Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/ANtHuFElhCqI6dS6q4jsqu9Ndh8.roa
File: ANtHuFElhCqI6dS6q4jsqu9Ndh8.roa (raw, json)
Hash identifier: Ix8uDi/Bx09qUJ+feBCpO96TBg1eom3g8W1JRxVdHMY=
Subject key identifier: 00:DB:47:B8:51:25:84:2A:88:E9:D4:BA:AB:88:EC:AA:EF:4D:76:1F
Certificate issuer: /CN=a3d7f84861b266ee2f8d386304cece191c282e7d
Certificate serial: 018CC6B930AD125C6C65F523F474EA4E7C75
Authority key identifier: A3:D7:F8:48:61:B2:66:EE:2F:8D:38:63:04:CE:CE:19:1C:28:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9f4SGGyZu4vjThjBM7OGRwoLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/ANtHuFElhCqI6dS6q4jsqu9Ndh8.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209235
IP address blocks: 185.122.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9f4SGGyZu4vjThjBM7OGRwoLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:ad:12:5c:6c:65:f5:23:f4:74:ea:4e:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d7f84861b266ee2f8d386304cece191c282e7d
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00db47b85125842a88e9d4baab88ecaaef4d761f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:12:ac:d8:2f:fa:6b:7f:4d:af:f4:d5:8a:
13:14:5b:2e:d4:eb:40:ea:e6:c1:37:d7:f2:df:db:
43:a5:22:87:35:b1:7c:de:bf:a7:bf:91:68:d2:76:
22:16:43:d4:9c:2c:44:6a:62:ad:70:ab:e4:2e:1e:
38:82:82:c8:e3:81:4f:58:1e:59:d4:45:03:27:93:
f2:15:04:83:a4:16:58:9f:9f:80:57:29:c3:d5:5c:
82:9f:b3:84:f0:e4:13:ac:1d:db:4a:1a:57:39:59:
41:ff:46:dc:65:b1:cd:76:d2:8b:d0:1e:3a:31:0c:
80:1c:b0:d1:7a:68:c3:0a:30:21:9f:e5:34:d1:cb:
e7:16:b2:f2:1d:bf:38:bd:fc:c2:66:d2:30:70:c1:
87:af:d0:3f:58:e2:6c:e2:07:ef:c9:c3:d3:d7:fa:
6d:09:5c:58:b9:d1:2b:37:82:b6:3a:c2:b0:52:8d:
8a:d3:e6:dc:d9:f2:d3:f2:36:6f:dd:ee:8d:1f:e1:
70:55:ba:f0:9d:eb:1a:7d:ac:f6:af:3b:38:15:65:
c9:75:77:17:67:1b:d7:8c:8a:85:b0:2a:99:79:ab:
15:da:5b:24:2d:3c:10:a0:ac:9b:8b:47:8c:ad:6b:
19:24:79:0b:4f:ba:38:e0:5d:bc:dc:ae:ab:e0:ca:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:47:B8:51:25:84:2A:88:E9:D4:BA:AB:88:EC:AA:EF:4D:76:1F
X509v3 Authority Key Identifier:
keyid:A3:D7:F8:48:61:B2:66:EE:2F:8D:38:63:04:CE:CE:19:1C:28:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9f4SGGyZu4vjThjBM7OGRwoLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/ANtHuFElhCqI6dS6q4jsqu9Ndh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.205.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6b:3d:50:c9:9b:a5:c2:7c:83:37:9f:4e:40:94:43:04:86:
02:e1:ff:2d:ba:44:d9:8b:08:37:00:95:b5:e5:1d:14:39:8f:
89:50:66:22:3b:10:9a:dd:f4:eb:cc:e5:d7:dc:fa:b3:3f:76:
04:f3:c3:4d:f7:78:c8:07:8d:3e:b8:68:fa:50:86:dc:e7:31:
b6:38:60:ed:c6:d5:55:47:71:ee:35:11:b1:34:f5:04:1a:c1:
e4:88:28:50:65:a3:51:77:7e:ec:34:77:d4:b7:44:1e:b2:17:
a5:6d:b8:0b:71:16:ae:28:45:f7:fd:59:75:38:07:13:17:bc:
c8:9d:42:91:13:03:f5:f4:c5:0d:80:e5:3e:27:e8:3b:6d:07:
5d:35:08:1c:70:ba:3d:78:28:58:19:9c:17:22:1f:da:26:07:
09:ad:1c:4d:b7:a1:6f:3d:65:0d:fb:af:d4:50:cf:59:86:fe:
26:cd:8d:44:92:4e:bc:c8:f7:f2:cf:49:b9:bf:d1:cb:2d:d8:
c4:f4:22:9a:65:71:e8:34:aa:07:bf:33:7e:c6:71:f6:4d:a5:
67:ab:6e:b2:d8:73:18:e1:9f:60:bb:ab:e5:75:74:e2:af:b9:
d8:2c:97:22:4c:50:0a:2f:23:f0:36:31:88:c5:30:ab:16:a3:
47:19:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:21:27 2024 by rpki-client on console-ams.rpki-client.org