Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/o9jXhmqLFbD4kWiozGrH64SvXgI.roa
File: o9jXhmqLFbD4kWiozGrH64SvXgI.roa (raw, json)
Hash identifier: PmWue0Wl3wPApgzPj5uUwenpiBeCLb6UhrfWvdnKeu8=
Subject key identifier: A3:D8:D7:86:6A:8B:15:B0:F8:91:68:A8:CC:6A:C7:EB:84:AF:5E:02
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 018CC500E67743A8C7A54FBD6EF5E7FEA104
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/o9jXhmqLFbD4kWiozGrH64SvXgI.roa
Signing time: Mon 01 Jan 2024 12:30:19 +0000
ROA not before: Mon 01 Jan 2024 12:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 185.161.232.0/22 maxlen: 24
185.68.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:e6:77:43:a8:c7:a5:4f:bd:6e:f5:e7:fe:a1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 12:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3d8d7866a8b15b0f89168a8cc6ac7eb84af5e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:d2:c3:86:74:53:cb:b9:a1:88:2d:99:8a:
f8:9a:ab:e5:81:6d:cd:8e:b6:26:45:1d:dd:15:a8:
ae:f3:2b:d3:a0:fc:b2:9c:b8:c1:6f:be:fc:6c:76:
1a:08:d6:9e:d1:25:b4:57:50:da:4a:79:30:54:5d:
db:5d:43:cf:61:68:be:b0:fb:0c:1c:3a:01:2c:d4:
cb:cf:ec:dc:5d:92:86:63:65:cf:b3:a3:c0:45:d1:
f4:0c:cc:81:1a:eb:e4:3a:6b:9b:0e:7a:4e:94:97:
86:0d:95:53:1f:ec:a6:c6:16:a0:a6:da:27:7d:ff:
8e:3b:2a:68:4c:60:fb:f0:78:e7:22:b2:3f:13:a9:
ec:03:2a:26:f0:64:c6:cf:59:23:2a:9e:fc:e8:9d:
00:fe:29:66:b7:a5:dd:2b:a2:b6:88:66:8e:f9:ed:
e2:75:e6:da:a8:87:a9:31:b2:96:0b:c8:a0:30:c8:
b1:e8:28:0a:a7:78:e8:a7:f6:a7:06:21:9b:56:0a:
59:cd:28:a4:5c:5e:fc:e5:98:07:1f:4f:95:2c:c2:
3b:c3:6d:ca:a6:45:5e:90:54:34:af:c3:31:91:87:
ca:b5:24:0c:e1:70:e2:2e:d9:e4:42:66:9c:f7:48:
f0:2b:53:c0:05:b2:8f:38:ae:d6:e5:6c:e5:77:1e:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:D7:86:6A:8B:15:B0:F8:91:68:A8:CC:6A:C7:EB:84:AF:5E:02
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/o9jXhmqLFbD4kWiozGrH64SvXgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.44.0/22
185.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f3:77:0e:b7:22:1e:5e:42:52:25:fc:48:15:16:5f:7d:03:
29:38:cf:9f:8a:63:5c:8e:29:5c:54:e1:32:29:51:ed:5b:a1:
9f:19:ed:5f:75:4e:98:c4:7f:f8:43:94:44:5e:5f:50:05:b4:
34:14:d1:8f:e9:27:02:7e:7e:0a:ac:a2:d5:06:50:dd:d8:f1:
71:3c:09:65:fe:5c:df:63:c5:32:fd:0c:e8:38:e3:4a:fa:af:
69:a1:2e:16:cf:57:e7:7e:e5:da:54:7a:3d:49:06:30:c0:be:
7b:4d:99:3a:ac:a1:24:6e:46:57:80:d8:5f:27:0d:c9:71:92:
f0:d3:ea:39:b3:08:19:16:f7:10:05:22:04:cc:3d:34:b9:2f:
63:96:11:a3:90:af:8c:8e:39:1f:ff:ba:3a:b5:32:f3:76:84:
92:58:60:e3:fa:80:13:89:99:a7:af:a3:3f:36:4a:49:41:fd:
ef:d5:39:16:5d:41:a8:2a:3e:96:f6:de:37:7c:29:84:d8:28:
e4:a9:32:69:34:84:41:ac:0a:2c:93:62:23:b5:18:41:62:d5:
eb:6d:75:e0:1b:e0:f6:55:b5:aa:19:aa:1e:71:08:e1:86:c3:
33:cf:0f:ef:76:6d:6f:07:ab:ba:de:6c:11:a0:a3:44:35:54:
99:7b:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:49:09 2024 by rpki-client on console-fra.rpki-client.org