Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa
File: 4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa (raw, json)
Hash identifier: vUuBBPgUG06UwRDXUDvgfvTaCVncCLZkfq9a5gtDbok=
Subject key identifier: E2:C3:8E:AB:88:6F:EC:44:85:2A:C3:E5:9C:2F:56:1B:0C:61:8C:4A
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 018E6025F8D0DB66675C982C77DDC0F9F5AA
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa
Signing time: Thu 21 Mar 2024 08:34:45 +0000
ROA not before: Thu 21 Mar 2024 08:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203367
IP address blocks: 185.137.84.0/22 maxlen: 22
2a07:2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:25:f8:d0:db:66:67:5c:98:2c:77:dd:c0:f9:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Mar 21 08:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2c38eab886fec44852ac3e59c2f561b0c618c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:66:7b:19:07:4e:90:17:73:48:2a:61:3d:
c9:f0:79:3c:af:b6:db:1e:4c:e3:b7:12:73:10:9f:
8f:d5:58:e4:5d:55:2b:8c:21:70:74:74:57:15:89:
1c:8f:ab:96:30:99:77:86:45:ce:f6:73:07:a7:cd:
b3:84:9f:79:35:2a:91:37:f7:09:85:98:6f:82:bd:
99:c2:b5:0e:ab:d2:e7:9e:df:97:b9:77:79:9b:13:
70:0e:d7:2a:7c:5b:cd:a3:d5:41:17:86:77:ac:6f:
ec:3c:a2:71:19:36:2e:19:a2:a5:05:28:83:41:9a:
3f:06:6d:4a:dd:45:93:f3:c5:17:3b:01:9c:9a:cf:
12:04:e8:d5:8b:a5:49:9a:d8:63:37:bf:da:eb:5e:
5a:f1:0a:2e:d3:86:2c:d1:c7:a2:8c:70:9c:a9:81:
72:b7:72:8b:d7:67:00:7d:b8:66:d2:3f:8d:74:46:
36:e2:3f:05:98:74:d0:ba:cf:6c:cd:9d:8d:e4:b9:
b3:d5:11:6d:f1:ac:ec:dd:cd:8a:12:fe:2c:f6:1d:
09:2c:b4:c4:c7:ad:af:74:c2:91:2b:81:9a:81:3c:
de:8b:2d:81:ac:4b:da:fb:43:ed:87:19:38:db:0b:
a6:4b:75:ff:fb:47:e6:e6:6b:68:c1:4e:25:af:df:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:8E:AB:88:6F:EC:44:85:2A:C3:E5:9C:2F:56:1B:0C:61:8C:4A
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.84.0/22
IPv6:
2a07:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:19:44:a0:fe:f9:a9:ee:9f:29:49:10:58:29:9c:b7:df:91:
d1:26:a0:42:97:39:10:b0:d5:4f:4c:7b:8a:d0:90:37:63:c9:
7d:8b:d1:dd:af:23:14:82:c9:82:2e:24:c7:e2:6f:ae:e9:03:
c3:ce:c0:d1:f2:33:ab:f0:42:d2:bc:69:5e:d8:8e:55:17:55:
af:51:88:ae:35:2c:d4:be:f3:84:60:9f:5d:b8:4a:aa:d4:ea:
91:ea:9a:b1:3c:63:56:19:ba:9a:28:d6:55:46:e7:ea:8c:cb:
a6:bd:19:d6:6c:82:85:e3:b7:f5:3b:3d:2f:4c:f5:b0:fc:ce:
65:ed:42:5f:30:7f:1a:46:1d:c6:2e:c4:37:a3:d1:dd:33:df:
bf:e6:76:42:07:f8:68:ae:ce:60:00:5c:10:03:fc:c0:7f:d2:
55:f1:40:3a:7d:75:76:1d:db:7b:41:4b:c4:fd:06:3e:22:91:
11:60:2b:f0:1e:6e:45:5c:b3:ac:52:72:27:21:f4:a8:06:01:
25:73:f9:ff:01:a2:0a:1f:71:da:10:85:4a:da:fa:b9:21:35:
3e:fc:75:aa:c4:16:6c:e0:e5:6e:0b:ab:b5:fb:4b:c2:6e:e5:
df:68:d1:e1:89:d8:43:57:42:2d:49:19:38:ce:62:7b:40:1f:
ce:16:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:41:37 2024 by rpki-client on console-ams.rpki-client.org