Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/IU4EzrLKB30VoGhQoQ8Ky1kPfQU.roa
File: IU4EzrLKB30VoGhQoQ8Ky1kPfQU.roa (raw, json)
Hash identifier: HFcSWqhC2cdnrNbTWfOdpE6Xv/1iP3Wv22EFG8YPuU0=
Subject key identifier: 21:4E:04:CE:B2:CA:07:7D:15:A0:68:50:A1:0F:0A:CB:59:0F:7D:05
Certificate issuer: /CN=546f05d9be28991c3e619a33149580e50cc86cc9
Certificate serial: 018CC500F70AC9E123A423DCFA251B1B5866
Authority key identifier: 54:6F:05:D9:BE:28:99:1C:3E:61:9A:33:14:95:80:E5:0C:C8:6C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG8F2b4omRw-YZozFJWA5QzIbMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/IU4EzrLKB30VoGhQoQ8Ky1kPfQU.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62356
IP address blocks: 185.39.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/VG8F2b4omRw-YZozFJWA5QzIbMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/VG8F2b4omRw-YZozFJWA5QzIbMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG8F2b4omRw-YZozFJWA5QzIbMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f7:0a:c9:e1:23:a4:23:dc:fa:25:1b:1b:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546f05d9be28991c3e619a33149580e50cc86cc9
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=214e04ceb2ca077d15a06850a10f0acb590f7d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:4a:98:3a:bf:85:d9:01:80:fa:e5:da:ef:
ad:01:0b:9b:4c:9f:1e:d3:c0:a5:05:45:42:6f:55:
44:0f:93:1a:ea:ae:02:0e:3a:8f:dd:ea:64:8e:61:
4a:8c:c4:73:7e:fd:ed:19:b5:14:b6:73:86:a9:bb:
f0:1c:39:16:eb:cb:92:11:a6:cc:a8:3e:17:ec:da:
00:db:37:7e:6b:c2:4c:51:05:ec:54:90:7e:61:43:
81:a6:76:9b:c6:98:94:c3:96:11:d5:af:f2:74:d5:
35:2d:01:c2:c6:e0:7c:3d:1c:31:46:93:99:53:3a:
9e:5e:57:d0:d8:19:51:ec:ab:6d:4f:58:a5:c5:52:
94:39:6d:d7:b2:5d:09:30:ab:08:0a:1e:ab:d8:94:
52:af:a7:13:55:b1:ea:a3:42:18:26:63:9d:94:11:
b4:51:30:83:73:24:40:4d:ac:38:da:c5:93:d5:ea:
ad:d9:67:a8:b5:75:bb:3b:85:76:78:cf:80:cb:17:
20:fa:b6:96:31:57:38:cf:fa:82:cf:78:e9:38:ab:
5d:fb:88:cd:ac:03:af:bb:22:fa:21:fa:56:05:d3:
d7:83:77:78:62:e2:c3:9a:19:ea:e8:92:a0:d9:23:
8a:cb:2f:8a:4a:84:f4:a3:3c:38:ca:6a:8c:da:93:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:04:CE:B2:CA:07:7D:15:A0:68:50:A1:0F:0A:CB:59:0F:7D:05
X509v3 Authority Key Identifier:
keyid:54:6F:05:D9:BE:28:99:1C:3E:61:9A:33:14:95:80:E5:0C:C8:6C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG8F2b4omRw-YZozFJWA5QzIbMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/IU4EzrLKB30VoGhQoQ8Ky1kPfQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8a0dc4-e402-4118-93a2-a3d8257803e5/1/VG8F2b4omRw-YZozFJWA5QzIbMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.4.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1c:54:85:31:8e:d7:c4:d5:3d:65:fa:92:06:a1:5d:f8:a0:
00:07:44:86:4c:37:3c:48:08:f4:15:e9:54:24:6f:a9:14:b8:
20:f4:ab:e7:c3:56:49:7b:d7:65:18:47:7c:88:90:72:9f:48:
0e:cd:a1:f4:19:4d:af:be:00:63:03:d2:4f:7f:73:04:b0:a0:
45:aa:2e:66:49:28:5b:d7:82:ab:1a:2c:7a:7f:5d:12:29:f1:
bc:51:2f:70:22:ca:60:cf:eb:5c:f1:2b:7d:e2:59:3b:92:62:
ef:af:40:45:a4:dc:3c:ea:84:20:91:20:af:1b:80:90:3a:64:
86:76:ff:fa:25:82:70:f4:d2:6c:89:7e:66:32:43:79:5a:d1:
a4:56:c3:1f:46:1f:cf:97:75:8d:2b:ce:aa:f3:57:11:19:77:
0b:92:bb:1b:a6:2c:9c:c8:85:6e:08:dc:75:50:60:26:0e:ed:
bd:0d:65:5c:bb:22:af:1f:e2:ec:b7:ec:82:38:e0:00:cf:70:
de:16:c3:01:33:83:c0:05:39:9d:8a:d1:fb:49:a1:53:45:18:
8c:a7:02:f4:b7:4d:30:50:e5:8f:ca:3c:4e:c4:be:0f:4f:7a:
e6:6f:14:05:7c:db:52:4f:14:57:82:8c:82:46:16:57:88:c0:
2f:52:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:04:15 2024 by rpki-client on console-fra.rpki-client.org