Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/jQ3D5xL_a3lOF6YH9fGLK0r6pBY.roa
File: jQ3D5xL_a3lOF6YH9fGLK0r6pBY.roa (raw, json)
Hash identifier: 7A3uH2UeJwZf9FJIFGRdr7pyipkslPh/kxSqPdItrmQ=
Subject key identifier: 8D:0D:C3:E7:12:FF:6B:79:4E:17:A6:07:F5:F1:8B:2B:4A:FA:A4:16
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 018CC26CFFBC50EDD748F67A0BF7E2302C8F
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/jQ3D5xL_a3lOF6YH9fGLK0r6pBY.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8791
IP address blocks: 185.121.16.0/22 maxlen: 22
185.121.16.0/24 maxlen: 24
185.121.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:bc:50:ed:d7:48:f6:7a:0b:f7:e2:30:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d0dc3e712ff6b794e17a607f5f18b2b4afaa416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:eb:9b:e1:69:74:ff:33:c5:e0:06:fb:34:
f6:64:ab:d4:d0:23:d8:58:b4:ed:c7:a5:8d:31:fd:
ba:77:10:9e:93:ec:0c:6a:2e:55:ba:76:42:31:4e:
66:ef:44:37:5d:6a:61:bd:70:f4:5a:c8:c7:4b:6c:
9d:c2:6a:04:d2:57:a7:f6:dd:ca:b8:3f:52:f7:86:
0a:ca:2e:ac:54:d5:e9:a0:c2:c9:2b:03:67:2c:22:
ca:ea:55:28:cb:20:8b:4d:4a:89:75:7d:c6:94:22:
50:94:a6:3b:63:5d:5d:f0:0f:71:2e:ca:62:b6:09:
e8:08:f8:ad:f0:03:e1:51:d1:a4:93:cc:bb:b2:08:
c3:f3:ed:49:71:8a:1d:13:f2:f7:46:5e:55:aa:41:
a0:81:15:c9:21:bc:81:17:8b:b4:89:e4:a6:c2:20:
f7:d3:21:71:8e:fc:c3:a7:e3:e6:4e:1b:89:80:e9:
64:d0:35:86:be:84:1a:63:2d:b1:11:0d:65:66:79:
e8:61:5e:b8:b2:65:18:ef:a1:40:8c:69:a3:80:9d:
a0:37:d3:8d:4a:94:31:75:ff:0d:f9:4c:80:d5:e8:
be:37:22:94:4b:a6:22:81:38:b6:6a:15:86:2d:a8:
cd:52:49:a8:94:70:89:53:6e:45:eb:ce:3f:60:47:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:C3:E7:12:FF:6B:79:4E:17:A6:07:F5:F1:8B:2B:4A:FA:A4:16
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/jQ3D5xL_a3lOF6YH9fGLK0r6pBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:84:4c:10:08:51:22:fe:f2:10:73:4f:64:0f:09:d8:f5:63:
19:ef:ff:0d:05:0f:19:a9:91:66:c0:bf:74:b0:a4:13:9f:f1:
67:bd:95:b6:37:a8:22:30:12:5a:5b:ff:33:73:7b:98:85:d6:
ef:ea:ea:e5:13:32:5b:ea:c2:9e:04:5f:4d:95:1f:c4:6f:9f:
5d:7f:64:c0:5e:27:9d:e8:32:ae:dc:8f:bf:38:fe:52:57:85:
1d:56:11:10:6f:53:7f:dd:01:4e:e7:7d:2f:8c:09:55:92:4d:
30:c8:23:38:d0:7d:63:29:7b:c4:b0:d5:ee:b2:f7:e2:55:32:
2e:f1:bb:b3:bf:25:68:82:21:de:f7:72:92:d4:81:07:09:74:
4d:cd:14:92:83:c0:b2:2c:d6:bc:6b:92:f2:dd:be:b5:c4:4a:
6a:64:06:cc:87:51:a4:b8:53:b4:dc:16:64:fd:9f:24:5e:e8:
65:f0:1d:d3:7b:94:c8:cb:c4:e7:ab:2d:2d:4a:5a:46:b0:7b:
de:49:a7:b2:e2:a5:32:60:18:e3:93:f6:d8:4a:83:5f:26:6a:
6a:de:27:8d:7d:a0:22:8a:4d:e0:7e:b3:c4:84:eb:00:b4:33:
45:36:89:a8:f5:86:8d:6f:1f:38:9e:0d:1b:19:2c:2b:1f:b2:
81:64:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:39:04 2024 by rpki-client on console-ams.rpki-client.org