Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CilXiWLmuMfDM1eItXSzufyn328.roa
File: CilXiWLmuMfDM1eItXSzufyn328.roa (raw, json)
Hash identifier: zpRbHTgCtN/4IgDSBQtShAXIfBW9ZrSOFp5u5aWKiv8=
Subject key identifier: 0A:29:57:89:62:E6:B8:C7:C3:33:57:88:B5:74:B3:B9:FC:A7:DF:6F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6F8047E66BDFB348AD04D5FB4429
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CilXiWLmuMfDM1eItXSzufyn328.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60021
IP address blocks: 185.148.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6f:80:47:e6:6b:df:b3:48:ad:04:d5:fb:44:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a29578962e6b8c7c3335788b574b3b9fca7df6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:1d:28:07:96:93:85:78:1b:95:94:b1:2b:
d0:ef:df:59:6e:b1:10:48:aa:31:a5:94:64:75:f7:
c0:89:9d:d9:1b:ba:68:0c:1b:1a:b7:3b:ee:7e:78:
ca:02:10:ec:a0:f0:c7:16:a8:e3:59:fe:02:d9:2c:
59:fe:b6:f9:f6:8e:07:b7:d4:ad:6a:99:71:78:4e:
c4:6f:eb:0a:92:c2:76:09:d9:f0:38:89:05:f6:b0:
fd:19:90:54:37:14:aa:04:bf:ba:d8:ae:8d:60:c1:
27:7f:8f:ee:e2:9c:e9:95:84:81:77:f0:27:64:12:
93:05:11:54:5c:b0:da:04:a3:1f:ad:9e:4e:6f:cd:
5f:7d:3d:10:7d:97:8d:9f:84:6b:8b:53:3d:26:91:
de:51:1c:bb:13:f9:6d:d3:8c:80:8c:1d:44:74:ea:
61:e9:c6:4a:24:16:ce:3a:b5:08:28:e4:0f:b9:09:
3b:e5:c3:f2:14:24:89:c3:76:34:3a:0f:f3:23:e0:
f6:3e:15:98:0f:5f:34:e5:ca:f4:0d:f8:eb:fa:d0:
a7:54:07:56:78:32:75:a7:9e:a5:61:2e:5b:3d:ab:
fb:93:0d:40:d5:b6:a4:26:c5:ed:3f:3f:67:e2:d3:
6e:10:d7:b3:4a:86:a9:a9:d0:3d:f2:98:2a:82:47:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:57:89:62:E6:B8:C7:C3:33:57:88:B5:74:B3:B9:FC:A7:DF:6F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CilXiWLmuMfDM1eItXSzufyn328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.12.0/22
Signature Algorithm: sha256WithRSAEncryption
08:ef:d7:89:f7:94:a4:c1:9b:6e:22:31:83:5d:85:d5:45:72:
95:57:e1:4f:1c:39:cc:69:a7:57:1b:35:27:c0:b8:ce:26:2b:
d2:ff:fb:ff:c1:f0:a4:6f:c9:d3:b5:c1:92:84:b7:fc:11:16:
4c:73:1b:49:ab:4b:3c:ac:8f:71:61:f4:e1:c5:6a:15:3f:d2:
db:9a:02:2b:da:3c:fe:c5:0e:d9:04:95:bc:a7:b8:80:4c:dc:
1e:5b:40:7c:68:77:bb:3c:14:55:4e:18:5a:7a:45:b6:27:50:
39:99:99:bf:7d:90:75:05:52:f1:cd:d9:27:e5:57:68:75:6e:
c4:e7:41:69:c1:1d:75:eb:28:b6:22:e7:52:7c:b2:b5:c3:e9:
e6:6f:9a:0c:fc:0e:b5:97:41:a1:d1:00:a0:8f:c0:31:76:73:
6f:7a:6a:9e:09:f9:ed:aa:a8:a2:e1:b4:b2:1b:34:01:b5:06:
1b:7f:08:d2:3a:b1:2c:bf:0e:84:b3:58:ef:b7:a0:6a:a1:d4:
79:d9:ed:0e:70:bd:65:f6:94:43:fb:1e:ec:bc:1d:35:3c:4a:
fd:30:24:d2:ad:c0:4f:ee:a3:ab:e2:ce:af:4b:18:52:b4:3e:
0a:f0:03:3b:50:f4:d9:6c:65:93:c9:3e:ae:55:30:af:21:0a:
66:ea:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:13:16 2024 by rpki-client on console-ams.rpki-client.org