Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/iFTApYhLuZg0H8qQrQQVlWHzi6c.roa
File: iFTApYhLuZg0H8qQrQQVlWHzi6c.roa (raw, json)
Hash identifier: 0Y+w/NzdNAwAATAZjMEk3vJZobIbHa+TJV8fUoi8C1c=
Subject key identifier: 88:54:C0:A5:88:4B:B9:98:34:1F:CA:90:AD:04:15:95:61:F3:8B:A7
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 018CCA2B357966345EE665F263C2C109B9B4
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/iFTApYhLuZg0H8qQrQQVlWHzi6c.roa
Signing time: Tue 02 Jan 2024 12:34:38 +0000
ROA not before: Tue 02 Jan 2024 12:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39224
IP address blocks: 185.253.252.0/22 maxlen: 22
2a05:fec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:35:79:66:34:5e:e6:65:f2:63:c2:c1:09:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Jan 2 12:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8854c0a5884bb998341fca90ad04159561f38ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:35:85:c5:32:9f:26:51:c6:bc:74:1c:91:
d9:7a:eb:89:06:e4:44:ba:32:c8:71:b5:49:9b:96:
2a:ba:ec:67:c3:15:f7:4d:f5:f1:86:51:ae:b1:96:
f1:99:49:2f:6d:f9:fe:6d:89:04:97:59:97:71:65:
b5:52:44:0e:e4:30:ff:34:da:7f:2d:12:33:e4:60:
17:55:ce:2f:df:4f:c5:2d:c3:e7:a7:3c:e9:40:9b:
13:be:f3:d6:4c:16:c8:89:55:f5:93:a9:06:6c:67:
61:9f:c6:4f:bf:a7:5f:9d:a9:24:e8:2c:3c:74:46:
c1:d4:3c:93:bc:5b:05:84:a0:69:38:31:6c:2c:9c:
a8:e4:05:81:e5:fc:e6:24:3f:6a:15:6f:74:77:37:
f1:18:24:05:58:50:22:78:75:77:0d:a9:8d:ce:53:
de:d3:61:8e:63:60:6d:f9:7f:43:2a:bc:ad:fe:49:
f9:36:12:44:ae:5a:12:fd:19:a1:c2:fc:8d:b2:b4:
67:4f:b2:a6:3e:e2:1e:25:6c:9b:18:dd:95:7e:a8:
0c:ac:14:4d:c8:da:16:46:8f:32:e9:4a:c6:83:31:
c0:45:85:c0:20:0d:19:e0:02:c3:d7:8d:2c:d8:a0:
b1:7d:cf:b8:4c:c4:c0:70:d1:74:b0:2a:6e:95:54:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:C0:A5:88:4B:B9:98:34:1F:CA:90:AD:04:15:95:61:F3:8B:A7
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/iFTApYhLuZg0H8qQrQQVlWHzi6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.252.0/22
IPv6:
2a05:fec0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:a5:db:2a:3a:da:39:de:db:df:7d:c0:c5:76:6b:45:50:37:
f1:72:1c:f1:cf:5f:14:d5:de:58:59:4e:43:a2:12:4e:48:f4:
73:ba:9d:98:81:f3:cb:e8:c6:49:2d:7d:55:69:8c:af:58:11:
51:67:81:ae:39:40:2b:d3:ed:df:62:79:a4:d9:33:a8:ac:ee:
3a:a4:0d:13:54:8b:46:27:6d:ef:f9:a4:e4:7b:91:2d:23:87:
4d:90:37:49:28:12:88:10:7a:2e:95:d4:f9:0b:23:c4:3d:84:
1e:82:b0:d8:8f:95:c6:64:fc:10:42:07:51:c5:15:6b:78:39:
a4:c5:b5:09:ed:80:62:ad:c9:e6:69:7a:df:05:13:80:86:23:
bb:ff:4a:4c:48:0b:73:fb:45:0f:5f:1b:2b:c4:73:1e:56:35:
13:8f:ad:18:4c:65:28:98:c8:7b:6f:12:ee:ec:76:0b:84:27:
5d:4c:45:ab:b4:33:d3:7c:87:8f:71:b0:17:6a:82:bb:2e:aa:
52:d2:3f:b2:93:13:e7:dc:79:df:09:97:75:dc:35:64:99:c3:
6a:14:1d:91:e4:85:ed:49:a9:c6:bf:e9:55:c6:3d:47:da:93:
ac:ef:81:4d:1c:66:90:f9:5f:60:ff:18:97:08:f4:f1:15:d3:
9b:ba:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:04:16 2024 by rpki-client on console-fra.rpki-client.org