Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/In7yceLH06jTtHBTpYAyARko-gE.roa
File: In7yceLH06jTtHBTpYAyARko-gE.roa (raw, json)
Hash identifier: 6wLOPharWERwB5elHJzh6/quKomLHgEYT+RLySkmiCo=
Subject key identifier: 22:7E:F2:71:E2:C7:D3:A8:D3:B4:70:53:A5:80:32:01:19:28:FA:01
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 018CC64A6DCE4904239554CA63E3AC0117B4
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/In7yceLH06jTtHBTpYAyARko-gE.roa
Signing time: Mon 01 Jan 2024 18:30:15 +0000
ROA not before: Mon 01 Jan 2024 18:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31511
IP address blocks: 185.30.252.0/22 maxlen: 22
195.62.68.0/23 maxlen: 23
2a04:4720::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:6d:ce:49:04:23:95:54:ca:63:e3:ac:01:17:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Jan 1 18:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=227ef271e2c7d3a8d3b47053a58032011928fa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:ab:67:c0:7f:9c:ee:3b:f9:9d:d2:c7:6b:
27:b9:f1:4a:df:74:74:b1:8d:28:ca:a0:f0:18:05:
08:3d:56:fb:c6:b9:9e:41:d8:ca:a7:5b:45:6f:cc:
ed:fd:40:61:2e:eb:34:d6:9d:f6:98:e6:20:dd:4e:
52:2a:ca:c3:c8:35:58:f9:c5:4f:b5:a4:17:bb:01:
c1:7f:33:71:e0:f3:7e:24:46:f8:91:57:0b:6e:6f:
75:1e:b3:ba:44:74:b4:a0:b8:79:a7:d0:bb:b0:46:
0b:cd:9a:d7:98:0c:25:1e:9e:ba:91:d3:61:ec:c8:
b5:fa:23:8e:11:ca:0f:5a:a8:40:c8:b3:6f:f9:a4:
63:5a:35:53:53:89:65:c1:d3:72:2f:a4:d9:6a:29:
03:d2:27:29:6e:c6:2e:3b:d2:a1:11:84:2d:30:87:
6a:ee:fc:f8:ce:f4:49:cd:57:09:04:5b:c6:d0:9e:
d4:6a:95:53:08:dd:e0:ca:7b:6a:99:ff:38:05:81:
7a:ff:f5:68:c5:44:fc:b1:95:89:cd:24:b5:42:a4:
65:5e:1a:eb:55:49:a4:2d:2b:1f:49:c8:96:5d:45:
b5:b3:17:57:6a:42:60:07:f0:61:7e:1b:de:6e:41:
18:17:9a:d0:9f:81:a0:8a:15:a7:15:f4:8b:7e:94:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:F2:71:E2:C7:D3:A8:D3:B4:70:53:A5:80:32:01:19:28:FA:01
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/In7yceLH06jTtHBTpYAyARko-gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.252.0/22
195.62.68.0/23
IPv6:
2a04:4720::/30
Signature Algorithm: sha256WithRSAEncryption
73:1e:23:e2:3b:7d:1b:63:8c:6c:1c:23:43:1c:f3:32:3f:71:
8f:08:72:6c:88:d3:17:b2:32:54:28:1f:1c:e4:7c:2c:2d:ad:
fa:ef:8b:8f:65:f5:70:c0:d2:fc:a4:24:00:0d:3d:d6:0b:2a:
a0:83:6e:67:20:96:6a:f8:c7:43:06:b8:86:5f:ba:c7:0a:d9:
11:da:94:0e:69:d5:25:46:43:59:95:7b:16:28:8b:a8:a5:74:
ce:5e:3c:7d:a7:11:56:cd:c5:31:51:af:db:ab:45:55:63:83:
38:0a:e9:ea:7b:7f:a1:fa:bc:ef:5e:78:0c:6d:35:bc:69:7e:
0e:06:e8:05:63:12:ff:04:e0:b6:1c:4d:11:74:ba:c7:fa:2d:
69:32:5a:f1:37:10:33:9b:6c:15:86:ff:f8:3f:a2:e9:b0:43:
21:20:d7:4f:ef:9c:f3:41:5e:51:6f:d4:2a:e5:ff:06:df:bc:
fd:6b:58:ed:ce:16:d4:ef:76:09:c2:e4:be:5b:54:f8:da:d6:
7f:cd:91:b9:29:5e:72:50:18:53:64:a8:91:d1:7d:a0:f6:40:
3a:05:38:b8:cf:bb:68:cf:f1:32:f2:dc:ce:b6:d5:05:23:db:
06:e6:83:e8:7b:43:e0:09:3b:1d:5b:d2:a0:4a:1e:09:59:23:
a9:dd:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:24 2024 by rpki-client on console-ams.rpki-client.org