Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/p7lRYsyCjwV_V-lTBGNvUYecgQw.roa
File: p7lRYsyCjwV_V-lTBGNvUYecgQw.roa (raw, json)
Hash identifier: 3uz1uC2c/cAMY00DaA53uTgu+C0eT2ze89ImoktkI7g=
Subject key identifier: A7:B9:51:62:CC:82:8F:05:7F:57:E9:53:04:63:6F:51:87:9C:81:0C
Certificate issuer: /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial: 018CC2DB211281D90F7584EA9DB0BF8F7486
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/p7lRYsyCjwV_V-lTBGNvUYecgQw.roa
Signing time: Mon 01 Jan 2024 02:29:49 +0000
ROA not before: Mon 01 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48095
IP address blocks: 185.204.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:21:12:81:d9:0f:75:84:ea:9d:b0:bf:8f:74:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7b95162cc828f057f57e95304636f51879c810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:58:33:d3:ba:b1:98:7b:b1:ee:19:61:9d:
47:d7:9b:3c:3c:48:16:1b:5a:21:f1:49:6c:82:6d:
9c:da:da:8b:83:a2:30:a4:83:1c:01:f6:5e:51:53:
95:2f:83:76:21:1d:52:fc:4e:a4:58:13:5e:1c:e3:
d3:9d:26:e6:b4:eb:f1:25:b1:93:c5:b7:c8:59:e2:
da:91:4e:4a:07:8d:90:bf:ce:3d:11:b5:cd:d2:62:
1d:de:38:27:8d:77:a6:0c:26:26:b8:4e:10:f4:32:
35:dc:e2:21:06:56:43:cd:b7:c7:c9:fb:22:a0:2f:
d6:3e:86:b7:f6:33:be:38:59:e4:8f:2a:d9:3a:a4:
8a:3f:f4:5a:35:4d:ee:c4:89:0a:c0:39:e7:c1:fc:
8c:d5:77:d4:dc:60:b0:c6:4d:76:64:c7:11:57:56:
ee:14:12:81:e0:82:56:2b:73:19:00:44:11:d6:9c:
0f:fc:40:d8:45:ad:f5:73:e0:04:7d:28:a1:fa:48:
a1:97:1a:56:fa:2d:8c:40:60:0b:bd:75:68:50:c4:
2d:34:7d:93:19:b3:a3:1c:f3:48:e1:d0:c7:5a:1c:
5b:c9:f3:55:12:d2:37:7e:a5:ed:6b:44:66:ea:15:
29:96:96:38:47:d7:a5:2e:80:09:5d:e3:a0:b5:16:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:51:62:CC:82:8F:05:7F:57:E9:53:04:63:6F:51:87:9C:81:0C
X509v3 Authority Key Identifier:
keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/p7lRYsyCjwV_V-lTBGNvUYecgQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:47:37:5c:8a:93:f0:b9:d3:5b:cc:0c:50:d4:8a:35:c8:81:
fe:e5:f3:fb:6b:0a:68:b4:63:12:6f:c1:55:8f:1d:ad:65:e3:
62:9e:9d:b2:b9:dd:f3:09:fc:dc:f8:6d:7b:20:f2:5c:fe:bc:
50:8d:bc:a4:1f:d7:29:4e:b6:77:d9:71:fe:4d:0a:67:2a:d6:
3d:e1:ee:58:38:bf:c9:1a:78:5f:b8:95:96:a3:7e:16:db:41:
54:f7:52:01:8d:90:75:45:b3:76:5d:c3:0e:9e:fb:45:dd:f9:
fb:85:4c:c6:3f:a9:7d:0c:76:e3:3e:8d:be:2f:e2:f0:59:1e:
a0:96:05:0f:f5:f4:84:58:ce:c6:7f:a0:59:80:15:83:2a:db:
9f:fa:cf:01:2f:3d:e9:f3:4e:20:2d:79:93:00:62:fe:e4:19:
23:29:13:80:b1:6f:91:ea:cc:c5:b2:77:45:94:34:35:d5:3b:
87:73:cf:34:6c:7e:b5:41:93:09:35:53:da:46:90:c1:0e:67:
49:dc:14:21:c3:c9:c5:b1:1d:34:2c:61:99:7e:11:f8:f4:e5:
0c:88:fc:d0:11:c9:ca:c8:9f:0b:62:76:18:15:6c:ce:5c:ff:
ba:89:6c:d4:9b:7b:c5:bd:ee:24:b9:65:19:b6:d0:fc:48:57:
6e:1c:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:44:38 2024 by rpki-client on console-ams.rpki-client.org