Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/lA2zcygOlRwJa2AuPO5aMCs0nCw.roa
File: lA2zcygOlRwJa2AuPO5aMCs0nCw.roa (raw, json)
Hash identifier: 7ekWmTRm0SljKK2ujzuHqgA1eRRD63ehX96WVEKJWu0=
Subject key identifier: 94:0D:B3:73:28:0E:95:1C:09:6B:60:2E:3C:EE:5A:30:2B:34:9C:2C
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 018CC794B3BD988481689D1DEB736E1A619D
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/lA2zcygOlRwJa2AuPO5aMCs0nCw.roa
Signing time: Tue 02 Jan 2024 00:31:00 +0000
ROA not before: Tue 02 Jan 2024 00:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15791
IP address blocks: 185.109.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b3:bd:98:84:81:68:9d:1d:eb:73:6e:1a:61:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 2 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=940db373280e951c096b602e3cee5a302b349c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:25:66:ba:00:f5:3b:ab:cf:bc:bf:4c:35:
7e:c2:73:58:5a:84:57:a9:a2:e7:cd:aa:98:ca:ab:
2c:55:a0:55:e9:28:b2:cc:ad:71:4b:bc:79:36:39:
8e:a3:96:e7:4a:47:91:85:86:f3:4b:ab:b7:65:e3:
d4:57:26:24:a4:9c:cb:47:c4:5b:0a:f6:2b:36:65:
37:e7:71:08:64:11:ab:85:a2:ff:33:45:fd:b0:70:
65:4a:3a:6c:39:1e:d0:f1:5b:65:b4:d5:80:2b:91:
ba:2a:b2:c3:96:62:c0:0d:94:9d:bc:91:bf:62:7b:
e5:ea:a2:28:1f:71:e7:72:cc:d3:89:bb:5f:41:13:
77:b8:fb:b9:fb:0d:d4:87:60:5e:7d:3b:9a:04:99:
90:99:14:ca:fa:21:b0:23:27:20:f3:8b:44:2a:79:
7f:40:32:5b:e8:4e:81:3e:32:9c:4d:1a:a7:e0:21:
7c:2b:8f:a4:15:6c:37:1d:0c:ea:2c:71:2f:18:29:
6a:ec:d7:c1:46:8b:96:2c:5b:37:dd:de:a0:0c:17:
d8:43:ed:12:06:fd:f0:a0:ef:4e:ae:ab:28:10:6d:
b7:00:43:33:0a:97:1f:5e:af:de:75:ed:0a:85:5b:
6a:b1:cf:1f:40:e1:02:57:be:a2:76:51:77:6a:84:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:B3:73:28:0E:95:1C:09:6B:60:2E:3C:EE:5A:30:2B:34:9C:2C
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/lA2zcygOlRwJa2AuPO5aMCs0nCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
69:5c:77:23:77:c5:10:41:f2:b3:64:80:2c:2f:df:a3:b7:2b:
1a:72:cf:76:6f:82:61:3e:28:6d:f2:65:2e:67:33:60:57:81:
f8:b4:85:eb:dc:b7:e8:07:e2:af:89:8c:df:50:26:52:40:23:
18:37:a4:4d:c5:60:76:75:36:4f:64:38:56:1e:4d:af:6a:0e:
da:63:02:66:dd:eb:d7:23:3b:60:9c:5c:a2:30:fd:7f:c4:01:
39:90:45:6d:c4:5f:49:1e:fd:e9:bd:77:7a:65:a6:6b:18:a4:
a1:89:b8:e8:1f:8c:f3:2c:68:7f:9b:66:9b:f5:1e:83:31:bd:
53:23:df:b6:95:dc:e4:d8:5c:41:7a:36:c7:93:07:08:02:4e:
43:8b:5d:97:9b:f5:bb:89:a6:2e:25:3e:ce:0e:5e:ad:aa:50:
80:2c:36:59:2c:cc:f7:7a:c8:75:15:70:d8:ae:df:b7:ff:39:
aa:cb:ad:06:eb:fc:3c:08:fb:76:56:71:02:19:41:db:37:4d:
ff:43:7c:30:e8:16:0b:02:5f:f2:83:b5:77:3f:48:a9:0a:e2:
86:bf:81:b4:9d:09:84:4a:b0:e6:d8:8b:f4:9a:fe:da:64:ca:
dc:fb:e9:65:02:4c:01:a5:98:36:e0:4d:43:13:66:95:55:0c:
0f:79:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:55:17 2024 by rpki-client on console-ams.rpki-client.org