Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/RhKSsqqQNlHlXHLVbajcrktjDSg.roa
File: RhKSsqqQNlHlXHLVbajcrktjDSg.roa (raw, json)
Hash identifier: DveAiUMWioAVAywCm0b8ZYTisbi0avNZr3pbgJ6ELKs=
Subject key identifier: 46:12:92:B2:AA:90:36:51:E5:5C:72:D5:6D:A8:DC:AE:4B:63:0D:28
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 018F0F4356D9F8D25C9E36744F2957F18B51
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/RhKSsqqQNlHlXHLVbajcrktjDSg.roa
Signing time: Wed 24 Apr 2024 08:40:22 +0000
ROA not before: Wed 24 Apr 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41828
IP address blocks: 185.53.12.0/23 maxlen: 23
185.53.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:43:56:d9:f8:d2:5c:9e:36:74:4f:29:57:f1:8b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Apr 24 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=461292b2aa903651e55c72d56da8dcae4b630d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:62:8d:0d:dc:a9:0b:68:9e:2f:e0:5c:dc:
ed:49:fe:46:33:30:2d:34:5b:e2:88:7a:17:99:86:
38:1b:77:a0:5e:67:0d:9f:93:f8:ed:bf:20:9c:eb:
19:8e:66:82:96:d5:39:35:6c:38:63:65:22:4f:13:
93:91:a3:47:87:ad:23:ff:dc:42:63:a7:50:4c:4b:
4a:51:d0:ae:3b:98:35:f2:c3:13:7e:5e:b8:f7:1c:
95:42:6d:4e:be:62:2e:dd:fb:12:ad:23:04:39:47:
88:41:94:a7:0b:a8:59:bd:7e:76:46:90:06:cd:b6:
a3:63:c2:9d:5f:7d:06:a0:f7:8b:3c:2e:37:66:5e:
b4:0a:4c:df:ad:fa:6a:14:b0:f1:fd:2b:0e:ca:f5:
26:a1:96:e0:81:44:b5:a1:3a:cc:8b:b6:98:ad:31:
26:8f:f1:93:54:c7:a5:a7:72:93:47:0c:92:fe:a4:
36:10:1e:3d:ba:ed:d5:f4:17:19:77:1f:7e:ac:6f:
11:2a:5e:58:8e:aa:90:33:21:32:86:a9:51:8d:e7:
6b:69:d6:3d:3a:ac:e6:00:ed:53:60:f3:4b:10:fa:
ef:24:37:1d:63:f9:64:8d:98:b7:d6:5a:89:50:8e:
9c:77:9f:a6:58:ac:e3:67:55:ba:40:77:fd:20:a9:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:92:B2:AA:90:36:51:E5:5C:72:D5:6D:A8:DC:AE:4B:63:0D:28
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/RhKSsqqQNlHlXHLVbajcrktjDSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.12.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:78:7c:32:5c:53:74:31:bc:bb:07:b0:02:6f:b7:2c:7f:f8:
c3:98:42:c0:6a:ba:62:82:bd:b4:c8:24:d7:0d:81:81:00:03:
f9:80:68:5e:53:79:3f:c6:3e:bf:ef:32:db:af:77:ba:90:2c:
b2:32:a1:e9:04:84:b9:5c:14:ed:e4:d0:f7:27:62:f0:13:83:
84:e1:d5:dc:8a:90:70:15:63:06:3d:33:fb:dd:99:ab:a7:c2:
da:06:57:54:17:bb:3a:cd:54:c3:fe:5e:29:d0:28:0a:6b:cd:
ac:68:47:41:92:e9:dc:6b:14:e0:4a:bf:4c:6d:60:44:14:87:
a2:ea:d6:c7:a9:03:88:ff:79:51:f0:e8:2e:26:63:74:43:59:
f0:82:6b:44:57:c1:8d:a7:1b:57:b2:fa:78:22:dd:d2:a5:17:
fa:a5:2b:e5:c4:c1:81:17:b0:57:66:57:b2:fd:c5:08:93:0c:
ff:a3:b0:32:17:d4:3c:81:3d:5b:7e:a5:d5:22:50:44:39:b3:
c6:65:4a:09:84:ac:15:8b:74:09:37:d3:bc:66:48:37:5f:c1:
94:08:a3:09:8b:83:f7:3c:54:26:8a:92:08:cc:c4:f7:24:d6:
9a:cd:1a:32:bd:dc:98:a3:27:d8:64:70:94:3c:8d:b5:2e:cc:
e5:96:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:48:46 2024 by rpki-client on console-ams.rpki-client.org