Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/SdoqiolbhDvLLsADy22Q8yZ3ZLc.roa
File: SdoqiolbhDvLLsADy22Q8yZ3ZLc.roa (raw, json)
Hash identifier: jKVZTux4gHYUkmi5vzghZMJ2i5aOoj2PXYAQSedTh4A=
Subject key identifier: 49:DA:2A:8A:89:5B:84:3B:CB:2E:C0:03:CB:6D:90:F3:26:77:64:B7
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 018CC26D5A11D3D7B0262079D2C0A4E23F50
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/SdoqiolbhDvLLsADy22Q8yZ3ZLc.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206441
IP address blocks: 185.184.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:11:d3:d7:b0:26:20:79:d2:c0:a4:e2:3f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49da2a8a895b843bcb2ec003cb6d90f3267764b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:2f:70:af:e0:12:82:c8:8a:c9:98:2d:2d:
24:60:99:b6:93:71:f4:e8:4f:3d:1f:7a:ba:bb:92:
8f:be:cd:e4:fb:19:e8:f9:a4:ed:7e:be:18:20:c9:
9a:5f:ab:b4:dc:f8:bd:6c:15:48:71:bd:21:22:8e:
b9:25:bd:55:2c:9a:05:f9:b2:e8:3a:30:f7:13:33:
b6:12:f7:00:8f:fe:b2:2c:da:8a:93:94:99:66:0f:
ec:9e:66:d9:38:ef:3f:89:4c:b6:a8:f4:4e:03:8c:
65:22:4a:02:41:07:20:43:61:83:53:f7:bf:47:9a:
d3:a0:56:f1:12:0d:e2:9e:f4:f3:b6:b8:f4:69:b6:
c5:d6:e8:a0:80:0f:39:c1:c0:a1:04:d1:5d:a3:31:
5a:e5:7c:7b:64:cb:45:26:dc:e8:5b:96:3e:4f:c1:
b9:4d:87:f9:fe:2b:75:77:b8:bc:71:b0:37:5f:ff:
9f:57:1c:b5:72:12:9c:39:f9:e9:7c:fb:93:af:fc:
4b:80:15:47:b5:c1:fc:4d:3e:9b:60:82:4d:17:d4:
73:c3:c3:37:88:bb:4b:a6:82:a8:dd:98:97:1d:7f:
ed:ec:2d:3a:33:eb:c2:b7:bd:67:f5:34:88:4c:2b:
e7:b2:f2:79:9f:90:99:e4:72:5f:07:f0:6f:9e:87:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:2A:8A:89:5B:84:3B:CB:2E:C0:03:CB:6D:90:F3:26:77:64:B7
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/SdoqiolbhDvLLsADy22Q8yZ3ZLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.224.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ee:7d:fb:4b:8b:6f:26:d2:f9:39:f5:1b:81:f2:45:ac:7f:
50:4e:7e:cd:fc:aa:99:25:5d:42:92:1d:b2:1c:c9:af:87:46:
30:f3:28:ca:c7:4f:27:05:63:e7:85:05:d3:13:48:fd:7b:dd:
84:0a:98:11:21:e0:49:cd:4b:fd:a1:78:46:37:65:bd:2f:88:
36:a9:85:b4:a3:83:0f:8a:68:4a:a1:8c:9d:e6:a1:ff:4f:7e:
6c:7d:f9:0f:fb:10:ac:a7:a4:af:85:c0:96:59:dc:b7:d3:fd:
e9:33:96:9b:1d:be:e9:a0:b2:6a:7a:60:6f:cc:e2:bf:ff:d2:
41:16:36:2c:c7:c0:32:72:36:89:c7:cc:d1:3c:f2:b1:4f:20:
42:5b:c5:3e:a4:dc:e9:b9:fa:ac:04:de:b3:42:ce:76:c3:5b:
76:6f:3a:43:58:ef:f9:5a:0f:43:0d:b6:98:f1:0e:20:ac:4a:
b5:97:b5:ac:ad:fc:e8:ed:55:33:14:74:38:e7:03:99:c5:e9:
95:3a:8b:40:a9:cb:ad:ed:ed:67:1d:37:68:f4:3b:a7:e2:b5:
d9:fa:81:83:7e:00:97:e3:43:53:a4:a9:eb:7d:5d:26:c7:82:
ab:cb:c4:24:b7:a5:17:4d:12:4a:54:4b:f1:0d:84:6e:70:75:
76:7f:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:40 2024 by rpki-client on console-ams.rpki-client.org