Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa
File: sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa (raw, json)
Hash identifier: l7FSfof51PpWUqh1tLfAuGfnQKxq9tQk0G90IeOh+78=
Subject key identifier: B3:14:56:0A:4E:98:76:DD:D5:17:6F:E4:69:6B:BD:52:1A:E9:E6:E6
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 018CC56E3A31F591FDF1562F4D326DE989A0
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.22.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3a:31:f5:91:fd:f1:56:2f:4d:32:6d:e9:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b314560a4e9876ddd5176fe4696bbd521ae9e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:df:e2:6c:1c:bf:f1:ff:2c:89:41:5c:7e:
da:1d:af:d4:dd:42:92:27:c0:0a:36:12:8d:72:e6:
bd:97:5e:e6:73:d7:47:f7:90:59:10:12:86:43:14:
5c:e7:f0:b3:cc:1d:78:78:79:03:f4:41:61:e9:59:
0e:96:22:18:f3:c3:4c:2e:a0:28:99:f4:34:1f:16:
06:62:af:4a:d0:5e:90:3d:b7:bb:88:ec:ed:84:13:
dd:58:fc:eb:1d:ad:ea:a9:2a:0d:d5:8c:01:cf:24:
c6:a3:86:e2:f1:be:90:0a:b5:1f:6b:b3:35:5d:37:
c1:4b:cf:1d:4b:ec:ac:85:7f:00:77:f9:3b:6a:21:
64:89:d0:9e:04:86:f9:85:6a:13:cd:61:0f:74:93:
82:dc:9d:32:aa:35:16:cf:73:68:72:92:6c:4b:50:
68:69:52:fa:c6:53:05:2d:15:11:e8:cb:99:4f:84:
04:0d:fa:46:12:93:72:c4:ed:63:cd:a9:f3:9d:93:
5b:53:51:e5:77:7c:86:7b:c1:13:b9:cc:94:3c:5b:
dc:a4:cc:90:62:fe:9c:9e:da:35:82:9a:56:55:4e:
22:e3:7f:90:6c:05:6c:4d:86:81:0c:91:65:9b:90:
da:17:d7:d5:0c:f9:64:6b:f6:2a:b5:df:e2:80:4e:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:14:56:0A:4E:98:76:DD:D5:17:6F:E4:69:6B:BD:52:1A:E9:E6:E6
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7d:0d:b6:49:5a:1f:02:1d:5b:96:4c:39:33:11:ca:d6:9b:
5a:90:9d:f4:71:c8:d0:01:b9:43:79:55:94:a0:bc:9b:53:d6:
bc:80:52:f9:aa:8d:aa:b3:c9:8b:24:36:77:85:85:a7:c0:8f:
02:13:17:ff:d5:7c:00:53:54:7b:47:63:d5:8f:af:a2:11:d2:
a6:3d:4e:0b:fa:ab:06:64:8d:6d:5f:cc:0f:85:a3:b8:2e:48:
bf:26:e0:de:62:2b:76:b2:69:ef:c6:ec:41:87:47:9f:77:f0:
fc:cd:e1:d9:ce:c8:93:5e:23:f0:94:1b:11:27:66:dc:17:09:
c0:04:6c:a2:4f:9a:90:d8:55:8e:8c:aa:a3:42:66:46:1b:cf:
42:e8:9e:d0:77:33:9a:49:eb:9a:33:40:88:67:86:72:ca:90:
c4:77:57:d8:5b:c6:4a:f3:20:59:ee:67:af:bf:39:37:05:0e:
1d:fc:c4:f7:18:0b:ac:f6:da:49:25:cc:97:7f:3b:d1:f4:4f:
cd:41:e9:95:c6:68:7c:5e:50:32:d0:f1:fd:da:a6:da:50:c9:
99:84:22:38:bc:64:7e:05:02:f1:96:e0:2b:45:72:9a:37:01:
3e:a0:c3:3c:d4:bd:a6:3c:bf:d4:b2:99:22:ad:d3:64:4c:e0:
6a:e5:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:52:52 2024 by rpki-client on console-ams.rpki-client.org