Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/k6T52QWmEzIhJHLePyfOrn8MadA.roa
File: k6T52QWmEzIhJHLePyfOrn8MadA.roa (raw, json)
Hash identifier: iuWq77QXB/sdfsN8fqgYExRRtGoYJ+0AMmH9Uajsuus=
Subject key identifier: 93:A4:F9:D9:05:A6:13:32:21:24:72:DE:3F:27:CE:AE:7F:0C:69:D0
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 0190C1D5D39C7B09482E828AA6139426C1D5
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/k6T52QWmEzIhJHLePyfOrn8MadA.roa
Signing time: Wed 17 Jul 2024 17:55:34 +0000
ROA not before: Wed 17 Jul 2024 17:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 185.225.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:d5:d3:9c:7b:09:48:2e:82:8a:a6:13:94:26:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Jul 17 17:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93a4f9d905a61332212472de3f27ceae7f0c69d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:49:eb:c7:0f:0b:22:36:8c:0b:57:40:65:
28:0d:85:83:c1:9f:aa:c3:74:a2:a6:84:1d:85:54:
c9:81:01:cf:6a:97:e3:81:14:db:c7:13:93:7c:4a:
1a:e9:d6:ff:a6:e8:b0:7a:7d:b5:f1:75:fa:54:5d:
b6:03:61:98:f0:f8:63:c3:a3:f9:a5:83:a4:fb:e3:
e1:cf:86:38:f3:fc:a1:dc:40:19:71:63:ab:2c:c2:
79:7d:ec:b8:34:0e:f4:87:15:67:ad:94:95:d4:ec:
1a:e8:96:98:ae:1d:8b:6f:08:01:c4:b5:ba:6f:47:
4c:7b:53:70:56:d4:f6:b1:30:a4:d5:82:80:21:3b:
58:86:cf:5d:97:6b:81:0f:5d:8a:60:c2:59:1a:af:
39:fc:a9:20:f5:4c:1b:c1:31:f9:c2:43:c1:06:f8:
7e:06:66:e3:e3:65:73:26:90:7b:18:d8:ed:a7:e9:
6b:84:7b:d4:51:4a:13:ee:af:d0:ac:f0:5a:8c:d2:
e3:50:7d:29:b5:87:1c:ac:3d:6b:94:d5:f2:00:da:
94:31:22:31:19:0e:79:ad:82:c8:0e:32:97:b4:83:
22:00:c4:b7:da:74:8b:ca:59:06:1a:06:35:8f:a6:
e2:82:22:5f:3d:49:d1:a9:4e:8d:f6:e3:3f:fc:6e:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:F9:D9:05:A6:13:32:21:24:72:DE:3F:27:CE:AE:7F:0C:69:D0
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/k6T52QWmEzIhJHLePyfOrn8MadA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.208.0/22
Signature Algorithm: sha256WithRSAEncryption
48:cd:61:c0:95:5c:11:5c:ce:eb:6c:9e:ab:1d:65:df:23:bc:
0e:e0:3c:a9:e2:39:48:09:b9:03:50:90:18:04:d0:a6:3e:c2:
8b:de:55:dc:3a:a3:e3:bf:5c:71:f3:07:a6:9a:02:bd:df:92:
ca:9a:2b:45:b7:76:a4:39:a3:8f:aa:ba:73:ba:6f:92:31:77:
fe:89:b7:a6:43:f3:91:d8:16:3e:81:95:80:46:9c:42:b7:c1:
86:cb:bc:5b:12:59:d6:55:12:90:a2:38:f5:61:93:39:a4:a7:
72:7e:97:40:ef:59:67:fa:df:4a:62:41:91:a1:ad:5f:4b:4c:
a5:8c:c4:aa:b5:49:59:30:8e:d4:19:48:28:4d:eb:8f:3a:b3:
df:f1:27:7f:1d:8a:fd:56:13:44:12:59:20:c3:44:1e:4f:29:
06:0f:83:38:13:c3:94:d4:12:5f:1e:71:66:ec:c1:60:09:1d:
06:ab:31:9b:59:3e:8b:3c:c1:40:a0:d8:95:e1:3c:bf:70:30:
60:8c:0c:f4:5f:62:2a:2f:80:74:35:71:9f:d0:76:f6:99:36:
72:0d:99:d9:27:f0:f5:56:6b:a5:53:c5:46:5c:71:28:02:27:
7c:b0:90:7a:af:cf:b2:b7:a0:13:50:ad:7f:70:ee:3e:db:c5:
68:cf:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:04 2024 by rpki-client on console-ams.rpki-client.org