Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa
File: 8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa (raw, json)
Hash identifier: yGBp/f3DHOkOHYSYWiWUzrerW2qguA7fijUUFh4h9Pw=
Subject key identifier: F2:EB:3D:94:DB:B3:15:90:71:DC:4F:B6:4B:7B:62:FF:70:A5:E0:A4
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 018CC5DC9D04609C9761BD7183C4B8C22B54
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa
Signing time: Mon 01 Jan 2024 16:30:18 +0000
ROA not before: Mon 01 Jan 2024 16:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21211
IP address blocks: 185.184.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9d:04:60:9c:97:61:bd:71:83:c4:b8:c2:2b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Jan 1 16:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2eb3d94dbb3159071dc4fb64b7b62ff70a5e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:91:26:14:47:e6:ef:49:04:0a:44:5e:ed:
94:d8:0d:95:39:14:60:5f:4f:7a:95:0f:be:66:e1:
47:d2:52:21:9a:26:4c:22:26:2c:39:8e:0d:da:48:
6f:c8:c1:d9:04:3b:15:2b:97:1e:42:af:69:ae:43:
e7:a7:1f:ac:f9:80:d2:50:ba:cc:67:74:5d:6b:f6:
b5:5a:4e:bc:1f:4f:bb:d0:7b:84:d8:48:0c:89:9d:
26:d9:0e:90:44:1c:78:d9:0f:20:45:11:2e:b3:c2:
e3:1b:3f:21:47:53:6b:de:43:9e:94:3c:33:65:a5:
7a:5a:ad:c3:65:f9:19:ab:73:93:93:8b:ff:69:eb:
a2:b2:7d:7d:c5:b7:53:83:bb:1c:0b:f8:ba:e5:de:
b8:c4:99:ae:f3:6e:3a:2e:ef:a0:d2:a4:18:c0:21:
0a:e6:30:e4:62:ad:cd:ed:ec:0d:f7:d3:cc:1e:09:
63:af:a6:bd:39:03:df:89:aa:94:a2:3e:ae:46:35:
86:c7:99:15:1a:e4:be:f6:8b:4a:e1:1c:19:5a:4c:
fa:2f:d5:db:26:f6:ec:e2:93:af:84:f7:15:a4:3c:
26:96:16:fb:74:93:7f:7f:96:94:25:91:8d:0e:e4:
89:7c:e1:64:55:9d:d6:49:1f:6f:ba:76:ea:6b:63:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:3D:94:DB:B3:15:90:71:DC:4F:B6:4B:7B:62:FF:70:A5:E0:A4
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.144.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a8:e4:bc:cc:c6:2e:1a:56:ea:64:85:8e:90:a6:c1:8f:d9:
df:e5:6e:8c:3c:a2:5d:d1:7d:19:04:7e:1c:c8:0b:16:c5:7f:
7f:25:9f:8d:e8:46:04:b3:82:97:ed:d7:69:0a:1b:8a:36:27:
27:9b:b4:98:72:e8:e4:69:a1:a1:25:85:e0:6c:05:45:d3:ce:
16:af:3c:11:e6:67:9a:22:07:a7:fd:78:5d:08:d8:e7:b3:bd:
37:0e:ab:49:18:ec:e3:12:a6:78:1b:2e:79:77:e2:6f:9d:c7:
e3:98:fd:10:76:5a:e4:1c:53:a2:39:8b:b6:de:2d:1d:43:53:
e4:1c:7f:bc:8c:72:e5:4c:fc:06:62:94:e4:41:ce:89:be:42:
75:a4:55:28:b0:ae:24:b5:6f:85:ef:57:d3:65:17:ea:a1:bc:
7d:e8:23:37:4e:1f:06:8b:77:7a:0c:f8:21:8a:04:0c:80:2d:
8e:77:b8:3d:d0:28:75:41:6e:0c:09:3f:25:57:34:c7:93:4b:
f1:86:a1:80:7e:5d:ac:74:a9:77:87:ef:6e:94:5e:88:3a:ee:
c2:9f:44:9a:8c:97:22:12:85:89:11:e0:7c:27:01:ec:cd:9d:
50:99:98:51:f6:3a:10:2a:a1:42:56:f5:09:e7:87:69:8f:36:
ca:b0:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:57:10 2024 by rpki-client on console-ams.rpki-client.org