Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/8DYcENv4Yf1Sw_D5wqRN33-ULnE.roa
File: 8DYcENv4Yf1Sw_D5wqRN33-ULnE.roa (raw, json)
Hash identifier: 5fVO4YLHr6RljfKBaSFmTWtIevcidxx9terx4Y6lBvA=
Subject key identifier: F0:36:1C:10:DB:F8:61:FD:52:C3:F0:F9:C2:A4:4D:DF:7F:94:2E:71
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 018CC870AD7969A80DF1FE11F2F6DD1EF63B
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/8DYcENv4Yf1Sw_D5wqRN33-ULnE.roa
Signing time: Tue 02 Jan 2024 04:31:16 +0000
ROA not before: Tue 02 Jan 2024 04:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202670
IP address blocks: 185.151.4.0/23 maxlen: 23
185.151.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:ad:79:69:a8:0d:f1:fe:11:f2:f6:dd:1e:f6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Jan 2 04:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0361c10dbf861fd52c3f0f9c2a44ddf7f942e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:03:ca:b5:b6:2d:19:de:61:6b:37:45:a8:
13:e8:04:0f:ea:01:48:7f:ab:9f:84:21:f4:aa:0e:
8f:c1:aa:6f:d8:ea:9f:01:10:1d:66:0a:c3:d0:56:
45:d4:ed:5f:e6:f5:52:c4:84:70:ea:4e:6d:f3:13:
46:9e:e4:14:bf:d7:14:2e:31:48:50:a7:0a:43:6d:
e7:5b:9c:ba:da:08:0c:b9:57:3c:03:7f:33:cb:a0:
9e:67:f3:70:81:3b:a1:63:5b:21:1a:c5:ce:ca:8b:
37:23:43:80:b9:e4:b5:26:f5:50:15:66:e4:07:9b:
24:ab:4a:6f:bd:66:af:b6:1e:fc:b9:08:f2:ec:ec:
42:f9:88:ae:e2:12:09:b0:76:26:36:5b:0c:84:8e:
01:34:53:00:aa:10:31:65:e2:e8:0c:e3:ca:d8:70:
82:52:87:2b:a0:40:d4:a4:52:57:56:b8:60:d6:07:
c3:cf:7f:93:7a:fb:5c:88:a4:28:4b:38:49:ca:3a:
f2:f6:f4:81:a0:45:05:4b:b3:29:ce:c4:af:ef:65:
b1:56:ae:d8:1a:5f:59:22:4f:df:a7:6f:37:0d:6e:
08:df:04:d5:99:1a:7f:32:bd:6f:ec:1b:f0:9c:d4:
c9:6f:76:e8:8f:0c:15:89:06:a3:bd:c3:fa:5e:1d:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:1C:10:DB:F8:61:FD:52:C3:F0:F9:C2:A4:4D:DF:7F:94:2E:71
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/8DYcENv4Yf1Sw_D5wqRN33-ULnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ee:95:6d:b1:7d:15:17:97:74:4f:a3:ad:44:8f:b9:a4:9a:
f2:21:e0:08:ff:ae:a7:63:25:a1:d3:e1:e7:56:c7:da:24:a1:
b3:0c:7e:58:26:81:0f:bf:8a:2d:70:9e:57:0e:30:23:3a:9d:
32:99:95:cd:63:ec:17:8d:1c:e4:66:e1:c6:33:34:12:7a:c8:
e6:b6:e4:68:30:15:54:e8:29:19:5a:2e:64:61:94:03:90:2f:
87:1c:71:05:f0:d1:d8:42:b4:fe:8e:66:32:08:13:b4:e8:9e:
69:d1:ca:69:98:ef:97:f4:47:9d:7d:03:87:a1:3d:76:35:8a:
c2:26:73:5d:00:b3:70:81:88:4c:40:9b:16:d7:b7:61:e7:5c:
ee:37:95:6d:eb:5d:f0:ef:8a:07:76:9d:3f:dd:53:9e:7b:55:
f0:0a:33:81:09:15:e0:02:7b:d9:9a:8c:4e:16:ec:34:11:7f:
b8:c0:14:2f:5b:62:f3:b6:12:07:2b:1a:1a:f4:f6:b2:57:2f:
41:65:b0:e2:c1:26:ce:3c:66:4a:b9:15:b4:0d:a9:5b:b0:59:
82:5c:27:57:fc:c1:be:1f:5b:bb:03:d2:f5:ba:18:f8:e7:60:
b9:a1:98:51:38:3f:18:8c:ba:4e:90:e8:2b:9b:a8:8e:14:c4:
dc:a0:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:32:53 2024 by rpki-client on console-ams.rpki-client.org