Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa
File: vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa (raw, json)
Hash identifier: s+XpPTzup3k+PtKmo1pl/zvHDVud4TsAaHVSyaZ+/u8=
Subject key identifier: BC:C4:6D:5B:C8:E2:E7:55:B7:26:ED:6D:EF:07:43:4D:2A:F1:10:C4
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 018E9E2A2176173B550202057D6E6BEA5F3B
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa
Signing time: Tue 02 Apr 2024 09:35:44 +0000
ROA not before: Tue 02 Apr 2024 09:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 185.228.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:2a:21:76:17:3b:55:02:02:05:7d:6e:6b:ea:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 2 09:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc46d5bc8e2e755b726ed6def07434d2af110c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:fd:60:9f:22:41:a7:2e:b4:56:5d:cb:fd:
20:d5:a6:a8:6f:94:69:f4:c9:34:d6:65:bf:b6:43:
51:77:fc:f1:cd:04:6e:29:db:31:5f:18:6f:99:2b:
81:b8:f6:fa:c7:4d:73:50:9c:09:66:c4:4c:92:2d:
fc:5f:92:9e:38:e6:8c:74:f1:a0:9f:f5:0f:d2:dd:
3b:a6:58:9c:d8:3f:25:e8:6c:fc:a7:22:9e:0a:1d:
82:dd:15:79:a4:6b:35:cc:52:a4:35:fd:de:a3:f0:
8a:81:0e:c3:bd:2b:17:07:1c:39:32:7a:7f:26:80:
3c:28:5c:f7:bf:74:f5:15:8f:77:df:4e:9a:69:da:
6b:1e:a7:77:d1:62:7d:23:ef:b8:6c:c3:8a:86:2e:
41:35:8e:50:f0:54:59:16:79:25:2e:12:7d:9b:c0:
00:9a:3b:e2:1d:6a:47:df:b7:7a:bc:f7:eb:25:c6:
c4:2c:aa:68:d3:58:e4:f0:5e:9a:01:56:7d:c0:ad:
31:fc:9e:0f:6f:f6:dc:80:99:f6:03:4b:06:c5:e9:
fd:6d:80:df:83:b2:80:5f:eb:3b:ad:c0:4f:59:d5:
56:64:25:7b:77:2d:02:c4:26:ef:ac:9c:4e:ff:cf:
c3:a2:6a:92:e8:66:13:06:0e:dd:48:3e:db:fc:8d:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:6D:5B:C8:E2:E7:55:B7:26:ED:6D:EF:07:43:4D:2A:F1:10:C4
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/vMRtW8ji51W3Ju1t7wdDTSrxEMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6f:d0:e9:4a:18:9a:9f:d2:cb:64:94:40:ec:f9:44:f7:45:
ff:48:ae:09:52:29:08:11:25:80:b1:12:42:87:04:f3:ef:f4:
96:6e:98:3c:ca:3b:ad:ce:00:eb:7f:b5:5d:5d:e2:8c:23:18:
4a:04:b1:a4:a1:a8:3a:44:3d:39:44:19:e9:01:11:d4:a6:63:
c1:c8:dd:e5:d2:f8:f7:1a:7f:cf:8a:12:2d:46:14:89:c8:5a:
c4:de:ae:86:00:9c:ca:8d:52:a2:fc:9d:4e:c1:f2:17:91:eb:
4b:be:f3:7f:d0:6e:e4:3a:2a:ad:8d:2a:44:6a:e5:93:e2:e9:
9c:03:31:01:96:b0:bc:a5:e6:b7:f0:3e:bc:c2:a6:bd:b1:0b:
e2:44:fb:00:33:30:71:68:81:97:25:e5:87:08:72:d5:dc:3a:
5d:f7:72:c7:a5:f4:9f:d4:53:5b:b6:4d:99:23:f3:e6:12:3e:
99:c4:6e:7e:10:da:66:00:77:a0:69:e7:78:45:90:38:bb:f8:
45:ed:98:ec:e5:22:00:d5:4d:94:eb:7b:2a:2a:0d:5c:cd:bf:
07:b2:85:29:d5:ad:33:65:21:77:b4:11:fb:e5:e9:46:a8:7d:
b0:33:ce:34:56:4c:e2:62:a0:97:56:6e:be:3a:4a:9c:a6:1a:
3e:65:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:51:25 2024 by rpki-client on console-ams.rpki-client.org