Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/I0oEGIjPf8-ShZylnpV7oSn_ewI.roa
File: I0oEGIjPf8-ShZylnpV7oSn_ewI.roa (raw, json)
Hash identifier: 2y7vsFWBqyLtzgG8/5nXJkVsuaN+qqS+7mkGuHxXrfc=
Subject key identifier: 23:4A:04:18:88:CF:7F:CF:92:85:9C:A5:9E:95:7B:A1:29:FF:7B:02
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DABFECC4CC530FB4CC0B8B5684D87F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/I0oEGIjPf8-ShZylnpV7oSn_ewI.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41531
IP address blocks: 185.214.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:ec:c4:cc:53:0f:b4:cc:0b:8b:56:84:d8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=234a041888cf7fcf92859ca59e957ba129ff7b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:85:e3:77:99:d8:ae:8b:b4:96:5c:97:36:
04:8e:c4:83:00:b6:7a:2a:85:80:f3:0c:22:04:b9:
78:8d:47:6d:28:70:f7:95:83:41:73:7a:b9:8a:7b:
07:fe:a8:86:59:28:2f:9b:ac:1a:68:3f:f3:41:3d:
e1:d0:56:46:19:5f:35:60:53:e3:f5:da:0a:34:da:
45:0b:0c:52:6e:35:61:53:b5:43:b4:31:e9:2c:21:
9f:eb:e1:28:7c:24:fa:bb:53:49:6f:91:74:44:1e:
58:2b:0c:e7:cb:fd:1f:e7:c9:da:98:fc:4f:30:55:
9c:18:14:55:a1:b6:54:04:b6:3c:6e:eb:0b:2e:1f:
92:e5:1f:66:13:97:f2:d5:d2:33:a0:d0:9f:a6:0c:
d1:8b:b3:85:3a:a1:fa:5b:5c:cc:06:ea:e5:a1:69:
01:c7:42:92:a1:cc:3a:59:b9:c8:ce:31:81:2b:08:
0a:3b:e7:78:4e:bd:83:1b:dd:3d:e1:2a:16:fb:e8:
05:de:07:29:68:a6:02:df:92:05:69:61:6f:03:3b:
2e:3c:17:37:ba:bc:89:d5:6f:d7:74:97:43:c6:99:
ac:53:eb:46:c0:1d:70:49:32:00:75:2d:fb:ee:b6:
f3:42:6d:c6:88:27:3e:2e:5a:69:8b:e3:65:0c:fd:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:04:18:88:CF:7F:CF:92:85:9C:A5:9E:95:7B:A1:29:FF:7B:02
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/I0oEGIjPf8-ShZylnpV7oSn_ewI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:9b:b9:9b:1b:2c:90:db:4a:4b:e7:42:56:87:ce:59:d7:17:
26:a8:93:38:52:a1:69:52:08:80:e0:55:56:74:4f:a7:1f:eb:
c9:99:58:11:f3:68:9d:ce:d4:09:58:f5:74:d0:d7:ba:15:a8:
21:26:f8:2a:91:7c:98:f2:4c:a4:4e:81:24:9a:06:85:ee:38:
fa:b5:9e:c6:a5:c8:9b:5c:06:b2:70:1f:96:3f:a8:f6:a6:e5:
21:48:a1:eb:5c:dc:69:2f:a0:bb:38:b3:9d:8e:53:7c:a1:99:
0f:c6:4c:bd:51:c9:bf:cb:43:db:f4:41:5a:d4:79:5b:21:b5:
8b:f7:9d:2d:a0:c8:90:f8:82:94:a2:ca:6d:d6:ae:73:47:c4:
4f:7b:50:df:42:d6:48:af:00:69:91:d7:6c:17:6e:16:9e:3e:
54:65:35:f6:00:07:9e:62:3c:be:27:e3:94:ef:51:54:b7:4d:
79:01:2e:5d:8e:74:8c:a7:84:a2:17:05:d5:dd:0b:69:e4:58:
e4:68:3e:04:c3:e3:27:c1:fe:1b:0d:ca:b4:6a:7c:f7:68:f0:
58:3c:0f:ff:19:5b:f9:76:82:b9:17:bf:c1:d4:b1:f8:fe:94:
34:f2:21:2a:ac:fe:2e:77:a1:1c:9e:e6:81:1c:70:17:9c:b8:
35:1b:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:55:09 2024 by rpki-client on console-fra.rpki-client.org