Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4iJxnOYx2qt_JBhlDOd7SF9UZOk.roa
File: 4iJxnOYx2qt_JBhlDOd7SF9UZOk.roa (raw, json)
Hash identifier: d+KJW4I7XjvV7fxsPdgNcdPCnWxuMQHba3FC2Z0XK7g=
Subject key identifier: E2:22:71:9C:E6:31:DA:AB:7F:24:18:65:0C:E7:7B:48:5F:54:64:E9
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018EBD3CF65E9AC0BD6B21C07CB8132D256D
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4iJxnOYx2qt_JBhlDOd7SF9UZOk.roa
Signing time: Mon 08 Apr 2024 10:24:32 +0000
ROA not before: Mon 08 Apr 2024 10:24:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.243.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:3c:f6:5e:9a:c0:bd:6b:21:c0:7c:b8:13:2d:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Apr 8 10:24:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e222719ce631daab7f2418650ce77b485f5464e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:db:2d:2a:e3:33:94:78:1b:bb:fe:5e:d3:
8d:9b:c9:ab:6b:87:a7:5d:cb:5b:95:62:22:4c:69:
64:e7:92:7c:3b:7d:40:fe:6e:19:53:21:c7:88:0e:
62:be:99:0a:78:54:91:4c:3d:49:ef:0b:e3:46:3e:
ac:3f:97:80:ba:47:d8:7f:a3:cf:1f:59:ae:8e:7f:
a8:bb:23:4d:c1:6e:9b:00:72:37:68:df:25:8e:19:
8c:52:9e:85:86:5f:c6:4e:9b:83:5a:aa:4e:bd:c6:
7c:4f:8e:c6:35:c8:e5:f4:aa:32:9b:b5:5c:d8:38:
a2:86:c2:af:7a:e3:7c:28:24:89:7d:ab:81:5c:54:
7d:59:aa:a2:fe:91:dc:09:10:e8:fb:f5:c7:70:ee:
3d:af:4b:5e:de:23:03:66:8d:aa:c2:a3:0f:57:3b:
9e:bd:aa:94:ba:17:5c:01:9e:c5:7d:9f:01:dd:78:
ef:c6:ba:3f:de:d7:d9:18:36:6a:da:0d:0d:1f:a2:
02:b6:73:0a:26:38:b8:fa:30:1c:a9:17:af:6e:0c:
d2:ee:08:e5:ad:5c:85:e0:48:1a:d8:f7:0f:be:77:
c0:2e:6c:a7:0c:c4:18:43:1a:a0:e2:1b:63:2e:52:
12:03:9c:2c:31:24:57:89:a4:25:44:4c:69:7e:65:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:71:9C:E6:31:DA:AB:7F:24:18:65:0C:E7:7B:48:5F:54:64:E9
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/4iJxnOYx2qt_JBhlDOd7SF9UZOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.152.0/24
Signature Algorithm: sha256WithRSAEncryption
48:51:75:85:b3:ac:ae:0d:5a:98:0c:ea:ac:cf:3b:be:58:33:
ab:32:26:db:42:0e:b0:cf:3d:c2:6a:b2:29:e6:80:1f:08:c3:
82:6e:4e:11:ee:17:6e:42:85:1c:d5:77:43:e7:fd:61:99:f3:
e1:5a:3b:25:af:88:2c:6f:23:dc:6b:18:49:3e:c5:d4:fd:fa:
b0:9c:33:f2:98:a0:b9:da:b2:6f:4d:2b:25:fb:42:59:f1:3a:
e9:f5:61:81:11:c9:8a:04:3a:17:9f:f2:20:f6:38:aa:ac:a3:
2b:05:a2:03:e3:25:4f:95:b7:a7:48:17:d2:be:0f:c6:fd:30:
ca:e9:cc:ba:bf:9c:81:e1:2f:a5:b2:f7:53:6c:18:49:45:d8:
bd:3b:22:d7:1c:4b:c8:2b:3e:2e:d4:97:22:61:6b:20:bd:d1:
2b:9c:6a:cc:54:22:3c:78:c5:c9:10:0c:cc:d4:93:41:5c:b7:
b1:ed:58:e0:51:5d:e3:e9:9c:89:9b:74:ab:ec:de:8b:ef:02:
1b:1f:73:c5:64:3d:ed:57:3a:cb:4b:94:23:18:e5:7c:8a:77:
7b:c5:88:ef:52:6f:fd:7a:d7:02:1d:66:bd:54:bd:e2:ec:10:
f1:09:75:29:4b:f2:3e:81:6a:2f:c3:85:c1:37:5d:1f:3c:9f:
35:16:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:19:16 2024 by rpki-client on console-ams.rpki-client.org