Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/I1O9JkhXZZ72sO6O0lisS2YFrTs.roa
File: I1O9JkhXZZ72sO6O0lisS2YFrTs.roa (raw, json)
Hash identifier: /uUuuMlJS2Y/kvVK9vOpvhPhr4kBD4uq3/WXldf+LbE=
Subject key identifier: 23:53:BD:26:48:57:65:9E:F6:B0:EE:8E:D2:58:AC:4B:66:05:AD:3B
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 018CC34963BAAEDA6E9588DF0F6B19D42B78
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/I1O9JkhXZZ72sO6O0lisS2YFrTs.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 185.81.141.0/24 maxlen: 24
185.81.140.0/24 maxlen: 24
185.81.143.0/24 maxlen: 24
185.81.142.0/24 maxlen: 24
91.232.100.0/24 maxlen: 24
91.232.101.0/24 maxlen: 24
91.197.47.0/24 maxlen: 24
91.197.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:63:ba:ae:da:6e:95:88:df:0f:6b:19:d4:2b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2353bd264857659ef6b0ee8ed258ac4b6605ad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:4c:3c:f4:ea:19:72:66:09:94:84:31:f3:
43:85:62:2b:d6:6d:3a:26:62:94:88:95:82:9f:f0:
50:b4:4a:b0:94:8b:40:5a:28:92:8a:02:b0:4b:21:
76:98:b3:ae:99:f5:55:de:09:0a:3b:1d:09:c0:28:
41:78:66:c7:2c:34:61:10:73:c1:48:23:de:ee:9c:
29:fc:11:5e:ca:ed:5e:72:68:77:81:41:50:e4:7f:
fb:9d:f7:b6:16:20:90:7d:89:f5:16:83:a7:8b:45:
40:38:b9:69:bd:6b:62:b0:45:f0:49:c0:80:00:b8:
ab:03:d5:23:40:b7:42:bf:7c:45:3c:f7:bb:b7:42:
76:d2:c3:36:52:be:d7:ca:d4:47:8d:90:b1:47:1a:
ee:31:92:6a:69:3a:ea:1a:fb:b9:52:10:65:e7:74:
9c:59:fb:70:f0:18:ba:17:68:5c:87:dd:a9:7f:19:
39:a9:60:b6:56:20:0b:f3:d2:b2:1f:fe:c4:dd:4e:
b8:cf:26:42:c1:06:79:14:95:aa:c3:e6:8c:b5:42:
e6:14:ea:a1:bc:9a:d1:4a:5d:b5:8b:77:e0:b1:bc:
96:79:88:8b:6d:17:14:74:03:b4:74:93:be:4e:5a:
77:f8:6b:e5:88:61:d7:37:81:70:40:ed:24:29:56:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:BD:26:48:57:65:9E:F6:B0:EE:8E:D2:58:AC:4B:66:05:AD:3B
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/I1O9JkhXZZ72sO6O0lisS2YFrTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.46.0/23
91.232.100.0/23
185.81.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:d9:73:38:0c:ea:30:c3:c8:ce:85:54:6a:8a:5f:d3:55:b1:
1c:59:0a:11:7a:ba:02:16:33:75:ac:49:81:d2:61:66:5d:fd:
08:9a:4e:d1:02:0c:0f:de:0d:32:c6:cb:42:4c:04:c1:bb:34:
39:ea:f3:74:0a:42:30:6b:14:a7:a5:05:6a:4d:7c:8f:36:86:
38:13:98:eb:e2:1d:22:11:34:4d:08:30:7d:ff:4b:1c:9b:f8:
ab:a5:2b:f0:75:81:10:5a:22:56:91:fb:7b:39:14:fc:fe:fe:
8a:5c:a4:44:ad:e5:e8:9a:0b:45:72:24:0e:0d:c5:0f:16:b8:
f8:dd:19:bc:2c:ea:c2:ec:99:5e:58:af:c0:05:c2:ce:6a:7f:
c6:ca:62:23:b9:38:32:5b:93:60:36:ec:40:7c:25:c4:63:bc:
13:d7:4c:4b:fa:2c:eb:7d:3e:88:71:7a:b6:8b:cd:8c:49:93:
5b:32:27:26:49:df:40:cb:09:af:c4:c3:d7:50:12:e1:9a:2f:
61:d9:af:18:ae:52:72:4b:ad:07:69:4b:41:2c:ca:d4:43:bc:
6d:88:e8:f2:87:29:d2:32:c8:fa:ce:f2:3b:c0:e1:17:b3:52:
93:ea:62:ea:b8:fd:32:ae:9b:67:12:bc:53:7d:ee:66:b8:32:
3f:8b:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:32:16 2024 by rpki-client on console-ams.rpki-client.org