Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/wiqYGcEbKL7O3fQ04aq5xlbU_k4.roa
File: wiqYGcEbKL7O3fQ04aq5xlbU_k4.roa (raw, json)
Hash identifier: qyEMiH/LdaEjzM2vJ/TeHed9QCM9DdiEm7T1G0Fb75I=
Subject key identifier: C2:2A:98:19:C1:1B:28:BE:CE:DD:F4:34:E1:AA:B9:C6:56:D4:FE:4E
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 018CC5014A6A2B435E5C7316079224E29CB1
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/wiqYGcEbKL7O3fQ04aq5xlbU_k4.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.225.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4a:6a:2b:43:5e:5c:73:16:07:92:24:e2:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c22a9819c11b28beceddf434e1aab9c656d4fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:d7:bc:e8:e7:d3:6c:58:00:0c:80:0f:8f:
9e:f8:02:fb:73:1d:42:b2:a2:8e:86:9d:7d:49:50:
69:d9:39:e9:bf:a8:3b:38:11:ab:cc:b3:2f:a4:38:
70:50:95:2b:3c:99:1d:79:50:a2:0b:54:ff:45:ae:
ef:73:ad:23:a3:09:dc:48:e4:71:0f:a5:1e:da:d3:
98:80:13:25:5c:68:71:17:70:27:e9:61:0f:78:39:
c0:3b:8e:8f:7b:4e:9c:63:3f:7c:98:74:d3:7b:3e:
f3:14:9a:93:29:df:13:0c:44:e9:8d:ab:d7:30:9a:
97:74:1f:43:e1:1a:a5:2d:ab:58:e7:9f:4a:57:ff:
7c:3e:22:1f:e2:85:51:65:dc:5b:7f:85:52:e0:98:
35:aa:52:4d:ad:4d:8c:f1:63:0d:87:c1:e0:d3:ba:
31:6f:e2:2a:d2:63:22:0b:8e:de:6a:a4:25:07:3a:
8d:90:e7:fc:22:dc:8c:fa:31:e4:bc:2c:b7:35:8c:
7c:26:db:cf:a1:aa:f6:8a:a5:d2:8d:12:ca:0b:6f:
4d:84:e9:85:05:b3:d6:74:98:1e:78:e8:b2:cb:bb:
d4:c2:3c:ce:43:b2:c3:9b:c9:1c:8d:83:56:42:c5:
d1:7d:c1:17:dc:c2:35:48:0c:ec:1d:06:6f:f6:0a:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:98:19:C1:1B:28:BE:CE:DD:F4:34:E1:AA:B9:C6:56:D4:FE:4E
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/wiqYGcEbKL7O3fQ04aq5xlbU_k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
07:7d:48:ec:29:9b:13:ff:d2:53:fe:f6:34:69:1d:b4:8f:21:
36:d5:d0:a9:86:b9:82:5d:36:ba:13:1b:8e:de:11:ee:93:47:
b2:93:95:5f:a0:f4:ca:1c:b2:88:f9:cb:cb:41:6c:ea:cf:2e:
d1:f1:68:f5:06:29:e1:4f:4e:c6:17:86:4e:61:fe:d7:c5:7c:
fb:b5:a6:2d:61:83:01:77:3a:42:9a:21:df:2a:88:77:8c:63:
73:a2:53:95:a2:1e:cf:dc:14:44:e9:6f:90:80:61:7b:41:ae:
3f:5d:c2:8e:c1:e4:0c:72:08:56:c6:c1:fc:df:9c:19:5b:e0:
01:a4:50:81:46:0a:d6:38:a4:c6:b9:cc:4b:10:87:e5:cf:a5:
44:33:1f:8e:8f:d3:a0:80:ce:3a:d0:93:17:81:4d:d9:ca:c2:
18:76:d3:6c:f5:bc:f9:88:cc:25:a9:00:e3:82:92:75:93:9f:
db:36:33:a5:b7:aa:3e:9d:36:7a:1e:d8:4f:50:a5:0e:5a:25:
7c:a6:1f:71:e1:9b:e7:d3:58:5e:25:d0:3b:aa:8a:39:10:df:
df:49:19:a3:79:4e:43:0a:b2:97:6f:88:6c:d8:e2:60:56:c9:
17:e6:07:91:62:6e:9f:33:ae:6b:60:a8:dc:6a:ad:96:7e:e3:
bc:5f:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:45:23 2024 by rpki-client on console-ams.rpki-client.org