Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/iQNUCKevLmFSnIQ14kaXvAbM9Ok.roa
File: iQNUCKevLmFSnIQ14kaXvAbM9Ok.roa (raw, json)
Hash identifier: /uZqYZQMfVJ3A9U6rDqz+JwTLZgTjf2LX0X5CiC7rHE=
Subject key identifier: 89:03:54:08:A7:AF:2E:61:52:9C:84:35:E2:46:97:BC:06:CC:F4:E9
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 018CC5DCD8D9DEE29A3CF9918472233FBE33
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/iQNUCKevLmFSnIQ14kaXvAbM9Ok.roa
Signing time: Mon 01 Jan 2024 16:30:34 +0000
ROA not before: Mon 01 Jan 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208035
IP address blocks: 185.35.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d8:d9:de:e2:9a:3c:f9:91:84:72:23:3f:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Jan 1 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89035408a7af2e61529c8435e24697bc06ccf4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:93:e6:c6:69:90:1e:bf:b8:87:ee:e5:f7:
c3:22:e7:77:0a:de:5b:bf:39:9c:89:a9:a3:65:e7:
49:21:73:d2:6b:65:62:be:b7:38:dc:8d:12:7d:09:
72:e7:cc:6a:01:d8:c4:85:11:44:cb:eb:d2:e0:c5:
4a:5e:43:85:81:e3:93:13:16:82:fc:f6:09:e9:cc:
3a:51:19:60:f1:ea:35:9e:f3:a5:2d:81:73:b0:84:
f0:d8:5c:2f:eb:74:3c:7d:d4:42:4b:be:b0:21:de:
f8:10:15:db:f2:8d:17:5f:77:14:61:4b:cb:8a:f0:
36:b2:72:7d:7d:24:1f:d5:12:1f:21:d9:97:5e:e5:
ca:60:20:02:51:08:10:39:6e:62:59:c1:96:98:69:
76:7d:59:7d:54:32:55:43:0f:81:4c:c6:ba:18:73:
12:6a:4c:f2:3f:ef:56:04:e8:26:f4:af:a1:9f:20:
a6:53:d7:b9:05:a7:75:1d:66:90:f7:93:bd:78:7a:
33:2f:10:5a:fb:b8:8d:c7:f7:d2:26:b1:85:b8:f1:
1b:03:2b:55:ea:b9:ff:8b:08:0d:da:55:d8:d0:c1:
4e:76:8f:cc:6b:a4:ef:38:d4:a5:9f:e3:4f:bb:e2:
f6:59:37:cc:06:ba:37:36:5f:0f:0f:85:35:03:b0:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:54:08:A7:AF:2E:61:52:9C:84:35:E2:46:97:BC:06:CC:F4:E9
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/iQNUCKevLmFSnIQ14kaXvAbM9Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
54:76:cf:e1:08:08:87:97:f8:0a:23:53:a7:45:5c:cb:74:69:
e5:7e:12:96:bd:c0:df:4f:55:2b:29:b1:b4:25:09:34:d3:9b:
31:81:f8:17:65:13:6a:e6:6f:53:6e:15:58:ab:41:af:d7:b2:
89:8d:70:27:7d:0c:5f:46:a9:5e:88:c0:46:05:04:c9:85:1b:
29:23:33:86:cb:ad:eb:2e:9d:67:a3:be:88:85:55:74:d0:06:
20:1e:3b:d0:ae:45:2c:21:e8:c3:50:58:b4:ba:c0:94:9a:b2:
d1:91:3a:7e:6b:3c:26:9f:24:77:0f:eb:98:2b:fb:63:c5:ab:
17:17:ba:11:7c:53:ca:90:c4:60:8e:4b:12:94:fe:72:a2:02:
90:a5:2d:87:90:5b:fa:d0:c7:0b:6f:92:57:e5:73:13:13:36:
4e:1a:15:57:b8:73:2e:9f:8b:c0:85:a9:6d:63:30:f8:dd:d5:
6f:d6:e3:a2:cb:ee:39:f0:7d:e4:0a:ab:66:b7:ba:bd:0c:b8:
47:5a:a1:f4:74:e8:8c:87:f4:16:ef:9b:90:6a:4f:d3:13:ba:
e9:19:68:3f:d3:fb:bd:5d:37:21:81:c7:a7:4c:96:da:a8:de:
b2:41:de:0d:71:21:d6:b3:86:e8:0a:0c:2d:f8:d9:ab:ed:b5:
7f:4a:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:07:53 2024 by rpki-client on console-ams.rpki-client.org