Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/__NAiQxoOU06TmAgIG8WpIyYZQI.roa
File: __NAiQxoOU06TmAgIG8WpIyYZQI.roa (raw, json)
Hash identifier: lzdB1R7THQGA2rYR2VxcFVl9KZA8hU2SQsUaXnMuudY=
Subject key identifier: FF:F3:40:89:0C:68:39:4D:3A:4E:60:20:20:6F:16:A4:8C:98:65:02
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 018CC801D3EBFCC6B477FC5179A505253BDB
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/__NAiQxoOU06TmAgIG8WpIyYZQI.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199229
IP address blocks: 185.85.144.0/22 maxlen: 22
2a05:ae80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d3:eb:fc:c6:b4:77:fc:51:79:a5:05:25:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fff340890c68394d3a4e6020206f16a48c986502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:25:dc:10:c6:ec:19:53:11:4f:41:48:84:
21:00:01:5a:39:02:c1:3a:47:de:49:fa:da:88:b9:
32:4c:a3:a5:90:8f:25:fd:33:6b:61:ae:b9:25:03:
31:23:b4:ac:c6:91:a0:7c:94:1f:a1:ff:6a:89:b8:
a9:12:17:ec:52:a5:ec:2a:9b:f4:2d:94:e1:6b:92:
a8:28:ec:19:49:0b:8a:22:37:5a:3d:e9:1e:18:e9:
7f:8f:59:86:30:28:2a:08:2e:17:4b:6e:6e:e6:79:
6c:ac:04:34:a9:77:b9:2d:4e:3a:dd:7a:6f:32:44:
9d:ad:6b:64:a7:96:9d:d0:ff:70:a7:5e:b2:23:e2:
0f:1d:d0:79:49:f9:28:b1:07:8c:19:e9:e1:94:30:
cf:aa:ac:a7:cc:85:97:27:cf:1d:79:01:a6:49:0a:
52:1c:47:6a:0a:63:5e:be:7b:1d:ab:36:37:27:a3:
2e:40:72:3e:1e:64:b6:4e:b1:82:4c:cc:be:cf:5b:
df:c2:23:2c:a9:d7:32:30:d6:72:33:e3:2e:04:84:
2c:c9:97:86:bc:e9:b1:d2:01:56:52:7d:f5:33:4b:
1f:ce:ae:7d:9b:d2:52:75:7b:f1:96:1d:06:a5:61:
2f:74:da:30:95:ca:a2:35:64:49:46:28:a3:df:25:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:40:89:0C:68:39:4D:3A:4E:60:20:20:6F:16:A4:8C:98:65:02
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/__NAiQxoOU06TmAgIG8WpIyYZQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.144.0/22
IPv6:
2a05:ae80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:ff:60:2c:81:2e:b3:55:70:d1:31:32:4c:85:00:81:ce:cc:
ad:90:de:22:da:82:70:43:e0:22:18:58:6d:f4:4a:24:d9:30:
51:22:0d:87:d3:49:d8:94:c4:cf:2e:4b:3d:ce:97:8a:01:6e:
5e:74:5d:fa:d7:08:36:e1:9e:a4:2c:ca:f4:98:bb:14:e9:58:
d5:d4:b3:0f:f8:47:36:75:1b:36:c5:42:9b:2a:b5:fd:e5:78:
8e:fa:13:93:27:80:bd:d4:61:12:31:24:56:af:b3:78:d8:a2:
2d:0b:a2:13:28:c2:25:af:19:29:8a:e0:2f:23:3f:a0:be:64:
67:e9:c3:7b:50:1a:50:91:85:5b:3b:c5:2c:f3:a2:fc:4d:76:
f3:41:4b:66:19:5b:08:4a:4d:fa:b2:27:fb:48:ec:a0:fb:aa:
a3:d1:0f:2d:84:8d:f3:70:0a:4c:81:b4:e5:1b:ed:9d:c6:e9:
3f:67:9f:e1:24:64:12:7a:18:64:db:e5:7a:d0:37:62:bd:9e:
c0:0d:4b:cb:53:8f:4c:35:e7:61:a9:04:6d:cf:49:3d:c6:39:
ad:e5:63:08:b9:99:cf:e3:07:03:15:d5:7b:a6:ed:cc:fc:25:
07:48:55:bf:ec:32:ba:69:dc:f5:c7:df:5e:5e:63:79:8d:27:
85:ad:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:35:53 2024 by rpki-client on console-ams.rpki-client.org