:f2:a6:e3:bf:43:92:51:f6:d3:8b:7a:
ae:ed:8a:ba:c8:9f:05:df:b7:bd:c3:f1:4b:96:db:85:c0:85:
af:44:19:95:d6:ef:28:8b:8c:5a:d6:4e:9d:10:01:5d:8d:72:
70:17:3c:0c:e8:cb:c2:95:ea:17:6b:a5:28:9c:43:cf:2d:b2:
82:7c:a7:9a:0c:04:a0:27:f4:ea:fa:9e:c9:b1:be:87:70:17:
e3:d3:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:27 2024 by rpki-client on console-ams.rpki-client.org