Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/I4bL5zED6vILjrtcNNx3JVmVd9w.roa
File: I4bL5zED6vILjrtcNNx3JVmVd9w.roa (raw, json)
Hash identifier: xSIJmjkG9ikTU+otgJcs5IXqrRBKlN2PKmqaCw8O590=
Subject key identifier: 23:86:CB:E7:31:03:EA:F2:0B:8E:BB:5C:34:DC:77:25:59:95:77:DC
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC72769FD3A880C4BC496E22A3049215E
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/I4bL5zED6vILjrtcNNx3JVmVd9w.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200115
IP address blocks: 85.219.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:fd:3a:88:0c:4b:c4:96:e2:2a:30:49:21:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2386cbe73103eaf20b8ebb5c34dc7725599577dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:a2:6d:8e:29:f5:95:49:8d:cf:d9:e4:46:
ed:ee:73:3c:82:2d:a2:27:f2:a3:9c:c7:4c:e4:0a:
b3:cc:bc:a9:a2:5e:10:f8:69:94:fb:7f:14:ef:e7:
46:3a:24:53:60:dd:61:1d:e9:a8:f5:8e:f1:da:d0:
7c:9e:93:2e:f0:3a:59:33:f5:67:41:a7:03:9a:90:
26:e4:d8:c4:4d:0f:ab:be:30:08:ea:54:f8:a0:c9:
08:cf:cf:bf:84:c8:f2:ab:33:60:54:74:9d:ad:e8:
d5:4b:5d:36:0d:c7:fc:ea:19:df:82:f5:04:09:ec:
88:08:75:a4:0d:46:c8:35:a8:77:af:af:c9:5d:5e:
4d:4b:26:87:d5:7b:d4:3a:b8:35:3b:a2:7f:ac:1e:
45:df:92:5a:06:be:c6:aa:b4:8d:e6:bb:96:0f:6e:
de:fa:c4:7c:67:0c:cf:9d:3e:97:2c:23:20:8e:cf:
82:dd:80:c8:20:5e:07:3a:32:df:d5:05:ea:cf:d5:
ea:91:f3:96:02:1a:18:99:89:ed:ec:38:ac:38:6d:
a1:68:e3:fa:95:a8:d1:a5:ab:1a:01:8b:e1:49:85:
e0:da:de:ed:8f:73:fc:aa:f5:d2:f8:5f:98:08:4f:
73:8f:cf:29:12:fa:51:84:77:25:7b:c0:f8:62:aa:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:CB:E7:31:03:EA:F2:0B:8E:BB:5C:34:DC:77:25:59:95:77:DC
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/I4bL5zED6vILjrtcNNx3JVmVd9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.173.0/24
Signature Algorithm: sha256WithRSAEncryption
36:23:d2:8e:4f:b4:2a:45:db:eb:5c:5d:76:14:2f:91:f8:c5:
b4:31:89:f7:63:e2:a8:d2:71:52:dd:31:e7:18:f0:45:56:23:
95:41:e8:03:ed:0b:15:5d:0a:67:1b:24:52:2c:62:8b:57:ff:
d6:ea:cb:36:69:bb:a6:ae:a7:8c:97:11:2b:88:a1:4d:a6:d6:
08:cd:dd:47:13:50:cc:d4:50:c9:77:79:70:94:22:71:83:42:
72:00:b5:b0:f1:71:4e:14:52:8c:5a:1e:1b:97:19:a8:73:3d:
6b:7c:1b:ab:0c:52:b2:f9:6d:3f:42:72:b7:2f:3f:80:79:c5:
f5:59:d4:36:bb:29:94:e5:ba:a2:00:23:ae:f6:ae:a6:24:b6:
97:26:fe:f6:2e:2e:d4:64:0e:91:ff:9f:33:7a:f4:af:02:5c:
22:ab:62:58:11:6a:ea:22:cd:46:d7:90:6e:5c:1e:38:00:46:
52:ac:bd:e6:a4:b4:3f:d4:07:36:da:f6:32:5a:55:eb:96:17:
0c:53:3b:14:34:a4:40:ae:c3:ce:11:bc:f6:9c:25:01:24:2f:
50:0b:53:7f:74:d9:a6:27:f7:0d:e6:b6:f0:12:e5:c4:70:10:
d6:eb:b9:06:8d:8b:8f:bc:d5:99:0f:d7:a4:dd:13:6e:6b:63:
72:12:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:32:28 2024 by rpki-client on console-ams.rpki-client.org