Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/1e9iE_BypV8i3m6c6VbWLsJHPJ8.roa
File: 1e9iE_BypV8i3m6c6VbWLsJHPJ8.roa (raw, json)
Hash identifier: k44LnDN+kgWxcKkrbIKmZGisWerf+J3Scq3jDchaSIE=
Subject key identifier: D5:EF:62:13:F0:72:A5:5F:22:DE:6E:9C:E9:56:D6:2E:C2:47:3C:9F
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 018CC49378CCB3166EE9AF145278D9505D4A
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/1e9iE_BypV8i3m6c6VbWLsJHPJ8.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204811
IP address blocks: 185.239.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:78:cc:b3:16:6e:e9:af:14:52:78:d9:50:5d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5ef6213f072a55f22de6e9ce956d62ec2473c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:39:de:5d:8b:e9:7e:23:ce:c0:f1:db:af:
3c:ea:c5:05:57:ab:3f:e7:72:d0:24:17:dc:c1:a1:
b9:c8:6c:74:df:cf:f1:e1:4a:cb:cf:11:19:20:94:
dd:76:cb:8e:47:78:9a:10:b1:ba:80:07:19:a2:33:
fb:6f:d6:84:08:f9:56:7d:3b:df:71:1e:70:46:c3:
4d:f1:28:8e:3f:61:b2:2e:9a:1c:91:ba:1f:28:36:
e3:2b:f4:7d:7c:3e:a3:c8:71:1a:e9:7c:90:c7:49:
be:5c:14:76:19:6a:e9:e0:58:69:a7:d2:e1:17:d1:
f2:54:2e:ed:d8:27:23:05:6a:2c:f9:28:2b:29:f1:
6c:46:57:c1:7c:d5:05:ea:15:34:4f:f6:ed:9a:a3:
ac:de:dd:30:d4:e3:3a:84:fd:62:30:e9:ed:aa:e6:
dc:dc:0a:31:a5:58:b2:0b:d0:5c:e6:fa:e4:52:c5:
ad:2a:3f:82:64:32:dc:20:78:b4:1e:dc:e3:6a:a3:
f0:d8:32:9c:79:6a:56:a7:d1:3b:03:13:8c:de:f8:
c4:c2:c2:5f:70:27:e1:64:40:4f:4a:e0:ee:29:2b:
ec:6a:51:29:3d:80:5f:f0:35:4c:80:d6:43:8a:c1:
c7:d5:56:28:d9:4e:e8:af:7c:f7:cf:c2:a1:af:0f:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:62:13:F0:72:A5:5F:22:DE:6E:9C:E9:56:D6:2E:C2:47:3C:9F
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/1e9iE_BypV8i3m6c6VbWLsJHPJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.72.0/22
Signature Algorithm: sha256WithRSAEncryption
75:32:87:51:fc:84:e6:86:e0:3a:57:cc:73:2a:6b:90:b8:f8:
2f:78:fa:f3:bb:33:ff:37:20:97:e3:f2:b3:97:08:58:53:bc:
17:0d:be:e5:c0:28:7c:1f:54:bd:ca:ce:fd:45:7a:4e:38:1c:
79:e2:39:27:97:de:96:0f:df:c2:01:c0:3d:4e:c8:c7:fd:2a:
50:b8:51:9a:6f:9f:aa:d2:f0:69:65:1f:96:fb:51:6c:22:1b:
db:81:84:4f:05:7e:2b:dc:ec:64:f0:b7:b7:e8:54:af:8f:66:
e8:4e:37:ef:fa:5c:7b:e0:c5:1d:95:ce:b0:50:8f:06:af:6b:
e8:c1:47:8c:db:45:1d:aa:95:d7:f6:34:ca:68:46:7f:05:f5:
f8:f3:7f:a8:04:43:2b:51:c8:d9:b4:3a:e7:c4:94:30:c6:80:
2d:3c:da:4f:a7:94:f3:db:12:7d:60:f0:35:e8:a6:4e:cb:53:
b9:6b:f9:91:30:1a:9d:30:37:a2:fc:61:d7:39:da:86:63:3f:
7c:64:b6:d5:f7:59:d4:3f:82:a9:90:e5:e6:48:f3:61:a9:fb:
cf:e7:75:2f:de:ff:aa:2c:da:04:c6:e5:34:ac:dc:7e:9e:ba:
77:6d:c5:69:fd:80:5b:4e:76:e6:7c:d1:b3:66:e9:64:63:7b:
13:13:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:41:03 2024 by rpki-client on console-ams.rpki-client.org