Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kFSRtmMOtwDfwBC5J8D08nFS8zM.roa
File: kFSRtmMOtwDfwBC5J8D08nFS8zM.roa (raw, json)
Hash identifier: hLpuqDzezNkfZRXiou8HpcUCYeNcwBMGTZWK8AbjUhk=
Subject key identifier: 90:54:91:B6:63:0E:B7:00:DF:C0:10:B9:27:C0:F4:F2:71:52:F3:33
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 018CC4939AA72BB810234229C6DCC2509020
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kFSRtmMOtwDfwBC5J8D08nFS8zM.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 185.252.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 13:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9a:a7:2b:b8:10:23:42:29:c6:dc:c2:50:90:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=905491b6630eb700dfc010b927c0f4f27152f333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:35:81:54:1d:4c:f8:54:67:a3:dc:be:85:
0c:61:40:1a:3c:68:1c:c6:1e:5e:70:b3:14:fe:ac:
0e:be:a3:b3:06:04:4a:3b:20:ab:80:68:bc:d3:25:
6a:1a:09:cb:65:01:1b:ce:e1:9a:95:21:e7:0d:15:
7b:1d:96:9b:b3:2d:75:c4:43:23:a4:a7:d0:a8:01:
2e:5e:1c:8f:80:eb:dd:a6:a9:3a:72:79:73:b8:ba:
e6:64:92:2d:05:63:ae:98:50:7b:3c:32:89:70:b6:
47:94:68:38:3f:b7:eb:41:f3:0d:aa:50:df:c6:c0:
75:91:2c:69:79:d4:68:8a:35:a7:bc:92:91:30:0d:
2d:19:c7:a2:15:44:8e:5b:0a:f0:bf:c5:9d:19:51:
7b:a0:a7:f9:77:ae:8f:93:2a:24:77:a7:d5:18:b2:
64:55:cf:5b:38:c9:30:00:fa:e8:27:26:ee:54:dc:
44:cf:f9:6a:1f:f6:35:b7:00:22:73:8f:6b:e2:58:
46:f9:79:e4:5c:01:cc:5c:65:cb:21:27:c6:cf:d6:
6c:90:76:41:2d:a6:a6:36:99:e4:06:35:a0:45:c4:
a8:9c:63:07:90:f9:ef:00:c4:1a:c9:47:07:c8:98:
0b:ad:2c:07:51:9d:ee:6b:03:85:3c:19:1f:e3:9c:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:91:B6:63:0E:B7:00:DF:C0:10:B9:27:C0:F4:F2:71:52:F3:33
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kFSRtmMOtwDfwBC5J8D08nFS8zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.4.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1b:c1:26:d1:1c:39:1b:be:54:aa:0c:42:07:4a:ba:a9:c7:
04:25:b4:e9:28:ed:c6:02:01:b3:e3:d4:8f:da:f0:63:b5:e9:
59:4d:59:fc:1e:94:e5:4b:c6:f4:9f:ec:20:a7:3d:97:d3:6e:
81:36:bc:ba:1d:35:68:fa:ae:60:41:4a:05:a7:21:ce:94:8d:
12:74:d2:f3:d4:84:e1:c8:f0:bb:3d:91:d3:1b:eb:c9:76:f6:
48:55:8d:c3:48:30:d1:2b:ac:17:6e:3e:a9:a8:2e:ca:cd:c8:
e7:90:0c:f5:dd:e7:dd:71:dd:cc:3f:ad:46:fc:23:38:47:06:
70:de:27:f4:df:c3:3d:29:3f:41:ee:e6:39:f8:7a:d4:fa:d2:
59:0b:14:59:4f:68:ac:34:53:97:63:f5:26:d6:98:f7:dd:5b:
7d:cc:72:d9:79:7a:c6:12:31:ea:d8:c4:87:fa:65:6c:9c:63:
d1:07:79:58:99:59:d0:75:0e:0d:68:58:ec:ae:38:4b:f0:2c:
fa:be:a4:2f:a1:9d:61:61:48:13:8a:d0:fc:ed:52:cd:17:1f:
5b:94:80:c8:3d:62:98:7b:f9:e5:ca:f8:99:23:bf:b4:41:23:
26:a4:9f:a1:b6:95:57:ad:5a:8a:18:f2:2a:0b:5d:8d:73:bc:
a3:9d:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:36:48 2024 by rpki-client on console-ams.rpki-client.org