Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/1-SK9xow48eU13WOEbMyGgxkDTPA.roa
File: 1-SK9xow48eU13WOEbMyGgxkDTPA.roa (raw, json)
Hash identifier: yR/0FyGVSwsjOJY45RdNA9FIJbMfMdjmwa/k09JtyU8=
Subject key identifier: F9:22:BD:C6:8C:38:F1:E5:35:DD:63:84:6C:CC:86:83:19:03:4C:F0
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 018CC79502CAE399654B88FF0F40B1E3DCB8
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/1-SK9xow48eU13WOEbMyGgxkDTPA.roa
Signing time: Tue 02 Jan 2024 00:31:20 +0000
ROA not before: Tue 02 Jan 2024 00:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 185.238.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:02:ca:e3:99:65:4b:88:ff:0f:40:b1:e3:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Jan 2 00:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f922bdc68c38f1e535dd63846ccc868319034cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:7a:3d:16:19:2c:9d:21:d9:d8:85:f2:04:
80:4a:1d:df:b7:8e:72:34:cd:67:6b:b6:a2:7e:37:
3f:a4:8b:ca:70:d0:26:69:31:09:87:6a:ae:1e:0b:
fe:7e:5a:6f:d9:f7:89:13:d4:68:23:84:41:8f:c2:
a3:e6:8a:ee:3c:37:7a:02:97:74:ed:69:79:bb:83:
53:af:5d:6e:22:d7:77:a1:ce:5c:25:45:6f:63:d0:
76:11:e9:18:e7:32:f5:f3:56:2d:89:37:98:67:58:
a1:03:a5:6d:d5:c1:4e:1b:cd:f8:ba:2b:8f:59:ad:
c8:9f:e0:35:c5:6d:da:fa:d6:84:19:0b:8a:a4:fa:
78:9e:ba:ee:66:a3:3c:57:7e:5e:68:f5:85:5e:f6:
8e:3d:26:c1:96:82:00:a2:97:58:10:2d:1f:01:93:
19:f0:99:42:1b:b6:9b:bd:ee:ac:8f:c5:f4:8a:62:
48:da:fa:37:31:cf:68:fa:67:55:6a:ec:44:8e:56:
1f:12:87:e8:27:75:06:01:d9:19:6c:5b:60:e1:4a:
df:bc:03:99:83:2c:a9:7f:a5:13:bd:07:fb:bc:87:
e5:3c:f3:8c:49:92:46:a9:de:42:43:00:57:eb:f0:
a8:e3:dc:ab:2d:dd:d8:ee:9c:ae:a7:44:91:46:c0:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:BD:C6:8C:38:F1:E5:35:DD:63:84:6C:CC:86:83:19:03:4C:F0
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/1-SK9xow48eU13WOEbMyGgxkDTPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:69:0c:0e:8d:d9:41:6c:87:09:7a:7e:5f:e1:07:d8:4b:10:
f1:c2:1c:32:4a:05:a5:56:cf:87:cf:a2:87:64:ba:ca:7d:62:
a4:73:f2:73:84:bd:67:96:c8:98:a2:67:75:92:49:7a:ed:04:
80:ff:e0:ae:52:e8:19:4c:44:8f:0f:80:46:1b:60:83:93:cc:
45:c6:85:f4:e6:21:50:37:76:1f:16:9d:f8:ab:4a:64:d4:de:
64:78:e4:6f:a8:9d:1f:ab:82:aa:9a:63:9d:09:54:d3:6c:a7:
a4:02:2b:8e:af:5e:cc:f8:01:65:be:14:42:8a:f2:81:ad:62:
d7:d7:d8:5d:23:0c:7a:d9:07:b7:3e:9d:2a:8d:95:b9:12:ee:
c3:9e:25:a7:40:8d:a4:74:ed:3c:5a:4f:28:6a:3a:4f:16:71:
c5:9e:88:1d:46:b7:72:0c:3d:f9:a9:6e:47:3b:fa:e7:80:b3:
53:af:87:bc:58:be:f7:10:00:e6:72:c3:ca:15:64:e5:10:3b:
52:03:2b:ba:d5:63:8a:64:85:bf:0a:f3:45:7d:5e:e5:13:f7:
64:b1:a2:25:c0:75:9a:70:5e:98:bb:3b:c9:40:66:5f:aa:94:
a7:d8:04:23:e6:23:ea:72:7a:8b:90:3d:ad:b8:62:f8:40:9a:
9f:7d:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:05:03 2024 by rpki-client on console-ams.rpki-client.org