Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/iQm3u3yabhEFZWYTvPhu5Kqde54.roa
File: iQm3u3yabhEFZWYTvPhu5Kqde54.roa (raw, json)
Hash identifier: 2obsb9onY8x6viIJlQJ2yu8TN++S6KSsjBLasCbMEpY=
Subject key identifier: 89:09:B7:BB:7C:9A:6E:11:05:65:66:13:BC:F8:6E:E4:AA:9D:7B:9E
Certificate issuer: /CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Certificate serial: 018CC6B785B84612C34012BE3CCC4E40BF2B
Authority key identifier: A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/iQm3u3yabhEFZWYTvPhu5Kqde54.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201738
IP address blocks: 185.65.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:b8:46:12:c3:40:12:be:3c:cc:4e:40:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15a105f5ba627e5be6f1ff91f2597278209931f
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8909b7bb7c9a6e1105656613bcf86ee4aa9d7b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:0b:6d:13:57:ab:67:35:e0:cb:ed:32:0e:
35:c0:de:aa:78:89:63:d8:2d:c3:c9:33:99:a3:64:
62:a4:ff:71:3d:a9:1f:a0:82:07:fa:a6:35:65:1e:
5a:59:24:16:19:e7:1c:be:5f:2e:2f:ea:1e:f9:c7:
6f:ba:a6:11:6d:af:4d:58:7d:dd:82:ce:b9:14:16:
33:a6:7e:e5:9e:a6:63:d8:81:68:44:43:32:87:1b:
2e:f4:09:e6:f1:aa:ff:10:df:dc:47:4c:25:43:9b:
e4:ae:88:74:3f:4a:90:6d:0d:f0:9a:b4:09:06:21:
30:77:f7:bf:a5:0a:04:da:99:d7:1f:cf:51:3e:48:
4b:e0:0f:45:99:d0:6c:33:65:32:02:27:f8:c0:e8:
dc:9b:f5:b1:18:da:98:56:46:0f:d6:4e:b9:68:02:
d2:94:b0:22:39:66:0e:80:8d:54:f0:10:09:b6:49:
91:24:31:2c:8a:bc:83:82:fe:8a:0f:4a:48:1a:56:
09:30:a2:7d:9a:d9:81:ec:7c:78:84:fa:f6:97:bd:
4f:a2:08:d6:ba:1b:ba:ac:3c:3a:24:b2:fc:db:01:
7a:f8:39:21:1f:d1:bf:8b:e7:bf:b4:1a:f8:6f:a1:
5e:eb:9e:ab:ba:27:b0:b7:d3:f8:83:7d:33:13:f9:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:B7:BB:7C:9A:6E:11:05:65:66:13:BC:F8:6E:E4:AA:9D:7B:9E
X509v3 Authority Key Identifier:
keyid:A1:5A:10:5F:5B:A6:27:E5:BE:6F:1F:F9:1F:25:97:27:82:09:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/iQm3u3yabhEFZWYTvPhu5Kqde54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45340c-540c-4faf-8a9f-05ce48d5f2d8/1/oVoQX1umJ-W-bx_5HyWXJ4IJkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:01:55:81:a3:7d:d4:5d:dc:55:d1:94:c3:e5:65:c7:7a:c5:
df:cd:9b:cc:d4:24:ce:5b:aa:0b:f5:ee:00:82:e8:8d:87:c1:
0a:71:84:a7:b6:c5:a1:4d:f7:19:03:39:8b:19:9a:cb:02:9d:
69:d4:fb:1b:18:5b:d7:db:c2:3d:2c:5c:4f:ec:ae:43:b9:21:
55:26:2b:59:e6:d1:8d:cb:35:a0:ab:35:94:71:d4:72:11:22:
5f:69:cc:5e:c5:c9:4d:12:c7:c8:ba:2b:d8:85:0d:92:ba:22:
2a:a4:20:26:b7:e6:e7:12:bc:5d:9b:16:57:15:89:56:41:a0:
57:71:f1:bf:89:6c:d3:4e:31:21:ad:d6:a1:58:80:6c:30:6c:
3a:94:bd:58:6c:ad:68:71:60:67:ab:7e:e4:45:cb:b9:8c:d5:
20:6b:f4:72:1e:cf:2d:98:e0:82:74:df:74:d1:d4:ad:ef:7e:
45:29:f7:6b:5c:8b:de:58:5d:78:42:23:1b:03:22:fa:41:01:
0d:2b:74:86:23:da:00:24:e8:14:9a:83:12:bf:06:fc:25:bd:
fc:25:98:be:0b:bb:c6:5e:96:b7:3d:b4:d1:85:48:a6:1b:2a:
6c:98:33:71:e2:70:6c:e5:7a:01:9a:15:c6:73:1e:cd:7d:2e:
4e:09:02:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----