Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p_NTiYRXqAV0Vu_kHvLmxqE4vPI.roa
File: p_NTiYRXqAV0Vu_kHvLmxqE4vPI.roa (raw, json)
Hash identifier: 5CV05sO2OMdckTe9QZiPk+7pUzus76kcR3g/k6QL1X8=
Subject key identifier: A7:F3:53:89:84:57:A8:05:74:56:EF:E4:1E:F2:E6:C6:A1:38:BC:F2
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DABD1C0E68B8D48BF51055789C7A59
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p_NTiYRXqAV0Vu_kHvLmxqE4vPI.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20048
IP address blocks: 185.119.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bd:1c:0e:68:b8:d4:8b:f5:10:55:78:9c:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7f353898457a8057456efe41ef2e6c6a138bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:12:d8:ee:fe:6d:cb:d9:4a:84:a8:fa:b9:
08:e0:db:ce:cd:e4:c8:be:da:fc:71:81:a9:28:97:
45:bb:5d:a3:00:bf:da:df:38:58:3d:2a:16:7a:78:
2c:48:ab:c0:f2:d8:6e:47:7b:77:0b:e4:48:e5:32:
3e:99:ec:ed:67:1e:fb:3d:31:cc:4f:ec:13:5d:b8:
03:8e:64:cd:b8:95:be:53:5a:bc:e0:06:80:c6:dc:
b0:da:f5:0a:a9:06:3a:8b:29:8e:13:c6:0d:84:5e:
87:27:d2:8e:46:2f:9b:2a:2b:72:2b:68:e6:15:1b:
c9:35:9a:ce:47:b7:03:45:51:1e:6b:96:35:f4:98:
3e:fd:f0:b0:5e:bf:e8:d1:e4:70:2e:2b:61:4c:c9:
a2:81:98:6b:52:09:40:27:17:08:66:2d:63:0f:86:
8f:37:9c:2c:26:23:b7:49:d6:b2:e2:1d:2a:02:59:
f1:b3:82:6f:a2:b3:b3:34:6c:29:f2:db:d8:f3:8f:
0c:3b:35:c9:32:9a:16:68:89:c2:71:29:3a:aa:80:
b2:63:51:40:6b:8a:0f:4e:be:4f:97:ae:30:2a:38:
19:b7:b2:c6:f5:59:7f:65:f6:7b:4d:74:b4:32:6e:
22:10:84:d2:7a:9e:29:53:a3:ad:60:22:73:8f:1a:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:53:89:84:57:A8:05:74:56:EF:E4:1E:F2:E6:C6:A1:38:BC:F2
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p_NTiYRXqAV0Vu_kHvLmxqE4vPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.236.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c3:77:c3:29:b2:00:dd:e1:fc:85:b2:03:d2:32:84:27:cd:
bd:fd:88:b2:3e:60:eb:ff:42:01:d1:65:3d:8f:c0:ed:03:7f:
55:47:94:38:be:72:07:a4:40:86:48:d8:21:d7:d7:ad:41:13:
f3:90:54:b6:74:bc:7b:1b:57:b3:8b:b6:2b:cc:50:16:e2:5f:
bd:d2:ea:6c:ff:ff:da:28:df:b0:5a:d4:4d:ca:96:f3:b7:b3:
ef:e7:53:52:ac:4e:f7:10:15:6a:df:7e:5d:2d:71:0f:13:c3:
c2:4d:7a:07:14:fd:74:19:32:0e:14:2f:26:a9:2a:42:cc:ff:
cc:b3:77:72:4a:fc:d4:33:7b:4c:17:80:9c:bf:85:4f:f6:8d:
06:34:a9:d3:26:6e:10:77:48:39:dc:38:86:97:3d:31:9f:9f:
d9:4d:dd:db:72:ed:3f:44:99:e5:dc:a0:f3:4a:08:f1:55:00:
68:82:ab:99:0b:0a:58:09:63:21:35:70:08:3e:03:11:a1:a7:
91:61:1a:19:6f:90:42:fd:83:ec:ab:11:f2:41:18:bc:1d:f3:
f5:77:20:9b:0c:11:d7:e2:98:22:65:44:38:33:42:ef:cd:e7:
41:e0:63:b7:e8:b7:9f:09:ea:c6:cd:6b:16:cc:fb:e3:d7:05:
5c:50:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:22:54 2024 by rpki-client on console-ams.rpki-client.org