Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/cDm6JyGbDQ3NBWiMQqoTU3_JGAA.roa
File: cDm6JyGbDQ3NBWiMQqoTU3_JGAA.roa (raw, json)
Hash identifier: 7OvMkkDf9Rjop0/ikWSgd+hodpuxq8yXRvF4EZr4Gc4=
Subject key identifier: 70:39:BA:27:21:9B:0D:0D:CD:05:68:8C:42:AA:13:53:7F:C9:18:00
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 018CC4931D24566EAD5518AE77B553A74B60
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/cDm6JyGbDQ3NBWiMQqoTU3_JGAA.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8361
IP address blocks: 195.22.144.0/23 maxlen: 24
194.169.249.0/24 maxlen: 24
194.2.155.0/24 maxlen: 24
185.38.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1d:24:56:6e:ad:55:18:ae:77:b5:53:a7:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7039ba27219b0d0dcd05688c42aa13537fc91800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:e0:39:30:75:35:16:08:32:d3:02:63:10:
25:a6:bd:c2:ca:26:dd:ca:44:dc:7d:f0:04:7a:ec:
05:f9:8b:e2:83:0c:53:da:1e:ea:a7:59:41:5c:2f:
bb:8f:ee:35:19:87:a7:e6:3d:79:63:b7:05:48:7c:
04:59:41:68:fb:19:93:f0:b0:b9:7e:c3:3f:69:a2:
eb:5e:0c:1d:f9:6d:88:db:3f:4e:71:e5:62:df:82:
fb:05:6a:2f:71:06:e8:04:55:43:c9:e7:8d:1c:1e:
40:cf:d1:d5:2d:c0:c5:0b:df:98:66:46:03:80:a9:
79:47:fe:ae:02:c9:be:c9:60:b9:be:55:5b:b6:b1:
12:d1:34:8f:88:0f:2c:37:cc:d3:22:9d:84:6c:05:
16:29:22:5b:f6:8f:54:0a:a4:66:94:8a:91:20:20:
c1:0f:9e:88:a7:23:da:3f:9b:1f:7d:65:cc:8c:c1:
53:dc:ab:db:0f:bf:15:1a:ca:f7:d8:f0:fe:38:74:
2d:34:cb:d4:e7:3b:ef:9f:54:80:5a:da:44:a4:79:
83:d1:59:4a:c2:1a:ac:b9:7f:0d:c9:6f:4e:5f:29:
67:c8:ea:35:1e:86:e1:1e:26:28:09:e9:c0:5f:34:
d2:82:33:b7:df:00:cc:38:7a:e7:08:59:89:31:83:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:BA:27:21:9B:0D:0D:CD:05:68:8C:42:AA:13:53:7F:C9:18:00
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/cDm6JyGbDQ3NBWiMQqoTU3_JGAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.20.0/22
194.2.155.0/24
194.169.249.0/24
195.22.144.0/23
Signature Algorithm: sha256WithRSAEncryption
85:68:13:4e:64:63:f1:db:81:34:e1:78:e2:f9:dd:2d:f5:0e:
b7:a5:23:94:c5:db:30:9c:27:d5:e4:70:1e:7a:53:5a:0f:24:
3d:ca:b1:8c:e1:cf:a2:4a:f4:98:bb:17:90:d4:97:a7:56:77:
63:41:c3:91:bd:1d:be:05:56:f7:41:61:be:80:7d:d2:b4:7d:
a0:df:ab:7d:8a:6a:fc:99:43:0f:75:7d:9c:6a:22:cb:7d:54:
2f:22:70:b2:c2:1c:71:d7:0e:ee:7d:c2:c0:3e:73:3e:01:19:
95:a5:3d:20:9f:83:c9:97:76:00:cd:3e:10:6c:95:91:5d:04:
19:2f:6d:aa:09:39:38:f9:4f:d2:0b:30:c4:c8:52:dd:ac:de:
cb:1d:84:87:40:c0:f6:25:b6:1d:0e:97:11:86:e1:23:70:b0:
40:41:30:7a:dc:06:78:8a:90:76:ee:c2:43:2e:76:32:7f:72:
f3:06:c4:63:4b:b0:5f:55:e6:37:f7:18:ba:41:43:ae:7b:14:
bb:46:da:73:84:7d:9c:67:91:49:43:90:43:fe:34:3c:01:9d:
c9:32:70:19:a6:10:68:8c:a0:c6:c6:f6:4c:3c:6a:a9:e0:52:
fc:64:1b:41:8e:ec:98:b1:05:06:6f:59:27:df:dc:6d:b5:b9:
e5:1b:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:56:36 2024 by rpki-client on console-ams.rpki-client.org