Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iuEjmIT9xqq45arxZ8MovXe1lAA.roa
File: iuEjmIT9xqq45arxZ8MovXe1lAA.roa (raw, json)
Hash identifier: m+8vNan6Lzht7gjj5fY41yuUHc+pRilVZ2nR5GtGAvc=
Subject key identifier: 8A:E1:23:98:84:FD:C6:AA:B8:E5:AA:F1:67:C3:28:BD:77:B5:94:00
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8CC956C37C1138197667C6624510
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iuEjmIT9xqq45arxZ8MovXe1lAA.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58119
IP address blocks: 185.220.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:c9:56:c3:7c:11:38:19:76:67:c6:62:45:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ae1239884fdc6aab8e5aaf167c328bd77b59400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:9e:b0:b8:dc:d5:3a:2f:9e:17:2b:52:c3:
41:97:e3:32:ec:9c:ac:48:29:17:bc:be:cb:d1:65:
72:ab:4d:95:ab:d1:a1:a5:8d:69:35:92:f9:d5:54:
a1:76:bc:80:be:ed:99:b7:94:5b:e9:42:31:af:58:
43:cd:15:05:f7:48:b7:c7:b3:aa:3c:3b:d3:07:27:
a1:42:c4:67:82:36:07:6a:38:bd:4f:18:b9:75:f4:
3b:d0:91:cd:d8:ae:dd:35:30:d6:f6:e5:c9:7c:51:
bd:77:ed:1e:63:54:cc:11:82:ec:ef:b7:5d:5b:42:
6f:c0:e1:20:04:46:c8:53:6d:54:6b:12:d0:2d:2e:
77:53:bb:ae:2e:af:c6:19:3a:e1:e5:2a:38:16:59:
3a:06:e4:bb:e3:8a:da:61:39:87:32:c6:3c:bf:a4:
d3:66:48:88:51:a7:26:48:85:a2:58:fc:70:5e:66:
11:2b:21:ec:f5:34:f4:ed:ed:ab:96:20:5d:58:ed:
98:af:37:20:62:4f:72:b4:ea:a7:77:e9:f2:b0:09:
e2:21:57:f6:68:69:cb:af:a6:1f:3a:66:b9:4b:26:
4d:68:bc:96:26:9b:88:6b:c4:d9:71:a1:94:59:52:
42:99:a9:e4:3f:7f:48:44:b8:43:d2:61:1b:6e:cc:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:23:98:84:FD:C6:AA:B8:E5:AA:F1:67:C3:28:BD:77:B5:94:00
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iuEjmIT9xqq45arxZ8MovXe1lAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.144.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:81:b9:64:d4:77:90:72:36:8d:9b:19:db:ad:a9:25:3f:40:
ed:3c:fc:44:7b:4e:40:c4:21:a3:01:78:3c:38:52:61:45:a0:
4b:8f:e5:e5:ef:fc:bd:23:e7:d3:24:c1:19:05:05:47:9f:66:
ac:74:42:a4:82:2a:a7:4e:66:8f:b9:2e:e6:d8:d4:90:2d:3f:
41:e5:aa:16:63:1e:4d:2a:55:d6:2e:f8:12:f8:18:34:79:54:
ce:0f:d3:ad:87:41:96:a5:8c:27:5c:c9:b8:d1:88:b6:a7:ed:
c0:84:b2:5d:5b:5f:9f:05:6e:5f:74:95:aa:27:ab:0a:fb:00:
44:44:ae:7d:e0:8f:2a:1d:0d:9f:b9:2f:9e:1d:76:4c:2a:90:
d7:50:f9:c1:d0:98:bd:d0:4e:e0:bb:ff:65:02:f2:6a:78:41:
1d:01:14:05:e5:90:38:8c:a4:ee:38:76:e6:db:01:10:aa:53:
64:5f:55:1d:32:e5:04:e1:0f:12:d4:98:ad:52:a5:e4:9e:cd:
13:9f:80:5c:44:e4:cd:84:e7:c9:1a:6d:d8:d8:84:55:c8:1a:
61:4b:e5:98:01:77:1c:0b:a0:a3:94:02:a0:7a:99:06:19:24:
10:3a:4c:a4:11:4e:22:8c:2e:04:64:80:e0:3a:7d:c9:ea:04:
0f:ae:32:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:49:10 2024 by rpki-client on console-ams.rpki-client.org