Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/N4v9jIbzL9oTxUdj-UAmS7ju9pA.roa
File: N4v9jIbzL9oTxUdj-UAmS7ju9pA.roa (raw, json)
Hash identifier: hWQ+K6hkG3yRxQV0Acz6PsPJR/kO6SDumChJc3mGD7M=
Subject key identifier: 37:8B:FD:8C:86:F3:2F:DA:13:C5:47:63:F9:40:26:4B:B8:EE:F6:90
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 018CC349130CF1ECB313556B83EC9210506C
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/N4v9jIbzL9oTxUdj-UAmS7ju9pA.roa
Signing time: Mon 01 Jan 2024 04:29:55 +0000
ROA not before: Mon 01 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201187
IP address blocks: 185.49.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:13:0c:f1:ec:b3:13:55:6b:83:ec:92:10:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: Jan 1 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378bfd8c86f32fda13c54763f940264bb8eef690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:ea:1d:7a:ed:5f:61:7e:a6:5b:60:5d:9f:
26:95:46:a8:1e:44:ea:84:4b:eb:7c:37:6a:59:b0:
a4:be:d1:41:0b:8d:93:79:fd:11:f0:74:3a:1c:33:
e1:b7:12:62:20:d4:9d:c6:c2:ac:48:c8:34:48:00:
95:10:91:f3:d7:95:e8:2a:46:36:48:a3:f2:e2:40:
20:07:43:f6:3c:0e:91:ef:78:92:d2:d2:78:c6:75:
00:7a:ef:51:a9:29:07:cf:47:0a:a8:e7:a3:9f:9c:
fd:e0:ee:18:b6:3e:37:67:8e:a0:22:3a:5d:51:7e:
23:0e:1c:b0:33:b5:fd:2a:4b:e1:76:aa:ae:a8:c2:
39:38:2a:4a:96:50:84:ee:33:dd:6a:00:85:46:be:
a2:8e:9d:0c:90:7d:c4:18:e7:1e:89:ea:62:db:cf:
6d:45:63:7f:e0:a9:80:4c:2f:d7:4d:da:6c:64:60:
49:54:01:e8:12:a8:61:3a:93:92:92:b9:91:4f:ff:
58:4c:dc:d7:92:b7:b8:76:09:e0:e1:8b:c6:a2:f7:
4b:9f:83:05:3f:7d:67:cd:9d:ae:e1:dd:2b:2c:9a:
c5:38:1f:23:f0:ab:f1:77:6a:a8:eb:7b:08:cd:07:
5c:92:cc:5d:8b:0f:ad:e3:75:2a:3d:bf:18:c0:ff:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8B:FD:8C:86:F3:2F:DA:13:C5:47:63:F9:40:26:4B:B8:EE:F6:90
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/N4v9jIbzL9oTxUdj-UAmS7ju9pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.244.0/22
Signature Algorithm: sha256WithRSAEncryption
36:e4:ac:e0:0c:a5:f9:d8:9b:e6:1c:3e:46:8c:f0:c7:18:fe:
a9:f2:d1:7e:78:42:cf:e6:26:3a:91:a8:e6:f0:06:69:df:7f:
40:1d:6f:35:e0:b0:a7:62:1a:2c:dc:02:ad:24:76:87:98:dd:
27:6b:20:89:da:be:25:6c:eb:a9:b0:8d:95:8e:d7:0a:c3:ec:
90:15:21:08:49:2c:94:1c:e5:65:bc:8b:18:c2:52:11:ee:91:
3b:38:c7:68:29:2e:e5:44:b1:f6:e8:66:8f:3e:29:23:1f:fe:
bb:bc:e1:d3:bb:86:a6:77:f5:e4:ae:3f:7e:5e:6e:b9:05:94:
4f:5c:3f:a5:d8:9a:b2:aa:ba:cb:31:1e:41:4a:95:42:ed:18:
34:8b:03:19:54:4c:32:e0:98:f4:76:30:a5:c6:6e:4f:1e:8f:
74:09:36:0c:14:47:d6:93:cc:56:6c:71:73:eb:c4:d2:5a:9e:
f8:22:9c:95:34:92:ac:c3:e4:ed:02:06:d8:e8:fa:3f:7a:10:
4a:e9:27:ee:51:7d:8d:30:53:80:08:7f:6f:d0:9e:89:8b:fa:
a7:87:bf:48:e9:ea:2d:f1:e6:c6:e8:8b:24:31:1f:63:e2:40:
a9:b7:a3:01:db:d1:a0:33:3a:d3:1d:99:cb:7c:b0:16:5b:b7:
c1:e2:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:19:55 2024 by rpki-client on console-ams.rpki-client.org