Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/i3JKMNN6xLsXEaOQIaWIysGBsmE.roa
File: i3JKMNN6xLsXEaOQIaWIysGBsmE.roa (raw, json)
Hash identifier: BFgT0LciCWcC73TrV5Z2parsp40FNbI80nBaU1aW9nA=
Subject key identifier: 8B:72:4A:30:D3:7A:C4:BB:17:11:A3:90:21:A5:88:CA:C1:81:B2:61
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 018D11A6CD99F171F6E21ADA73E2A98413F7
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/i3JKMNN6xLsXEaOQIaWIysGBsmE.roa
Signing time: Tue 16 Jan 2024 09:42:40 +0000
ROA not before: Tue 16 Jan 2024 09:42:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.120.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:a6:cd:99:f1:71:f6:e2:1a:da:73:e2:a9:84:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jan 16 09:42:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b724a30d37ac4bb1711a39021a588cac181b261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:56:90:86:58:d2:28:93:94:c4:98:80:f3:
a3:a9:bc:dd:19:82:d8:3b:46:36:b5:27:75:5b:f1:
c6:42:76:23:da:71:68:13:1f:cc:b1:8d:0c:51:5e:
f0:26:68:70:d8:7a:16:ad:5b:09:7d:a3:8f:80:ac:
89:e3:99:db:02:a8:c1:09:e0:f0:cf:73:cc:b2:b5:
0c:bf:57:53:cd:2e:e3:1c:c4:db:04:89:41:07:38:
02:bb:8d:14:4b:e3:5c:5a:3e:c9:31:34:9f:95:e2:
20:43:95:65:7f:7a:f0:cb:c6:7a:3e:e9:0f:33:78:
9e:9a:14:8a:6f:1a:c5:e8:27:ce:4b:db:52:60:8e:
ec:ff:66:cf:ed:3b:cd:ba:f1:48:0c:ba:7d:4e:66:
5e:fe:81:b1:ce:d3:b7:65:f5:e1:c0:1a:55:9c:1c:
8c:70:18:27:d0:d1:38:27:d3:5a:d1:b7:c0:e9:f1:
34:53:fe:6a:98:d3:ac:5e:f4:5d:47:55:6f:a7:2f:
fe:94:15:53:44:3b:c3:3b:d9:e9:c2:e0:4f:ab:4b:
2f:06:cb:38:d6:90:46:6b:a3:6b:a1:5a:f4:3b:7c:
48:29:ef:d0:60:f9:75:50:0a:2b:35:cd:6c:2d:5f:
08:19:84:02:f1:9d:87:a6:df:61:1f:6f:f6:12:b0:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:4A:30:D3:7A:C4:BB:17:11:A3:90:21:A5:88:CA:C1:81:B2:61
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/i3JKMNN6xLsXEaOQIaWIysGBsmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:6a:9f:dc:f6:25:6e:e3:3f:6e:83:ae:3c:28:87:70:fe:1b:
40:80:0f:e9:86:9d:fa:89:f7:cb:c7:a6:3f:a5:8d:05:8e:93:
c7:63:ed:86:02:e6:04:d3:df:b4:d6:7b:1e:d2:e0:cf:79:ed:
a2:b6:69:2c:15:47:c7:a5:94:d7:d7:ae:70:0f:32:0f:2f:43:
d3:29:62:e7:5a:34:7c:39:98:65:bb:24:3c:a2:e3:c1:dc:99:
2f:ab:3d:cd:98:6a:9a:f9:52:6f:36:f1:7a:0a:9d:8d:68:54:
64:4a:bb:2c:f8:39:7a:a5:00:da:11:1a:e2:2c:e0:85:22:94:
df:42:61:bd:2b:d8:88:79:ff:f8:43:66:ff:a9:c2:17:03:1f:
46:5d:a2:66:d5:15:c1:23:93:02:0b:97:e4:af:41:2d:ca:36:
f1:07:46:7b:c4:30:d2:3d:26:4e:d6:f2:a6:e7:af:8f:92:c0:
af:cd:e0:b1:56:aa:d6:df:cd:0c:7e:3b:ee:eb:63:84:e5:3f:
be:68:96:9f:ed:18:21:0f:2a:82:6e:4b:e9:c5:50:80:b3:7e:
eb:d9:8e:31:28:93:9f:03:37:01:11:30:ba:91:09:60:45:e3:
ee:2a:bf:f7:92:9c:a0:56:a8:71:63:c2:64:4d:51:23:29:79:
5f:be:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:32:17 2024 by rpki-client on console-ams.rpki-client.org