Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/h7cyKYfKECsIXGbnMqRJOhgVdEA.roa
File: h7cyKYfKECsIXGbnMqRJOhgVdEA.roa (raw, json)
Hash identifier: gZxvdiwKvx4MGlDyuTctCKSYRKfgsKR0fcmwBR+uBdY=
Subject key identifier: 87:B7:32:29:87:CA:10:2B:08:5C:66:E7:32:A4:49:3A:18:15:74:40
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 018CC4938FCD52370359DB5EFAEE623D5BE1
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/h7cyKYfKECsIXGbnMqRJOhgVdEA.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8245
IP address blocks: 194.48.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8f:cd:52:37:03:59:db:5e:fa:ee:62:3d:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b7322987ca102b085c66e732a4493a18157440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:7c:e1:f0:d8:c8:4e:d9:0d:51:2b:ba:68:
3a:f2:0c:0b:08:a2:95:ef:d3:b0:e4:10:de:77:a9:
4d:43:82:e9:58:f3:ab:97:c5:29:15:d2:cd:28:17:
15:1e:46:e7:47:48:0a:a3:61:94:92:09:3e:75:91:
c3:6c:00:35:4b:07:55:87:f7:e7:eb:35:25:5c:6f:
80:bf:4d:ae:47:90:7a:8c:31:85:0b:10:c8:19:6b:
eb:9f:17:8e:a8:d3:88:a6:c2:f6:be:b3:fa:83:f7:
cc:da:5a:fe:30:75:0c:cd:99:5a:34:c4:66:65:c4:
62:ff:3d:2d:c0:3c:37:c9:2b:df:e6:71:64:a2:b6:
ad:35:fc:e1:c6:8f:76:06:40:ec:73:dd:5a:35:7d:
2a:05:90:c2:8f:74:65:9d:45:ca:07:97:82:ce:58:
38:31:bd:08:86:a1:3c:e9:f1:51:73:2e:3a:32:ba:
cb:f2:46:48:a3:73:6c:d9:72:fc:94:a7:5d:d0:2e:
2f:aa:f1:82:b0:f7:56:9e:0a:7d:fa:d9:b8:c3:e8:
c2:e0:a2:dd:0a:91:28:b2:92:c1:17:db:fe:41:86:
2e:fb:24:39:d3:1d:a0:14:e2:d0:fc:5d:57:7c:50:
52:7f:c1:63:68:a2:34:e5:a0:81:82:21:03:fc:90:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:32:29:87:CA:10:2B:08:5C:66:E7:32:A4:49:3A:18:15:74:40
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/h7cyKYfKECsIXGbnMqRJOhgVdEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:f2:df:1b:1f:5d:b1:40:75:13:93:f8:f6:1a:d4:53:b1:b4:
4e:a9:d6:cc:0a:0b:e2:d5:f5:d7:63:94:6b:19:bc:cd:6d:ca:
4c:20:01:30:a4:50:34:af:7d:78:b3:02:2d:19:40:18:86:d4:
79:eb:71:1b:3b:11:40:80:10:88:75:8a:56:89:a4:90:71:1b:
50:f2:00:ab:e3:d9:14:71:b6:20:fc:f6:da:39:22:db:5f:28:
d9:d9:b3:d9:68:51:80:8e:d8:b4:68:a1:bd:ef:e5:ba:7f:47:
a1:1f:e7:e1:09:8d:25:44:93:57:6c:ec:a4:95:0f:fc:ee:c1:
ec:e0:57:84:ed:c8:37:6d:9c:10:86:1c:04:9f:7c:2d:41:d9:
0d:f0:b5:f5:04:1f:8d:18:ac:85:53:4a:7b:24:2d:7d:80:36:
ed:db:c1:92:14:8f:18:7d:8d:d7:00:8a:39:bb:71:04:86:1c:
5f:57:f5:c7:8d:4f:58:8f:73:5b:ef:9a:40:13:ea:ee:cb:0e:
ba:a2:4d:cd:f1:20:65:2a:48:f3:60:b3:b8:d6:8c:a8:1f:f2:
ac:8f:f2:38:02:71:f7:59:6a:33:b3:5d:67:5d:45:bc:d5:d3:
8e:13:43:1b:c9:90:8a:ac:34:ec:aa:82:7b:da:bd:34:53:89:
7e:12:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:03:26 2024 by rpki-client on console-ams.rpki-client.org