Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/s8Ak-d9oQvPE-L5srU4N-mifygk.roa
File: s8Ak-d9oQvPE-L5srU4N-mifygk.roa (raw, json)
Hash identifier: KpiEmuGEu84m9OssqxjrgNqoPQN6bPJ/MILuHuA7r4A=
Subject key identifier: B3:C0:24:F9:DF:68:42:F3:C4:F8:BE:6C:AD:4E:0D:FA:68:9F:CA:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 018CC500607783F61AC15020D848569D50B8
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/s8Ak-d9oQvPE-L5srU4N-mifygk.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39180
IP address blocks: 185.191.200.0/24 maxlen: 24
185.191.201.0/24 maxlen: 24
185.191.202.0/24 maxlen: 24
185.191.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:60:77:83:f6:1a:c1:50:20:d8:48:56:9d:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c024f9df6842f3c4f8be6cad4e0dfa689fca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:9d:be:1b:d6:5d:25:35:0d:c2:d8:9c:31:
28:27:a6:25:48:e2:7b:42:7c:fb:b9:64:f7:45:38:
d6:04:7f:8f:4d:1c:7d:a9:a7:5a:a8:43:2a:3e:61:
84:77:36:f1:77:ff:ca:3d:43:46:84:34:03:33:67:
58:a6:e8:37:d8:b2:8c:a1:b2:93:2f:b1:9c:21:45:
d5:65:31:16:6d:59:57:ef:db:9d:36:a9:c2:77:82:
28:8a:0d:41:cd:f5:5b:4b:33:b3:98:5f:e0:56:08:
ea:8d:24:d2:65:5b:54:d1:0f:75:dc:29:ec:04:71:
9c:b7:2a:ae:78:f7:4b:2b:f0:71:43:b9:7f:b3:d1:
35:e5:30:85:7b:da:cd:ff:8a:94:69:e0:ff:be:ac:
1a:d4:c0:8f:c8:67:35:f9:84:2d:6e:53:15:21:b0:
7f:c8:fa:1b:56:f3:78:6b:5b:6b:bc:88:23:af:44:
86:cd:8c:f3:e5:75:c7:83:0c:52:96:7b:63:51:c2:
57:e4:f3:b4:8a:e6:b4:06:0b:b3:7b:69:1d:23:f9:
e6:fd:8b:e7:cd:78:89:23:ae:da:fa:d0:c4:21:2d:
8c:da:85:91:5d:f2:18:ce:d4:d3:fe:e3:33:cf:99:
8d:8d:a4:0d:5a:26:a4:2a:c1:49:b5:bc:99:94:f6:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:24:F9:DF:68:42:F3:C4:F8:BE:6C:AD:4E:0D:FA:68:9F:CA:09
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/s8Ak-d9oQvPE-L5srU4N-mifygk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ab:6a:26:03:ba:91:e3:d3:c2:fd:47:9c:7f:5a:56:83:5f:
b0:27:67:de:09:1d:0e:ad:1d:b5:68:b8:89:35:bf:44:fc:de:
60:68:7c:9f:4d:fd:84:3e:9c:e7:bb:5c:a0:4e:ca:97:a2:5b:
70:86:fa:27:30:0a:d2:a1:7e:cc:85:86:74:d3:56:d3:52:0c:
57:87:51:c7:2a:b3:dc:d5:4a:2f:f4:02:75:df:b2:be:48:fd:
2a:fe:6c:53:be:d4:c2:76:fa:29:ac:50:6f:b3:da:fa:11:5c:
a5:27:74:6a:0c:25:9b:ab:71:14:77:0a:ad:b2:c6:d5:5f:91:
23:6d:5e:cc:79:5f:60:fa:ce:f0:2a:9e:14:52:c5:55:9e:40:
c0:0d:07:bc:64:33:86:8e:3a:98:98:5c:d7:74:ad:57:8e:b6:
95:a2:87:41:37:c7:b7:0a:d5:93:c0:2f:7c:a9:e2:25:b0:32:
91:25:80:e3:48:5f:06:40:4b:b2:b1:fd:39:47:ae:c6:f2:91:
47:96:f4:33:b2:19:e4:51:4e:ea:05:89:56:46:f5:c2:56:f0:
4d:00:01:07:fe:13:af:a7:02:80:5d:12:98:05:98:d4:fc:35:
63:4d:69:93:0e:80:f5:f1:69:10:c6:a8:20:92:9f:a7:3d:01:
57:cd:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:46:02 2024 by rpki-client on console-ams.rpki-client.org