Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/iYRg4Kon-4YvHLJz7la9I8oITE8.roa
File: iYRg4Kon-4YvHLJz7la9I8oITE8.roa (raw, json)
Hash identifier: +sKJZEdLz4uvnfYmlsht1oxgb7hA0tkkfwojbWk975k=
Subject key identifier: 89:84:60:E0:AA:27:FB:86:2F:1C:B2:73:EE:56:BD:23:CA:08:4C:4F
Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial: 018CC9BBA49CD34B2E0A6AE5A439F2D6BCBE
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/iYRg4Kon-4YvHLJz7la9I8oITE8.roa
Signing time: Tue 02 Jan 2024 10:32:46 +0000
ROA not before: Tue 02 Jan 2024 10:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41232
IP address blocks: 185.207.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a4:9c:d3:4b:2e:0a:6a:e5:a4:39:f2:d6:bc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Validity
Not Before: Jan 2 10:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=898460e0aa27fb862f1cb273ee56bd23ca084c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:90:5b:16:47:06:4a:54:b2:26:0c:73:8d:
12:8a:33:62:c7:47:4c:32:e9:88:17:97:22:cc:b8:
ed:0b:5f:ef:a5:59:c8:7e:8e:61:f7:d1:06:46:47:
45:a6:d2:de:98:0d:3e:5a:0b:78:97:0b:fa:95:f6:
79:70:6d:88:83:fa:c3:e3:d1:27:42:9b:af:da:e5:
99:c0:e3:2c:af:de:17:8f:37:9b:89:f8:de:74:45:
94:de:e0:f1:8e:6e:b3:af:2a:cb:cf:94:36:d1:eb:
21:dd:a7:e7:90:96:47:91:0a:11:b1:27:54:ec:d8:
3c:55:4a:50:68:05:83:39:88:bd:02:4d:bb:c3:37:
4f:ad:23:c7:68:fd:fa:ed:12:86:8b:ab:bd:98:0b:
66:3d:2b:b6:84:f8:14:da:af:08:40:68:36:64:2c:
7b:3c:9c:ff:f1:12:85:b2:9d:c5:d6:f9:b5:f2:fb:
17:63:88:62:8e:66:03:65:6a:62:c0:b6:11:5d:7b:
4b:a9:2a:4b:9c:fd:ef:6e:7b:5c:a1:1f:2d:85:22:
08:67:ac:01:e8:e3:fb:f0:8d:f5:e4:62:e6:fc:a9:
77:7b:64:84:7d:42:e9:e6:93:ed:27:b1:4c:f4:ab:
f9:06:8e:76:62:44:3d:94:5f:a8:f1:19:23:0d:ea:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:60:E0:AA:27:FB:86:2F:1C:B2:73:EE:56:BD:23:CA:08:4C:4F
X509v3 Authority Key Identifier:
keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/iYRg4Kon-4YvHLJz7la9I8oITE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.140.0/22
Signature Algorithm: sha256WithRSAEncryption
93:34:ed:23:73:39:9f:c2:36:60:71:f4:4f:d2:28:25:c5:42:
94:42:9d:30:ff:d7:03:ca:43:dc:39:9c:fd:48:63:9c:c4:c9:
9e:1a:0c:9c:e4:a3:6f:d3:64:5c:a2:2b:49:84:a3:12:de:53:
6d:36:3f:e6:43:7d:d3:c5:dc:88:86:61:9c:77:77:6d:aa:b2:
01:0d:5a:44:66:0b:4e:89:ae:5d:53:dc:99:cc:fa:24:ba:d0:
2f:98:cc:d9:eb:5a:cf:1c:09:55:64:23:82:bd:0f:17:de:fe:
b3:cd:73:38:a4:61:c7:46:99:4b:c8:52:79:9b:27:48:a7:0a:
10:40:6a:84:a0:9d:bf:50:55:3a:fb:50:e3:5c:3b:46:83:a9:
02:cc:0d:91:21:b5:a0:ea:35:44:98:8c:39:8b:7b:9e:1e:e6:
0e:3f:d3:85:bb:e0:6f:52:34:4d:85:3c:42:13:bf:77:3d:81:
5a:fe:8c:a7:fb:8c:bb:d0:36:d3:eb:86:c3:a1:ed:dc:af:7a:
f2:5e:19:dc:a5:58:cf:66:18:d6:a5:3f:a7:7e:3f:77:d9:08:
74:89:e0:bb:f7:5a:b3:e8:a4:00:23:32:29:cc:7f:2c:2a:87:
f5:37:b1:c1:4a:19:e6:1a:ee:ec:f9:d7:e7:47:1b:a3:c3:d8:
29:71:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:17 2024 by rpki-client on console-ams.rpki-client.org