Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/4P2Gq5UJz1BpP53RNgSrID73Rv8.roa
File: 4P2Gq5UJz1BpP53RNgSrID73Rv8.roa (raw, json)
Hash identifier: CxxuQfr3Q7JiKJmYD+10OwONSIo1mDGcV/plyzKA+xc=
Subject key identifier: E0:FD:86:AB:95:09:CF:50:69:3F:9D:D1:36:04:AB:20:3E:F7:46:FF
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 018CC6B9005213F9316157EADA740F5DD550
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/4P2Gq5UJz1BpP53RNgSrID73Rv8.roa
Signing time: Mon 01 Jan 2024 20:31:02 +0000
ROA not before: Mon 01 Jan 2024 20:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200802
IP address blocks: 185.95.104.0/24 maxlen: 24
185.95.105.0/24 maxlen: 24
185.95.106.0/24 maxlen: 24
185.95.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:00:52:13:f9:31:61:57:ea:da:74:0f:5d:d5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fd86ab9509cf50693f9dd13604ab203ef746ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:58:c7:68:01:8d:4d:16:27:b8:25:f4:a7:
61:c1:1e:cf:f4:e2:17:f0:0d:ad:b5:9d:5e:a8:a6:
1b:6b:3e:14:d8:c1:8c:13:d6:06:24:b8:32:b0:a1:
d6:5a:51:a4:db:60:2c:b2:ee:71:a2:b1:fd:ef:22:
8f:4b:d1:94:6c:cf:f3:a6:2f:82:88:86:b7:32:34:
44:bf:70:84:08:37:5f:8a:81:6d:33:e8:62:6b:d6:
e4:16:3a:91:f7:4a:9d:da:74:1f:7d:37:ba:14:b0:
ad:12:3a:76:0a:62:46:81:5d:fc:4d:76:76:11:88:
46:cc:45:e2:5e:10:50:5b:2a:72:7c:d8:d6:35:e9:
02:b2:89:0f:df:fd:72:ab:8e:9c:31:1b:4d:7f:7c:
b5:96:c8:53:fc:02:fa:cd:14:e4:31:f2:a5:d9:78:
70:9a:c7:3c:2b:a6:8e:4c:b1:c6:cb:5b:d3:61:34:
66:b8:99:8f:3c:07:96:22:bb:51:be:05:4e:31:b8:
b2:23:14:ff:cd:ad:aa:ef:6a:04:2c:ba:86:c2:79:
c7:97:d0:0f:6a:3e:f7:80:44:28:cc:04:d3:98:ff:
04:d5:54:d7:08:23:f0:de:e0:3b:37:2a:ec:99:90:
e9:02:df:5d:de:b4:1d:be:91:da:38:a1:38:e3:46:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FD:86:AB:95:09:CF:50:69:3F:9D:D1:36:04:AB:20:3E:F7:46:FF
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/4P2Gq5UJz1BpP53RNgSrID73Rv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.104.0/22
Signature Algorithm: sha256WithRSAEncryption
51:35:05:85:e7:f0:23:bd:9d:af:27:08:cd:eb:25:74:aa:a7:
71:1e:a1:6d:5c:4f:e1:e0:96:f7:9d:0c:c0:06:91:6c:c0:6b:
f3:e0:8b:78:5f:29:69:c2:ab:ba:30:6f:6d:13:d6:bb:29:24:
b8:5e:d0:9a:fc:b6:3f:aa:0b:6a:1f:69:87:db:00:82:1c:72:
74:51:e0:0c:3b:f4:80:e9:c9:54:be:07:f2:40:79:01:da:03:
6d:fe:88:d1:6e:a4:3f:b2:45:94:f0:62:ae:19:33:5e:3b:98:
30:32:75:8c:52:bd:c2:80:c8:6e:e0:da:40:52:eb:12:80:bb:
41:59:9c:66:9f:4f:5a:d4:3f:16:ee:d8:1b:e9:63:30:ad:ed:
37:59:a9:48:15:cf:d4:08:69:a7:a3:0e:2e:87:28:c8:c8:ea:
7a:81:c9:98:3e:75:2a:4a:ea:3d:cd:9d:93:ec:56:eb:bb:d7:
93:ce:ec:f4:be:33:23:12:d9:23:06:ac:2d:dc:a7:dd:6a:47:
d9:b1:59:d2:a0:c1:f9:e4:04:9d:10:d0:f6:a3:c0:49:02:e9:
80:21:d9:bc:b1:41:85:d7:2d:89:d8:d7:97:ae:a4:d8:04:7c:
12:40:b4:9a:eb:9b:22:b2:95:5f:25:cd:b1:9f:d5:cd:9f:06:
f9:63:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:07:08 2024 by rpki-client on console-ams.rpki-client.org