Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/1EquoB6rMY8JBmAF1YdprXEN9lk.roa
File: 1EquoB6rMY8JBmAF1YdprXEN9lk.roa (raw, json)
Hash identifier: li4e32XJ76Oe4M+dk9IoieU+wlh0hpqeXl6du0L38GQ=
Subject key identifier: D4:4A:AE:A0:1E:AB:31:8F:09:06:60:05:D5:87:69:AD:71:0D:F6:59
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 018D54A906294EB13EA79804CC7645211777
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/1EquoB6rMY8JBmAF1YdprXEN9lk.roa
Signing time: Mon 29 Jan 2024 09:59:39 +0000
ROA not before: Mon 29 Jan 2024 09:59:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199362
IP address blocks: 185.17.20.0/22 maxlen: 22
185.144.120.0/22 maxlen: 22
2a03:e640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:a9:06:29:4e:b1:3e:a7:98:04:cc:76:45:21:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Jan 29 09:59:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d44aaea01eab318f09066005d58769ad710df659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:55:44:86:6e:c4:fa:5e:63:af:8d:34:49:
6b:96:76:e1:07:57:f9:33:06:7f:1d:81:92:aa:06:
98:42:1f:67:20:4f:09:63:36:1d:31:a3:f8:9d:e8:
f8:56:f8:fd:af:71:d2:e1:05:72:41:6d:17:22:1a:
da:ad:75:73:c7:ea:85:87:02:b6:de:42:0e:af:53:
28:c7:8d:1f:f8:94:9a:d1:ab:22:0b:f6:a8:1e:b3:
bb:0c:3d:d8:a3:5c:cb:3c:fa:d6:f8:a4:2e:53:71:
42:33:0b:33:83:71:f5:2b:e1:40:e4:1b:0b:e4:ca:
9c:95:73:37:46:32:15:6a:1c:45:f8:de:60:06:1e:
a8:37:f9:45:63:8f:13:b3:e4:5a:37:61:fc:b6:2a:
8d:5d:bc:db:6d:ab:69:5e:08:da:70:36:78:19:85:
98:44:1f:40:38:fc:40:c5:2e:4f:a0:e7:af:ea:e0:
52:49:c7:6b:fe:d3:e6:37:a0:ad:a8:f2:a8:bc:a4:
78:5a:e6:12:d1:82:67:3b:6b:87:73:1c:73:2c:32:
99:10:0c:9d:1d:a4:44:d6:4c:d7:23:eb:7a:8f:92:
8e:6e:af:d5:e8:91:23:d4:04:e4:58:e1:68:34:ca:
93:aa:bf:bc:a9:bd:c0:d5:b2:3d:9c:a9:c3:e9:47:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:AE:A0:1E:AB:31:8F:09:06:60:05:D5:87:69:AD:71:0D:F6:59
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/1EquoB6rMY8JBmAF1YdprXEN9lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.20.0/22
185.144.120.0/22
IPv6:
2a03:e640::/32
Signature Algorithm: sha256WithRSAEncryption
53:66:9f:33:95:2a:89:93:4a:e5:27:a2:af:36:ce:4b:25:1e:
f8:a0:c8:c5:8b:05:81:e9:b6:84:44:d1:25:c3:f8:a0:53:4b:
25:41:d5:02:61:fa:25:a3:08:0a:87:4f:c9:18:49:f5:eb:ad:
9e:13:55:f9:b5:a0:70:9f:e4:7a:4b:9c:ed:66:c3:89:aa:cf:
51:dc:2a:d8:10:0e:ad:63:9b:07:ab:5a:29:5a:0c:30:11:26:
e5:23:17:64:b3:36:c1:69:5b:58:a6:1e:a6:e8:66:3b:e4:83:
22:17:69:0e:9e:e6:01:0f:9d:07:43:78:cc:e2:73:0b:26:f0:
8e:65:ea:76:f0:0b:b8:81:fc:85:a6:36:86:42:7f:cd:f2:f0:
26:77:77:62:fa:ae:6b:4e:19:a7:e6:3f:67:16:e5:0d:59:5f:
25:4a:c6:ac:e1:72:09:69:1b:00:6f:43:ea:8f:ed:df:20:a2:
90:21:8d:e0:e3:69:88:7f:3e:dd:ce:f0:11:89:55:28:40:66:
c8:61:1b:9a:4c:21:ff:67:0a:aa:f3:6a:1e:04:7c:c3:77:ee:
f2:b4:76:60:81:4a:7a:62:b8:94:a3:92:a7:e6:ca:46:4e:a5:
d1:a2:5d:6c:c7:1a:57:78:1b:06:aa:d7:ff:d0:7e:a5:28:b7:
3f:21:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:33 2024 by rpki-client on console-ams.rpki-client.org