Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/R4Xbg7rOXS2nboKZ_-XrLiv2M6M.roa
File: R4Xbg7rOXS2nboKZ_-XrLiv2M6M.roa (raw, json)
Hash identifier: 4kF1ZGcyi9zTSZICrKNGKejPkQ9nhdXwUiu9dqrs4TU=
Subject key identifier: 47:85:DB:83:BA:CE:5D:2D:A7:6E:82:99:FF:E5:EB:2E:2B:F6:33:A3
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 018CC5DC430A625F7A6FC9D89745B96FB6D2
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/R4Xbg7rOXS2nboKZ_-XrLiv2M6M.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203606
IP address blocks: 185.123.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:43:0a:62:5f:7a:6f:c9:d8:97:45:b9:6f:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4785db83bace5d2da76e8299ffe5eb2e2bf633a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:43:8e:d2:58:82:2a:21:9e:e9:e9:8a:51:
1f:62:20:75:09:ca:53:c2:1e:0c:bb:fe:df:fb:af:
83:3c:59:f0:ed:c1:b2:85:f9:74:c5:fb:a7:d7:90:
4c:a9:f2:7a:8a:63:26:10:b4:2e:d2:a0:41:e5:2e:
a3:90:cb:14:90:a8:ab:83:d4:e8:82:b0:96:dd:09:
a4:69:50:bd:aa:fa:d2:c8:29:7a:c1:c3:4f:82:68:
43:f6:e7:95:ff:de:6c:90:c9:af:57:b5:ef:04:9c:
48:c1:38:aa:39:8e:95:5c:14:52:c0:02:b9:92:86:
b8:09:a7:99:f4:30:4a:38:86:45:39:34:dc:82:3c:
46:c1:c1:23:2a:3e:69:37:ba:b4:08:c7:38:d7:96:
ff:89:05:4e:77:8d:75:79:87:ab:36:4e:35:e9:57:
10:2e:c6:52:f6:7f:cd:6a:8d:93:7c:3b:74:9d:f6:
bd:00:ba:97:cf:d0:43:07:d1:56:50:c5:8e:7f:16:
e8:8c:73:75:3b:82:4c:dd:42:43:15:8c:5a:05:f9:
44:c8:6f:cd:63:55:16:80:d8:03:de:55:c7:e8:d6:
5d:96:fd:0d:fb:62:e0:9e:54:0e:30:31:59:de:00:
61:32:11:26:35:fa:de:ea:ee:85:2d:5a:8a:1b:51:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:DB:83:BA:CE:5D:2D:A7:6E:82:99:FF:E5:EB:2E:2B:F6:33:A3
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/R4Xbg7rOXS2nboKZ_-XrLiv2M6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
93:2b:9c:70:d4:c7:a8:91:63:d3:27:fb:a8:51:db:84:85:7a:
72:51:64:0b:06:70:7e:ba:cd:72:9e:b1:ab:3b:e0:a4:47:03:
50:9d:8d:ec:2d:94:bd:9d:6b:a3:4f:ea:09:86:09:3e:4b:31:
02:f8:d8:c0:cd:07:4a:91:c1:2f:f3:0d:f1:c7:cd:3f:4c:ae:
a2:23:88:dc:f5:a2:a0:e7:17:08:1a:e0:52:48:f1:a5:11:e9:
a7:95:dc:db:ac:1f:fa:8c:1b:aa:6e:6e:aa:a0:85:ce:84:54:
0a:da:f9:bd:3e:8a:57:02:d9:4d:13:03:f0:f3:0d:8d:3d:cf:
4f:43:87:04:0f:2c:3f:cc:11:9e:cd:79:4b:49:df:63:db:b2:
0e:8d:76:4a:8a:ce:09:c4:3d:ae:f8:3e:44:43:10:98:fc:16:
13:0b:ff:4d:42:86:ef:05:50:75:02:87:13:75:f2:5b:d6:fe:
d5:b7:56:3b:17:37:73:da:bc:78:4c:6d:ac:58:53:4d:e0:8e:
a2:a5:10:2d:e1:94:2b:65:51:b0:de:5e:44:c7:fc:e6:0f:78:
bf:0f:84:35:8e:fe:9f:4c:d0:9b:3d:c2:00:ff:9e:9a:07:44:
11:e8:20:e8:62:97:64:c8:aa:a5:c2:94:1c:2e:41:76:53:dc:
0f:a5:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:40 2024 by rpki-client on console-fra.rpki-client.org