Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_wrzFiswG9htIj_ErYQAzg_eE2U.roa
File: _wrzFiswG9htIj_ErYQAzg_eE2U.roa (raw, json)
Hash identifier: fKR9wITzDVAC44ITwHM52zKfk2MaGKbYol7NZHpncDk=
Subject key identifier: FF:0A:F3:16:2B:30:1B:D8:6D:22:3F:C4:AD:84:00:CE:0F:DE:13:65
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB2FD6DE5EDC3CC4BB99561C116E0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_wrzFiswG9htIj_ErYQAzg_eE2U.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211641
IP address blocks: 185.109.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b2:fd:6d:e5:ed:c3:cc:4b:b9:95:61:c1:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff0af3162b301bd86d223fc4ad8400ce0fde1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:84:6b:ce:e4:62:05:b6:98:3b:c7:db:c7:63:
cb:8e:14:9c:da:b9:f6:27:34:47:97:1b:65:e8:80:
84:bf:9a:93:32:1c:0e:e5:bd:b1:3e:0b:51:54:98:
b3:67:bd:ab:0b:bd:9a:ee:0a:db:8c:7a:1c:ce:09:
2b:d3:7b:2b:31:69:0e:e2:a4:92:58:1b:f2:a5:e0:
fb:02:0a:d1:5b:3e:a2:ac:c7:d4:45:2a:5a:90:b0:
e1:2b:22:ee:4c:a9:84:1b:35:db:99:a0:8d:9d:55:
ee:15:26:91:af:58:3f:f2:45:85:25:65:20:b0:d7:
f8:8a:75:fa:62:4c:5b:3c:27:33:92:8d:a0:7a:51:
44:ca:85:58:f3:41:0b:4f:0e:c2:65:91:c4:99:e4:
6a:b4:37:ce:29:0e:0f:63:3b:a3:fc:bd:14:49:4d:
c3:c8:60:45:41:0b:48:fd:7e:e1:ec:31:a5:b1:8b:
a2:88:53:48:38:48:a5:2c:1e:27:05:c4:e0:dc:b2:
db:d8:39:2c:8f:76:10:51:57:54:52:7e:82:32:c7:
70:26:03:2c:e7:52:1d:ab:74:78:09:cd:1b:c6:be:
66:73:17:e5:85:08:8a:e8:9f:62:5e:19:68:f4:fa:
a0:2e:80:63:27:51:19:31:17:14:35:b5:72:57:0e:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:F3:16:2B:30:1B:D8:6D:22:3F:C4:AD:84:00:CE:0F:DE:13:65
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_wrzFiswG9htIj_ErYQAzg_eE2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e4:19:c6:42:5d:93:ee:a0:84:da:ac:f4:49:15:c1:7d:3e:
4c:9c:bf:6b:34:bf:e1:46:ae:78:56:57:b0:47:a0:d2:44:3f:
18:94:6f:1b:a3:f7:7d:3b:f1:68:67:02:2d:05:c0:c2:d6:4b:
7e:ad:b3:e7:c5:f1:33:ba:3b:aa:41:92:43:5b:9e:8b:0c:72:
d7:81:17:4f:a5:60:43:9d:c9:c1:4e:ce:81:4e:1c:53:80:10:
7c:23:1f:8a:d9:a4:d4:ba:12:29:98:08:7a:11:bf:86:3d:e5:
f4:03:5b:97:f5:b9:0a:e6:2a:e8:99:c2:1b:b6:53:ff:09:09:
50:42:f5:24:aa:a1:e3:aa:8e:8a:93:1b:be:9c:b4:23:ae:66:
97:ea:03:79:8e:e4:f4:fa:23:f0:6c:13:c1:66:02:6d:91:28:
f5:15:31:3e:24:9c:eb:1c:e8:02:26:09:55:ad:b3:4b:fe:e9:
1a:10:af:a5:91:80:8b:94:1c:c5:0c:3f:90:09:d2:b2:96:c1:
9e:0a:f1:b6:06:b0:20:6a:a9:eb:a4:d7:0a:44:75:53:ad:21:
76:cb:dd:7a:80:43:82:4f:95:c7:b2:1b:1a:5c:26:5c:38:be:
a2:7e:7d:be:70:67:a6:c4:cd:5c:d5:47:d5:1e:6d:6e:d7:34:
38:7d:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 08:49:12 2024 by rpki-client on console-ams.rpki-client.org