Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/O3vSBcqxSm0X4V3WPybIPsiVVZc.roa
File: O3vSBcqxSm0X4V3WPybIPsiVVZc.roa (raw, json)
Hash identifier: M+L/oqX5z5Nn80yt8FZeHkEn+Tkg8ix0B+oYVWbCNp4=
Subject key identifier: 3B:7B:D2:05:CA:B1:4A:6D:17:E1:5D:D6:3F:26:C8:3E:C8:95:55:97
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 018CC348F0C39CAFA1F5B86C2E8EF6A45710
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/O3vSBcqxSm0X4V3WPybIPsiVVZc.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207094
IP address blocks: 185.165.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 14:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:c3:9c:af:a1:f5:b8:6c:2e:8e:f6:a4:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b7bd205cab14a6d17e15dd63f26c83ec8955597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:20:66:d9:32:bc:94:20:d7:77:e8:15:29:
7d:d5:c3:f2:29:ac:1c:9a:be:3a:8d:22:bc:27:3e:
cf:ca:de:02:5c:17:df:fa:13:0c:cb:61:11:2b:bf:
26:eb:ef:8b:e7:82:aa:0b:70:06:d7:e6:ec:5a:78:
0c:b9:dd:77:a4:66:fa:4b:fe:9d:1a:35:a9:f1:75:
3f:76:d3:22:ae:5a:3e:ac:84:d7:00:8d:11:4e:b3:
2f:6f:45:79:83:f5:bc:75:a1:e5:7c:17:64:30:ca:
70:ba:5a:25:6e:63:56:af:aa:a0:11:d6:ec:7e:e3:
1e:f7:e9:ca:92:56:f0:b7:55:33:2a:9f:25:b1:c4:
f8:b8:82:8e:07:3f:68:d3:0c:39:be:7e:73:d3:a5:
3c:f1:43:1f:bc:37:fd:35:17:32:8f:48:dc:19:a4:
46:91:b3:3a:15:a4:30:a8:9c:52:c4:01:1e:20:70:
68:d6:05:2d:d0:83:25:19:64:5e:c1:68:7d:fb:cf:
2e:78:de:cc:1e:08:69:2f:08:de:a8:f4:5a:8b:67:
b7:87:af:af:37:8e:80:dd:45:c5:69:58:43:45:1c:
51:db:9c:e6:a5:85:18:c0:c9:a7:a5:5b:61:89:d6:
d6:a2:48:ec:c2:a3:e7:78:79:03:9e:a3:0a:a0:63:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7B:D2:05:CA:B1:4A:6D:17:E1:5D:D6:3F:26:C8:3E:C8:95:55:97
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/O3vSBcqxSm0X4V3WPybIPsiVVZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:5f:45:2d:fe:20:09:79:fe:ff:cc:b1:84:86:d0:1a:92:0b:
a8:d2:bd:80:1b:2d:bc:38:f2:42:a1:2a:b0:5b:3f:db:64:97:
c1:c3:3a:c4:91:6b:08:b4:db:3b:b9:1b:ed:20:6f:74:19:ba:
24:ff:80:1c:03:eb:64:5b:1c:36:a8:7a:34:6d:1c:04:4c:f1:
50:c4:19:23:c9:48:7a:d1:9c:a8:dd:92:5f:44:1c:93:6b:08:
5f:2d:22:21:36:17:fe:89:ff:af:04:92:80:ca:72:5b:ed:93:
7f:59:0f:b8:96:23:2e:fc:e7:92:85:86:84:c7:ed:f3:2d:f5:
bc:96:2a:d9:fc:54:3c:5e:bb:61:02:b9:73:45:f2:73:5b:fc:
fa:75:38:58:47:82:54:1e:35:c2:1f:b1:62:c9:53:dc:d0:b6:
d3:b6:b4:08:51:b5:ff:cc:3c:86:9d:39:01:0c:8b:c3:af:8c:
62:64:16:ec:e3:94:a2:3c:f3:7b:e1:8a:f4:1c:bd:72:3a:90:
ee:c2:73:44:75:0a:58:ef:ed:49:40:98:09:c1:5a:fd:9a:9c:
18:ee:c2:74:72:e4:6f:06:3c:73:b9:ff:01:2b:40:5c:6c:26:
40:99:69:5d:73:46:39:a4:2a:1f:ef:78:7b:3e:70:6e:3f:fe:
b6:27:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 18:13:21 2024 by rpki-client on console-ams.rpki-client.org