Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/4wtjzk_GY8lv8E4zRWntLs-W3wM.roa
File: 4wtjzk_GY8lv8E4zRWntLs-W3wM.roa (raw, json)
Hash identifier: M3/eMVVcu7ET1pDgjRxA2FY452J91EWteUAP0WN6z3M=
Subject key identifier: E3:0B:63:CE:4F:C6:63:C9:6F:F0:4E:33:45:69:ED:2E:CF:96:DF:03
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 018CC26D3D4868ABC962FE3E7CC813422936
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/4wtjzk_GY8lv8E4zRWntLs-W3wM.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208802
IP address blocks: 185.85.184.0/22 maxlen: 22
2a05:b100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3d:48:68:ab:c9:62:fe:3e:7c:c8:13:42:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e30b63ce4fc663c96ff04e334569ed2ecf96df03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:c2:47:04:ff:01:fa:ee:c7:ed:7c:e5:c8:
cb:29:13:ce:95:16:7d:5a:c8:e2:5b:c9:69:a7:ed:
05:79:15:59:cb:b9:60:26:5e:04:89:60:20:79:f3:
fe:22:3d:6c:72:14:e3:48:f0:be:f3:60:71:da:10:
e7:b3:d1:28:ac:28:b8:92:32:ae:5f:54:ca:74:95:
dc:87:21:e5:e0:c2:7e:89:85:ad:1d:7c:d5:72:e7:
5b:72:e9:04:17:f4:48:64:9a:8b:ec:d5:30:de:6a:
6a:89:73:8e:0a:5b:ff:cd:a8:22:4f:ab:a3:19:a7:
9e:57:f7:34:10:0a:5f:13:e1:35:79:aa:df:e5:85:
56:1a:10:f0:a0:68:bc:be:5d:a9:3c:c3:0a:66:c2:
b0:f7:8c:ae:a9:85:22:9b:5d:ce:65:c1:4a:f6:f4:
ca:7b:63:d3:9c:7f:7a:6b:e7:45:33:8d:ab:a1:db:
ec:7a:89:56:d8:64:e3:e1:96:61:4c:3b:ed:8d:1e:
8f:5e:85:24:27:95:19:7b:fe:15:be:11:ae:da:2a:
17:86:08:a6:c6:a5:22:f4:9c:ed:9f:74:e3:55:f7:
e5:0e:4f:3d:65:08:9d:f4:4b:fa:4f:9c:2b:73:e8:
e8:f5:7d:93:fb:c1:29:b5:67:6e:c8:86:8e:8e:17:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:63:CE:4F:C6:63:C9:6F:F0:4E:33:45:69:ED:2E:CF:96:DF:03
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/4wtjzk_GY8lv8E4zRWntLs-W3wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.184.0/22
IPv6:
2a05:b100::/29
Signature Algorithm: sha256WithRSAEncryption
87:13:20:0f:f1:e8:4a:a0:97:41:17:85:fc:2d:fc:93:d1:48:
33:c9:68:0d:79:0c:75:a8:34:9a:62:2c:25:ba:83:99:43:01:
cb:83:b5:d2:01:ba:e6:0c:d1:3c:34:63:01:ae:53:f4:79:df:
e3:fe:f3:52:c8:02:38:3d:a6:28:17:34:43:f2:78:c1:86:8e:
17:ef:19:e3:af:23:ad:42:97:77:e7:70:e6:7d:61:d6:6c:ee:
4b:78:c9:f6:af:49:c3:d3:5c:f9:57:d8:43:46:68:7e:c8:61:
70:83:7a:ee:54:98:93:20:49:c1:0e:96:67:d9:37:00:66:68:
94:69:f3:55:e8:a0:26:26:aa:32:07:98:2f:3c:a7:e7:40:1b:
56:54:1b:b3:d9:ec:5a:1a:3e:e1:11:66:11:c7:b7:51:91:77:
d4:eb:d3:70:0a:6f:1e:f0:cf:94:e1:58:53:ab:35:07:0c:f7:
dd:a9:b5:23:3f:fe:7d:c0:51:c6:33:ec:4e:46:7a:5d:01:5f:
81:87:33:d6:73:f3:2f:76:7c:28:85:c3:90:42:91:ab:70:11:
69:c2:64:de:c0:8f:dd:d3:12:c9:0a:04:c7:18:19:2f:93:ed:
eb:0e:2a:1d:a3:94:fd:c3:a8:54:52:f1:71:85:4d:a2:53:27:
42:6f:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:12:04 2024 by rpki-client on console-fra.rpki-client.org