Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/iRHwoxgI61ro82tf_WYMvk63y7Y.roa
File: iRHwoxgI61ro82tf_WYMvk63y7Y.roa (raw, json)
Hash identifier: AOr3HIyvS3/f7nGzmXJcTUoAplH8x3kwiAsYJ3NBj4o=
Subject key identifier: 89:11:F0:A3:18:08:EB:5A:E8:F3:6B:5F:FD:66:0C:BE:4E:B7:CB:B6
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 018CC86F9F781C21E47FE6E0963B945B10EB
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/iRHwoxgI61ro82tf_WYMvk63y7Y.roa
Signing time: Tue 02 Jan 2024 04:30:07 +0000
ROA not before: Tue 02 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 185.144.196.0/22 maxlen: 22
5.180.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9f:78:1c:21:e4:7f:e6:e0:96:3b:94:5b:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8911f0a31808eb5ae8f36b5ffd660cbe4eb7cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:91:30:90:de:ae:ef:61:1f:75:fa:41:f8:
e5:7a:55:49:f9:d6:a7:f2:fa:e2:f1:74:5c:79:ff:
7a:63:77:e5:9a:94:fe:ac:a7:19:e5:8e:6e:ee:c7:
1b:12:d1:7e:0e:50:f7:1c:5a:55:30:59:3a:d5:2a:
bd:55:74:b5:e3:4a:56:28:f5:d8:7a:67:ee:29:4f:
aa:67:67:9f:db:64:fc:ca:f3:c2:6c:c4:55:69:91:
d3:42:ee:8a:31:08:94:90:6e:28:1f:01:78:e6:59:
a6:87:eb:57:bd:1c:1b:c3:96:e9:95:6f:0b:92:11:
4a:e4:c8:c0:a5:33:5b:ad:f4:07:97:88:b3:fb:7e:
bd:e9:e0:65:1d:2b:c3:9d:64:50:3a:8a:d7:bf:62:
3c:8e:62:c2:c3:b1:ad:f7:7b:4f:cd:6a:7f:f0:36:
16:19:d4:6c:cf:0b:10:ed:b4:49:4c:25:4b:c4:8e:
23:af:41:79:ec:6f:27:8c:b9:29:2a:88:eb:26:9e:
47:ba:74:d2:94:94:43:9b:db:57:8b:02:9a:9c:d5:
3c:16:8c:86:1d:38:47:d0:c0:ee:44:89:2c:d5:83:
73:99:6c:36:7e:6f:c8:64:16:33:a1:55:3e:71:8a:
75:3a:f9:09:34:66:eb:24:7f:38:d0:c5:8f:2c:b8:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:11:F0:A3:18:08:EB:5A:E8:F3:6B:5F:FD:66:0C:BE:4E:B7:CB:B6
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/iRHwoxgI61ro82tf_WYMvk63y7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.140.0/22
185.144.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:64:77:9d:8a:04:b0:01:77:ce:75:45:84:b8:05:e1:f8:4e:
17:77:3e:0b:b9:35:30:38:8e:68:ca:21:4f:03:dc:34:7e:6c:
51:29:78:7d:5d:da:ca:67:bc:b4:67:2f:94:1d:2d:9b:b5:b4:
1b:f0:6c:c2:93:d7:2a:6f:35:21:2a:37:0e:f8:f3:51:9a:ce:
04:fd:a7:81:b1:e7:b8:20:66:7a:87:89:b4:21:a1:0c:43:59:
af:0d:a9:ac:3a:c8:d1:99:ee:3f:af:c6:a4:f6:e9:63:39:92:
8f:a2:c4:42:ac:77:67:80:52:b2:1a:5a:f5:07:63:8a:3e:44:
c5:db:be:04:06:f1:f2:dd:77:a7:93:b6:62:56:b2:0a:9b:e2:
4f:ef:72:6f:f6:70:3c:03:4d:ce:7a:99:f2:b3:71:30:47:aa:
0e:ad:33:1f:fa:e9:e1:72:7c:85:4e:d8:69:dc:64:8a:4b:07:
80:8d:e6:4e:43:59:3a:8c:f8:47:70:b6:69:46:0d:49:6d:bc:
d5:b2:3e:f5:f3:f8:4e:ec:04:be:35:0a:9f:29:56:7a:30:ec:
fb:db:44:84:51:e6:b5:b2:99:17:78:98:9e:04:85:56:ae:8f:
d8:f4:c7:6b:98:1b:65:6d:f8:84:15:d4:52:2d:86:ec:4f:ee:
65:12:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:50:47 2024 by rpki-client on console-fra.rpki-client.org