Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/G_SOq6NRAMRcBriUHeHkorwdp4U.roa
File: G_SOq6NRAMRcBriUHeHkorwdp4U.roa (raw, json)
Hash identifier: cyQojAWob3Pye72o7SV/+bXEksDAUbMdX54sUh/K3mw=
Subject key identifier: 1B:F4:8E:AB:A3:51:00:C4:5C:06:B8:94:1D:E1:E4:A2:BC:1D:A7:85
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 018CC4255BFCB5CEA67F4688F7EE4F979EE8
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/G_SOq6NRAMRcBriUHeHkorwdp4U.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41858
IP address blocks: 185.21.92.0/22 maxlen: 22
89.40.148.0/22 maxlen: 22
193.34.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:fc:b5:ce:a6:7f:46:88:f7:ee:4f:97:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf48eaba35100c45c06b8941de1e4a2bc1da785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:06:17:83:1f:88:25:6d:24:ed:32:03:02:
e2:ed:82:45:7f:55:fb:bf:1d:3b:95:1f:32:99:2e:
25:cd:17:b1:22:45:b0:9f:ad:8a:51:73:7b:09:56:
0c:58:96:26:0a:a4:3d:d0:f4:37:de:b6:98:fe:bd:
31:0e:29:f7:43:9d:9f:9e:f7:67:b2:a9:69:75:b2:
f9:ae:83:34:95:43:0d:1f:ec:7c:a2:be:1e:62:71:
2c:46:6e:a6:d9:62:c1:0b:ad:df:05:5a:4b:89:ca:
32:be:a4:ab:8a:d8:fa:47:3e:b1:30:d5:96:81:b4:
09:8c:0a:aa:f7:ed:fd:d7:ab:d6:ef:95:6b:d5:3d:
23:28:d3:03:17:57:2c:9a:56:cf:b2:35:12:ba:ca:
0e:dc:ef:36:b4:6b:c2:a6:b7:25:28:80:9c:78:d4:
6d:23:03:bb:5c:2d:52:16:7d:23:b2:60:2f:cd:2d:
e2:7d:6c:d9:22:61:3b:a8:9b:91:50:a5:6c:6d:76:
fb:2b:9f:d0:ce:d8:cd:a7:74:1f:0e:e4:0b:e7:de:
22:b5:05:46:dd:1a:13:d9:4e:68:21:09:f8:30:50:
3c:47:39:b3:d5:18:fa:ef:79:33:13:75:f9:f5:51:
1a:37:c1:85:52:66:31:92:8d:45:68:14:37:bb:92:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:8E:AB:A3:51:00:C4:5C:06:B8:94:1D:E1:E4:A2:BC:1D:A7:85
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/G_SOq6NRAMRcBriUHeHkorwdp4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.148.0/22
185.21.92.0/22
193.34.182.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:54:79:aa:7d:a8:a5:29:f5:dd:77:4e:63:f8:b9:b4:85:9f:
67:f3:af:f7:cf:3b:e9:a3:77:2d:70:2c:c3:23:88:b4:5c:41:
29:48:48:2d:68:e1:36:bf:ac:c7:98:5f:13:6d:27:67:2c:16:
6b:cc:48:55:30:f4:bf:f6:6c:a3:58:7f:54:f2:47:1e:97:5e:
29:8a:32:98:67:06:d9:14:58:f2:57:38:d7:fa:14:a4:c7:dc:
83:13:28:5a:66:99:8d:3c:d0:04:7c:bb:71:41:14:86:3d:e7:
d6:36:14:db:07:e1:ff:2d:0d:74:20:a6:bd:ee:37:4e:ca:36:
9b:b7:9b:fd:2a:10:96:b9:d7:57:a8:6d:b6:3b:29:2d:1c:d1:
83:94:48:82:0c:b5:1a:b0:fa:3c:8b:16:bc:3c:77:04:1f:3c:
de:dc:e9:ee:a5:82:c4:51:38:99:c1:3f:32:b9:a2:db:97:1a:
eb:eb:88:f3:67:03:98:6f:56:ba:88:ce:e3:54:79:9b:09:37:
9e:c1:18:1e:7a:99:4b:f4:72:a3:a4:3d:5d:bc:d0:fd:8f:9f:
83:fb:9a:a9:a9:36:0b:48:a1:de:ff:84:ba:44:68:28:2c:0a:
a4:3a:4f:7e:3f:29:b5:81:19:b8:83:cf:ef:86:20:41:db:d3:
ce:88:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:08:15 2024 by rpki-client on console-fra.rpki-client.org