Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/RSv-v_S_o5zLuw861HoQpkgnSZE.roa
File: RSv-v_S_o5zLuw861HoQpkgnSZE.roa (raw, json)
Hash identifier: Ng81ilNWLsF1S0b0odmkRkU01HDs5SQ9ZigcMwoKFzA=
Subject key identifier: 45:2B:FE:BF:F4:BF:A3:9C:CB:BB:0F:3A:D4:7A:10:A6:48:27:49:91
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 018CC64AC317E7F629B2EA5D3D0C07699746
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/RSv-v_S_o5zLuw861HoQpkgnSZE.roa
Signing time: Mon 01 Jan 2024 18:30:37 +0000
ROA not before: Mon 01 Jan 2024 18:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199367
IP address blocks: 185.19.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c3:17:e7:f6:29:b2:ea:5d:3d:0c:07:69:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Jan 1 18:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452bfebff4bfa39ccbbb0f3ad47a10a648274991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:ae:80:4a:0c:1d:b2:01:c0:23:52:f2:47:
53:6c:87:c3:df:26:30:b8:92:93:a6:1a:9a:26:31:
4c:09:58:1b:dd:3c:ce:64:df:df:19:ec:00:f9:d9:
23:fd:18:77:dd:2c:ff:11:aa:b5:8b:6d:8f:6e:bb:
02:2c:f7:ed:e4:2d:07:0c:c4:54:e7:5f:84:3e:15:
d1:80:53:17:9f:b6:dd:a2:4e:9b:34:3d:55:66:74:
bb:66:b9:ac:3f:e9:f5:2e:b3:7d:07:72:dc:7a:94:
79:32:ad:cf:84:8f:6a:0f:2a:4e:fd:8a:bf:16:0a:
b2:cd:a5:49:73:60:2c:72:7b:89:a5:ca:86:d0:29:
44:e7:b5:e4:3d:56:a3:8e:ef:c2:24:4f:c9:62:20:
87:eb:fe:ba:79:96:dc:f7:a6:7f:92:2b:16:e0:d8:
ef:6a:07:65:39:8a:c8:1d:e0:16:3b:1d:e1:49:bd:
79:a9:24:cc:36:09:47:e2:f8:66:47:62:a3:b7:9d:
65:a2:bc:d9:20:ff:03:67:a7:c5:3c:e8:c0:87:27:
05:25:09:fd:62:f8:e1:7e:a6:e7:63:09:09:45:cd:
b2:4f:8f:2c:d1:7d:03:ed:3c:86:00:49:52:f6:20:
8a:c8:0e:32:a9:46:4d:41:6c:29:07:73:b6:f2:28:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:FE:BF:F4:BF:A3:9C:CB:BB:0F:3A:D4:7A:10:A6:48:27:49:91
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/RSv-v_S_o5zLuw861HoQpkgnSZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.144.0/22
Signature Algorithm: sha256WithRSAEncryption
99:15:5a:7e:6b:91:ab:51:e3:89:ab:43:85:2d:8f:9c:08:50:
aa:17:09:e4:40:33:da:29:ef:4f:fe:92:95:6e:b7:4d:5c:03:
f7:3b:a0:8c:93:9c:3e:60:29:3e:e5:8b:59:11:c4:be:f5:69:
da:8b:82:ff:6d:6f:e4:38:fd:29:35:77:32:a1:f5:c1:f7:5e:
0f:f4:1a:ff:e8:a0:e3:52:8f:a5:96:bb:d4:0a:2a:ba:cc:60:
ff:d0:8c:56:3e:ce:c2:96:a8:d1:13:87:95:c8:01:52:56:48:
1e:ac:19:17:97:8a:71:64:6f:82:bc:b1:ce:c3:45:a5:90:22:
98:fd:3a:7f:4c:1d:e3:90:92:32:6c:19:99:7d:d9:24:fc:66:
50:73:f6:f6:b2:3d:c0:aa:58:d7:75:b9:3e:ee:36:83:bd:d6:
8c:78:f3:23:97:55:c4:50:fe:af:de:a0:08:a7:16:28:4c:75:
a1:10:fb:8f:48:2d:3a:c9:db:00:54:55:c7:9d:10:1d:d4:97:
8d:5d:0e:32:af:5c:ed:ee:5a:4e:70:2a:6d:31:57:a1:82:ff:
de:ff:50:70:3e:60:65:95:17:f6:bc:f1:2a:c8:b4:83:c7:ef:
56:c3:4b:50:7e:7f:19:5c:9d:d3:ca:9d:11:10:93:77:df:39:
6c:2b:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:55:53 2024 by rpki-client on console-fra.rpki-client.org