Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/S_hFcK9ODZVZX11FKK4JahPY9kQ.roa
File: S_hFcK9ODZVZX11FKK4JahPY9kQ.roa (raw, json)
Hash identifier: TcTJXMi+G4DrN/lLbdQKfxFHIFx0T6UjfnSiJFvC4S8=
Subject key identifier: 4B:F8:45:70:AF:4E:0D:95:59:5F:5D:45:28:AE:09:6A:13:D8:F6:44
Certificate issuer: /CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Certificate serial: 018CC94CE9CA31F49DE7A96394A1040F66FF
Authority key identifier: 90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/S_hFcK9ODZVZX11FKK4JahPY9kQ.roa
Signing time: Tue 02 Jan 2024 08:31:50 +0000
ROA not before: Tue 02 Jan 2024 08:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56986
IP address blocks: 185.228.96.0/22 maxlen: 22
2a03:bc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e9:ca:31:f4:9d:e7:a9:63:94:a1:04:0f:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9097f97237ef366de5ab6d758eee543e08d57f5c
Validity
Not Before: Jan 2 08:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bf84570af4e0d95595f5d4528ae096a13d8f644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:c4:d7:60:98:6e:9c:8a:db:80:aa:18:38:
43:5b:8a:7c:2d:3b:6e:e5:61:4a:e4:a5:80:ac:74:
5e:8a:60:4d:98:44:1a:80:4b:f2:cf:2f:3c:c1:3b:
3d:d1:7b:22:b4:a0:1c:61:8c:13:b5:2a:4f:64:cf:
0e:9a:f9:14:ec:84:06:6b:c0:e9:33:00:d9:2e:61:
70:4c:8e:75:06:0b:d3:0d:58:cb:d4:6b:60:f2:78:
ba:d6:a4:db:4a:f0:62:b0:5b:ef:df:0b:0e:9a:05:
37:44:11:66:d0:0a:e2:25:54:e2:b1:6f:07:58:81:
b0:1f:7b:d2:dd:2b:a9:93:9b:e1:6d:23:09:8d:96:
e3:86:e7:91:65:b7:d0:d3:5e:0a:9e:8b:4f:e4:e9:
47:75:94:f2:e2:85:6f:97:2e:8d:05:b9:8f:29:17:
24:a8:9f:80:77:ba:f5:f2:f0:d6:65:72:b7:0b:da:
83:91:86:62:0c:8a:70:fe:ab:b0:2d:0e:55:8d:88:
2f:98:77:9e:a6:4b:0b:67:16:51:ec:3f:45:8d:47:
3c:63:8d:f7:96:f9:cc:e9:17:e5:15:65:3f:5d:26:
d3:80:81:36:54:cf:17:cd:98:ef:95:e9:36:80:e1:
98:b6:1a:0f:32:66:0b:b1:a8:03:83:46:b1:37:b3:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:45:70:AF:4E:0D:95:59:5F:5D:45:28:AE:09:6A:13:D8:F6:44
X509v3 Authority Key Identifier:
keyid:90:97:F9:72:37:EF:36:6D:E5:AB:6D:75:8E:EE:54:3E:08:D5:7F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJf5cjfvNm3lq211ju5UPgjVf1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/S_hFcK9ODZVZX11FKK4JahPY9kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ac13e2-2a29-4e70-859b-6c30b8ef63b4/1/kJf5cjfvNm3lq211ju5UPgjVf1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.96.0/22
IPv6:
2a03:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
9c:f5:a6:0b:29:b6:74:9c:76:96:8f:ef:c8:5b:97:e2:64:32:
2f:d8:35:9a:23:1b:11:bd:00:5e:22:4c:7c:40:3e:73:db:f7:
a5:91:82:22:b8:17:fe:f9:46:5b:77:1f:55:34:8a:54:8f:33:
0b:9c:6c:07:2a:ef:b7:f4:1b:24:6d:8c:87:2c:a5:01:c8:f8:
30:b5:5c:8b:d3:7f:a3:c5:24:95:3c:c8:e0:11:88:ac:89:59:
c1:5a:c1:8f:4b:d8:f5:d0:0f:50:e6:5c:8c:41:53:e8:05:43:
8d:8f:58:e5:ea:8d:90:cb:25:18:e7:e5:2d:32:ae:49:96:df:
7d:dd:68:05:4f:cb:a7:01:04:29:f8:b1:0a:d0:82:21:1b:1e:
46:4b:92:74:40:c9:31:92:27:aa:ce:07:cb:6f:6e:a5:72:37:
15:71:59:c0:9f:c7:91:3f:50:82:d8:77:c6:09:62:54:64:41:
83:96:cf:62:41:d0:59:01:9a:dc:16:a9:a4:b8:d2:a0:49:31:
d1:e5:68:57:bf:76:cf:a2:1a:b8:ea:ee:d4:eb:fa:b5:15:fb:
72:94:7a:57:ff:7d:ac:ab:a8:89:8b:79:fc:00:c5:15:17:a5:
c0:57:67:03:58:fd:5b:e8:43:ad:f1:2c:b0:2c:d6:c6:10:fe:
fb:f3:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:35 2024 by rpki-client on console-fra.rpki-client.org