Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/APTOy1F_afTC4xuqPHh4RPNafJI.roa
File: APTOy1F_afTC4xuqPHh4RPNafJI.roa (raw, json)
Hash identifier: s0FCu892VvkTE8UjctcWcg/2QTvNBI2KGC+hAOXFYk0=
Subject key identifier: 00:F4:CE:CB:51:7F:69:F4:C2:E3:1B:AA:3C:78:78:44:F3:5A:7C:92
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 018E526B4353893A11B4695EEC3150F155BE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/APTOy1F_afTC4xuqPHh4RPNafJI.roa
Signing time: Mon 18 Mar 2024 16:35:45 +0000
ROA not before: Mon 18 Mar 2024 16:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215813
IP address blocks: 185.229.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:6b:43:53:89:3a:11:b4:69:5e:ec:31:50:f1:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 18 16:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00f4cecb517f69f4c2e31baa3c787844f35a7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:5d:54:d3:bc:0c:9d:32:9e:4f:3d:e1:3f:
82:d4:ee:4e:e1:21:8d:b4:85:5f:31:ce:c4:b7:9f:
89:2f:f3:7a:ff:27:07:46:74:46:a6:4e:57:00:a4:
4c:37:c6:3d:f3:3d:c3:a6:8b:a8:c2:a2:0e:18:bf:
6c:55:4f:25:6b:75:8a:ac:31:5e:c7:20:bb:c7:14:
05:c8:1c:24:48:84:07:cc:c8:53:50:42:3d:1c:ba:
6c:ff:56:c6:5c:da:69:f7:e5:ec:38:14:6f:ef:3b:
e1:c9:89:2a:10:aa:e3:e6:7c:a8:8b:31:b6:6b:3d:
45:3a:6c:c4:a1:bc:ac:2d:ef:77:48:61:50:cc:3c:
e0:8c:03:5b:c8:4e:db:2b:36:0b:02:08:ff:0b:79:
3b:4c:54:55:03:6c:55:a4:40:7a:3d:0d:a5:ce:3c:
68:c2:67:9e:81:ca:d6:5d:70:26:96:d5:d9:83:eb:
d6:11:3a:ff:8e:ae:4a:f4:6f:50:37:5b:d7:26:8c:
4c:1a:de:db:18:98:79:60:a5:35:7d:ac:e6:80:dc:
11:6c:81:f4:ce:61:bc:20:8e:ce:81:23:c5:de:06:
32:6b:3e:7c:08:ea:7a:3f:9b:cd:4b:38:03:17:02:
ef:69:54:8a:84:1b:d4:67:6c:27:9b:91:c4:28:bc:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:CE:CB:51:7F:69:F4:C2:E3:1B:AA:3C:78:78:44:F3:5A:7C:92
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/APTOy1F_afTC4xuqPHh4RPNafJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.220.0/24
Signature Algorithm: sha256WithRSAEncryption
36:53:18:9f:c1:d5:92:fc:de:f0:20:f3:ce:cc:1a:01:a6:34:
cb:c6:ec:fe:76:89:31:5a:89:09:5c:87:7d:8b:71:ca:12:69:
16:88:04:44:3a:5d:8b:e0:a8:76:04:4f:04:b8:2a:e1:ca:41:
ce:0e:38:db:1b:21:5d:85:b0:c9:f7:a7:77:54:6a:21:42:94:
76:b6:9c:93:52:71:89:87:4f:d5:7b:84:69:ad:a8:ef:51:4a:
96:9d:82:95:3a:25:47:53:7d:08:50:c9:76:98:23:31:a2:ef:
ce:d0:f6:ee:5a:68:e1:0e:9d:33:b4:2a:ab:b4:fa:34:a3:76:
1c:b8:4b:f3:ae:a3:b9:90:e1:4b:d4:4c:75:e2:be:04:86:73:
b7:0d:b5:2c:f1:4e:e3:4e:21:00:e5:4a:7d:77:8b:08:d5:db:
bf:7a:e1:42:44:6c:47:58:3b:2a:49:73:0b:04:df:95:fc:f6:
9d:ce:b0:39:a5:3f:c5:aa:ab:69:38:e2:97:a0:be:5f:b3:5b:
84:0c:6a:7d:f4:3f:a6:a3:74:e3:fd:15:cb:5c:e1:87:9a:0f:
2c:e9:ec:b6:e7:d3:1a:06:23:f8:97:82:b6:83:bd:bd:58:e3:
fc:a8:ee:c2:cc:1f:14:cd:ab:35:a1:8d:97:15:4f:cb:f1:ac:
43:f9:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:50:31 2024 by rpki-client on console-fra.rpki-client.org