Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/1qHWEUFWJMCtXPnmVFzG6jgSJkk.roa
File: 1qHWEUFWJMCtXPnmVFzG6jgSJkk.roa (raw, json)
Hash identifier: wXcVrrlO3/qi4sREZ2LZKvg3kN2kKrKiBHjZSJrwKBg=
Subject key identifier: D6:A1:D6:11:41:56:24:C0:AD:5C:F9:E6:54:5C:C6:EA:38:12:26:49
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019121D7A003CD9D104D22ACDD4AF7ACE8B0
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/1qHWEUFWJMCtXPnmVFzG6jgSJkk.roa
Signing time: Mon 05 Aug 2024 09:21:04 +0000
ROA not before: Mon 05 Aug 2024 09:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 185.222.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:d7:a0:03:cd:9d:10:4d:22:ac:dd:4a:f7:ac:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Aug 5 09:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a1d611415624c0ad5cf9e6545cc6ea38122649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:e9:57:96:a7:13:66:8b:0c:46:fe:1d:d6:
00:5f:a5:a8:d0:40:40:ff:04:1f:34:fa:0b:1f:5b:
8a:85:e0:2b:c2:cd:40:da:8e:b3:6b:56:21:cb:fe:
cb:57:74:d3:ac:ee:9f:2f:ac:b3:67:24:e7:1b:1f:
c3:9b:18:2c:b5:00:fb:46:6e:68:d0:22:4c:d4:72:
72:b1:92:aa:05:70:e4:76:99:00:37:c0:59:4a:f8:
0b:95:fc:36:d5:aa:e6:66:b4:cd:d8:fe:d1:0b:38:
21:7f:21:bf:b1:d8:a0:7e:83:37:c9:98:da:08:ca:
a0:5f:a9:76:c8:1d:65:72:ae:1e:04:6a:27:a0:fa:
34:f7:d8:0c:3a:8c:8f:ac:2e:ce:92:49:f3:d0:26:
d2:26:14:64:4c:8e:7d:a3:20:54:c2:a9:16:f0:f3:
f0:2b:1a:08:e1:28:10:ed:72:b8:1c:1e:19:59:8b:
2a:18:aa:f0:72:9c:77:80:15:1b:3e:d6:71:31:6d:
67:3d:c6:c7:80:52:01:af:4d:2c:1f:58:05:ef:2b:
1f:a9:57:ff:6b:88:5a:25:38:b1:16:1b:2f:d4:4c:
c9:d0:92:0c:56:0a:9b:72:c3:a9:c7:dd:6a:98:de:
ef:43:f4:1e:60:c7:0a:d6:2a:c6:f7:42:48:b1:e4:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:D6:11:41:56:24:C0:AD:5C:F9:E6:54:5C:C6:EA:38:12:26:49
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/1qHWEUFWJMCtXPnmVFzG6jgSJkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
32:7d:52:fc:57:56:9d:cd:80:62:fb:11:5a:75:96:84:c1:d6:
73:29:ca:26:f8:ce:48:93:72:69:a4:d1:71:12:43:23:e7:4f:
3a:6e:6c:cb:20:c8:ea:ec:86:a4:5e:df:02:28:03:80:a6:f6:
e4:17:25:09:cf:34:77:96:54:fa:77:ec:68:e4:dd:cd:e3:93:
b8:28:90:3e:83:9a:b2:1e:8b:13:7e:90:33:4c:2e:da:fe:4a:
cc:b2:0b:2e:44:b1:d7:1e:d4:f8:0d:cb:9f:7f:ff:af:69:fd:
97:8e:51:1b:d4:d9:af:08:e4:a9:02:4d:c0:39:66:12:84:0d:
8b:f5:05:de:25:66:4d:c8:08:6f:dc:76:ac:45:c8:b9:63:23:
08:09:a0:38:3c:93:4c:37:f8:cf:48:b9:fc:e2:00:a1:9b:92:
9b:21:f8:e2:48:d8:8d:82:d3:94:70:e8:1e:ec:0e:4b:74:a5:
d1:b3:a4:3c:26:4b:81:54:02:ee:ef:c4:5c:25:a0:0a:fc:a6:
3e:be:6a:5d:8a:6d:5d:11:dd:f5:a7:47:3a:0b:90:43:9e:3f:
e5:61:8c:77:0d:e5:31:f6:7c:4b:93:64:dd:01:ba:1b:6b:67:
ff:99:fd:b1:b0:f6:ac:7d:93:c3:df:36:1a:29:ff:25:15:a8:
5f:f3:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:16 2024 by rpki-client on console-fra.rpki-client.org