Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/rQiGUjLCPm7ITmjeeq741r4kIeI.roa
File: rQiGUjLCPm7ITmjeeq741r4kIeI.roa (raw, json)
Hash identifier: 5b+BjDWQTM/gmx3TWKdt8kTf2OrBNRW5Dr+a283nWVg=
Subject key identifier: AD:08:86:52:32:C2:3E:6E:C8:4E:68:DE:7A:AE:F8:D6:BE:24:21:E2
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 018CC871307A854A2312FF14CC76478FB5EC
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/rQiGUjLCPm7ITmjeeq741r4kIeI.roa
Signing time: Tue 02 Jan 2024 04:31:50 +0000
ROA not before: Tue 02 Jan 2024 04:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206655
IP address blocks: 185.200.180.0/22 maxlen: 24
185.107.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:30:7a:85:4a:23:12:ff:14:cc:76:47:8f:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Jan 2 04:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad08865232c23e6ec84e68de7aaef8d6be2421e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:58:e8:50:f9:1e:1b:81:17:5b:66:2e:dc:
d7:57:31:f7:6b:a3:eb:7b:7d:57:ef:46:66:80:f0:
e9:eb:07:06:fb:88:17:2c:ec:9b:39:ee:bb:dc:e5:
b9:59:72:db:7b:2e:9a:cb:3d:81:bb:c8:0b:f1:6e:
07:bf:13:21:10:57:7e:be:da:0a:9a:a8:51:19:ee:
89:da:46:83:8e:90:d4:15:07:af:c4:a7:b8:00:64:
5b:e6:90:83:5f:5e:cf:b2:eb:c2:ac:4f:be:86:0a:
4e:9c:6c:4e:ec:62:00:71:78:78:f1:dc:8f:de:65:
3e:d5:bb:ac:c9:7a:2d:0a:0c:2a:59:fd:01:b4:13:
3c:48:7c:ff:a0:63:01:f3:81:95:d0:a1:45:b2:27:
01:7e:b0:c5:8c:28:d3:13:cb:25:16:99:88:29:32:
f1:e6:74:67:da:57:2d:88:5e:9a:14:ca:a4:4c:90:
f8:25:a4:67:45:d2:c6:4c:76:85:06:25:2a:89:04:
59:b6:b3:31:34:7b:34:82:f9:9a:9f:30:91:81:74:
d1:de:26:52:a1:b1:ee:db:21:5b:b9:c4:9f:30:e9:
3b:0c:55:e0:c0:e5:cb:b4:06:e9:36:44:77:0e:2b:
c1:d5:5b:3b:fa:79:66:f0:b0:bb:1f:e0:a7:39:d1:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:86:52:32:C2:3E:6E:C8:4E:68:DE:7A:AE:F8:D6:BE:24:21:E2
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/rQiGUjLCPm7ITmjeeq741r4kIeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.204.0/22
185.200.180.0/22
Signature Algorithm: sha256WithRSAEncryption
41:45:8f:da:4f:07:b4:4d:45:25:65:69:d9:11:fd:fe:45:df:
7f:cf:e6:57:6d:01:97:1d:05:87:37:67:c2:76:4f:38:92:8a:
67:97:19:40:df:8c:fe:d7:5a:dc:60:75:97:b3:9a:cb:81:b6:
15:69:8d:39:cf:d5:4c:5e:4c:53:66:c2:e3:47:1a:72:41:ee:
50:8d:f8:61:83:b5:ed:72:95:06:c1:de:7c:1a:01:c1:c3:ed:
ea:fe:ba:49:e0:60:44:57:99:7b:ff:f2:c2:e0:d3:90:64:b7:
e3:56:84:1f:e0:8d:9c:ac:b9:2c:7d:44:5d:c9:1c:bc:c2:3c:
3d:5d:62:09:d7:2d:5a:f0:d1:ce:a7:ae:41:47:e8:e5:59:24:
fc:57:40:b6:67:f2:4b:91:91:7f:62:92:eb:a1:ec:2d:07:0b:
30:c3:9e:49:63:1b:c0:14:d6:c6:39:cb:0f:4e:48:17:5c:15:
10:a5:3d:48:db:c8:5c:35:50:5f:7f:9b:90:dd:ac:80:1e:4d:
45:a8:df:af:8f:d1:f9:ca:ed:89:db:4f:3b:a8:ac:5c:36:a5:
b5:7d:ad:44:13:83:da:65:6c:07:0a:1b:93:06:1f:ba:f8:70:
21:d9:0b:f5:a9:d1:01:52:50:dd:9b:d0:36:06:22:ba:f8:4a:
45:bd:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:13:11 2024 by rpki-client on console-ams.rpki-client.org