Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RO27tQrJpfJjN1cc5AZRIYb5nCY.roa
File: RO27tQrJpfJjN1cc5AZRIYb5nCY.roa (raw, json)
Hash identifier: EZJi2dON0h08UqX+jUGgPL7yVWVIuOAdMczEdC6aFsA=
Subject key identifier: 44:ED:BB:B5:0A:C9:A5:F2:63:37:57:1C:E4:06:51:21:86:F9:9C:26
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8EDB5CCBA8EAF854976B06ADF4C5
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RO27tQrJpfJjN1cc5AZRIYb5nCY.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 185.220.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8e:db:5c:cb:a8:ea:f8:54:97:6b:06:ad:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44edbbb50ac9a5f26337571ce406512186f99c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:de:54:18:7e:a4:57:fa:b7:0d:7d:d3:36:
b4:fb:54:e9:ef:7a:cd:a0:6d:82:58:03:d6:87:97:
17:8e:e9:4f:a9:bc:93:6d:72:6e:89:f4:4d:02:e2:
ee:b4:34:25:fe:41:fa:22:33:9f:e3:24:66:ff:74:
82:a8:d2:29:9f:0b:dc:d6:00:15:81:b3:2c:79:ae:
5e:03:f3:15:10:fa:7f:74:bd:8b:72:a9:ba:a5:73:
46:d3:05:6e:89:d4:a8:f8:8d:f8:58:2c:b4:a6:45:
29:08:6e:88:94:cf:9b:2b:c0:ac:23:7a:9a:02:e0:
d6:a9:2d:64:40:51:a5:a8:8e:be:8b:a1:8b:de:b0:
ed:5d:08:a5:e6:6f:d9:ab:7c:9a:6e:70:d1:e8:3d:
ad:88:4e:92:34:08:05:b2:b4:c2:00:e8:63:be:7c:
00:fd:92:45:40:b8:1b:04:1d:a9:b9:14:b2:b6:ef:
52:1f:82:4d:ca:80:49:58:a2:14:3a:1a:5e:6c:9a:
1b:97:eb:bc:28:42:b6:5f:11:5f:fd:62:09:5a:ea:
f5:18:82:d1:d5:b2:a1:21:8a:38:d3:2c:ea:cc:5a:
a5:b6:45:89:09:8b:a3:7b:aa:0f:8e:cd:90:30:28:
93:8d:58:58:27:24:a3:b8:5f:f1:69:12:79:66:2a:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:BB:B5:0A:C9:A5:F2:63:37:57:1C:E4:06:51:21:86:F9:9C:26
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/RO27tQrJpfJjN1cc5AZRIYb5nCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.146.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:e2:7c:eb:93:3a:e9:d5:93:19:48:fe:4e:1b:f1:77:8c:
a7:ba:46:5e:47:25:72:e6:2b:47:90:55:dd:82:4d:16:1d:8e:
1e:89:ca:a9:d0:a8:57:82:c2:04:4c:d5:c0:4d:6e:2e:bc:22:
0f:10:67:18:85:ea:5d:1f:0e:29:70:f6:a8:87:18:c3:56:74:
29:ca:4a:45:5e:e4:10:d1:84:b7:0f:16:0e:06:1d:4e:c7:6a:
00:c9:14:e2:33:45:82:ee:a1:11:03:dd:6f:96:29:f0:94:8b:
4b:54:d4:77:fd:16:3a:75:07:17:56:a6:01:3c:54:60:8c:ff:
fe:1d:14:40:11:37:2b:b5:2e:99:17:04:2b:f8:6f:40:c3:d9:
f5:a7:63:e9:e9:c4:11:e9:a7:f3:e1:5e:35:24:c9:b3:79:89:
e9:91:7a:0b:d8:c7:dc:18:5f:48:a3:8e:0e:45:39:57:ef:4d:
11:3d:33:62:f4:24:b7:55:52:b5:99:d1:06:47:a6:1a:43:32:
8c:fb:8e:9a:e5:d0:91:ca:47:73:d7:68:de:8a:72:0f:5f:84:
af:e0:cd:b4:ab:16:12:3e:50:85:f8:a3:66:0a:09:99:14:26:
96:22:9c:6b:33:d4:89:09:e3:71:6d:3f:d0:51:7f:24:8b:2c:
5e:a7:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:45:42 2024 by rpki-client on console-ams.rpki-client.org