Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/DR6pbK0LP3GZMQHggpj64_3YZF4.roa
File: DR6pbK0LP3GZMQHggpj64_3YZF4.roa (raw, json)
Hash identifier: I9mZRfUPqd24c83XJ6xnU7jKluT/6/mYiLbm4+dJHD0=
Subject key identifier: 0D:1E:A9:6C:AD:0B:3F:71:99:31:01:E0:82:98:FA:E3:FD:D8:64:5E
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 018CC64AE8191AB4C4F832C524992F1886CA
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/DR6pbK0LP3GZMQHggpj64_3YZF4.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30821
IP address blocks: 185.134.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e8:19:1a:b4:c4:f8:32:c5:24:99:2f:18:86:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1ea96cad0b3f71993101e08298fae3fdd8645e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:37:85:33:a8:f0:fc:54:1a:2c:8a:77:a4:
12:34:0d:9e:62:c1:75:dc:88:3d:28:59:b2:0a:f6:
ac:05:5d:6c:4d:0b:63:f9:4b:04:de:9c:a1:1d:36:
70:cb:22:62:2f:82:bf:0e:4b:2d:cf:46:32:87:87:
f5:26:c1:0e:87:b2:9a:83:ff:09:5e:a9:4f:fb:8b:
50:56:d6:06:5e:63:af:5b:ca:26:7c:68:71:1b:20:
ea:11:22:e8:26:44:55:82:70:1b:9a:a0:d1:8a:04:
56:67:7e:91:7c:a3:2d:02:86:9f:10:38:0e:64:c9:
ce:45:cb:ee:86:92:b2:6d:d5:ff:f6:8b:48:c6:9c:
35:1e:9d:7d:e7:78:14:2e:7e:af:39:98:d6:d9:26:
a2:61:58:98:c9:f3:8f:bf:82:93:dc:54:c7:12:08:
a4:d8:5c:e7:0a:7d:c0:ae:b5:69:8f:9b:22:9e:ef:
9c:f6:b1:17:fc:b1:fd:62:f7:2d:0e:e0:06:0b:4e:
80:1f:34:6d:d0:ee:c7:34:bd:b4:33:92:0e:63:fb:
95:99:b9:7a:a0:3a:9d:cb:38:90:e7:d1:5b:e9:65:
3d:6b:d4:53:1f:29:73:de:b0:e6:cf:64:5a:04:a0:
fa:98:5f:bb:05:1a:e3:55:aa:a9:14:dc:86:e4:d5:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:A9:6C:AD:0B:3F:71:99:31:01:E0:82:98:FA:E3:FD:D8:64:5E
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/DR6pbK0LP3GZMQHggpj64_3YZF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.16.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c3:62:b2:b6:dd:ec:30:28:38:6e:c1:33:43:ae:9c:e7:95:
f8:2d:50:35:da:dd:1e:d7:d0:7b:75:ac:92:85:83:e8:9d:3b:
8c:43:19:ae:2c:09:d0:6b:c1:43:e6:63:67:68:6d:12:5e:69:
8f:c7:bb:2a:03:95:88:a1:ee:b3:38:15:2c:09:0a:55:02:9e:
90:95:af:2e:39:62:f5:ca:8e:42:ab:c7:2f:99:8f:46:bc:a5:
4e:7c:d1:41:35:2f:1a:f8:61:d3:76:bb:f8:8c:20:9b:dd:6e:
8a:76:f3:39:93:61:81:9d:90:d1:fa:5f:f0:bb:71:5e:25:e9:
c5:db:eb:3e:db:7f:6a:46:aa:87:34:d8:35:c3:b7:2d:91:e9:
10:8f:21:80:4b:cf:de:dc:a9:67:2b:ff:c4:e5:02:48:77:44:
05:7b:16:8d:b5:a1:2e:c4:54:24:a4:c3:ce:12:b1:4c:4f:34:
e8:fd:99:b2:05:64:62:ea:f1:a6:58:ad:07:7f:64:57:47:55:
e8:b5:d7:fa:62:2f:1e:3e:5c:ea:60:36:0e:13:b2:e1:33:ee:
59:b6:e8:20:4c:7d:3f:0b:9f:04:15:17:cf:a5:45:94:60:59:
ab:30:7f:d5:d6:9d:ec:7d:a8:da:85:60:6c:31:02:bc:e1:d9:
1e:4b:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:07:41 2024 by rpki-client on console-ams.rpki-client.org