Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/B9UajIevaJduXhvLCbH4t__HHWU.roa
File: B9UajIevaJduXhvLCbH4t__HHWU.roa (raw, json)
Hash identifier: q2vQzjGZzJwiDtgoUzRi/vbQVskVbwIobsVxwB7rNvw=
Subject key identifier: 07:D5:1A:8C:87:AF:68:97:6E:5E:1B:CB:09:B1:F8:B7:FF:C7:1D:65
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018D5F34E9C251ABFD025910374A584C9808
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/B9UajIevaJduXhvLCbH4t__HHWU.roa
Signing time: Wed 31 Jan 2024 11:08:39 +0000
ROA not before: Wed 31 Jan 2024 11:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202425
IP address blocks: 185.242.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:34:e9:c2:51:ab:fd:02:59:10:37:4a:58:4c:98:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 31 11:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07d51a8c87af68976e5e1bcb09b1f8b7ffc71d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:d0:34:ff:dd:b6:a3:01:93:23:a1:66:b6:
f4:89:a2:8c:9d:3f:73:19:2d:b3:10:57:29:ae:be:
a7:44:5a:ae:f3:b8:1d:e8:ba:47:0c:0e:06:7b:45:
1d:eb:90:4f:30:d7:e6:1d:22:fb:7f:e1:c4:c0:d2:
1c:64:f8:75:bf:80:07:40:75:33:d5:e8:d6:94:37:
dc:5f:58:34:a5:bf:7c:21:88:b5:4b:f9:6b:83:bf:
e4:b2:d7:be:6f:82:d2:b1:e2:43:8c:7c:fc:ba:9b:
ef:86:7c:b2:b7:bf:e0:33:8f:d0:09:0e:d9:57:17:
60:a8:41:ac:6d:84:7b:56:ee:49:d9:49:b7:16:97:
af:64:4b:bf:ee:73:25:c0:16:6e:b4:68:d0:c6:19:
ca:74:51:ec:f2:c5:38:bc:02:1d:02:0b:80:88:38:
37:3a:24:9b:73:e6:fb:ce:33:43:6c:32:3d:1f:7f:
a3:c3:22:a2:69:76:d4:42:67:f5:74:98:98:e1:15:
c0:34:f3:d3:3b:42:0a:84:50:99:dd:f6:02:64:92:
85:1c:c1:e3:52:8a:1a:9a:1b:88:ff:c5:05:0f:20:
a1:e1:4e:47:02:64:5e:27:73:6c:9c:37:89:83:aa:
cc:51:44:50:75:31:78:59:a2:93:5e:48:d7:56:88:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:1A:8C:87:AF:68:97:6E:5E:1B:CB:09:B1:F8:B7:FF:C7:1D:65
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/B9UajIevaJduXhvLCbH4t__HHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:38:cb:b0:66:80:a4:01:a1:88:85:42:ea:06:70:78:d3:
5a:9b:1b:af:b9:60:f4:55:72:b7:86:20:07:35:16:8a:36:a8:
71:2c:a8:bb:49:a0:2b:35:3a:fd:64:ef:a4:59:b8:2b:3b:54:
24:d6:94:10:8b:01:40:b4:f7:e4:b5:18:31:03:9c:d7:70:7e:
ca:60:ac:c5:37:37:12:1d:36:0a:5e:08:4a:9e:64:0a:83:e6:
95:74:e9:45:37:9f:c6:a2:bb:2d:cd:ad:ed:66:dc:64:69:56:
c8:fe:dd:69:65:a2:0e:01:c4:87:4c:2d:17:68:ae:42:f0:79:
9a:48:e7:1e:45:b3:56:f7:6a:df:65:37:90:47:ee:8a:2e:f7:
f0:3b:53:c4:08:71:ea:38:f8:73:e4:ff:ee:99:a0:f6:39:fa:
c5:6a:d0:50:b2:c0:74:ae:51:58:d5:97:30:8d:3e:d3:18:c4:
62:4f:e8:2b:92:74:3a:f5:af:ec:45:29:3b:48:60:61:cf:3c:
1d:4e:6a:a2:a7:92:01:0b:fc:59:c7:d2:d2:15:e1:e9:f9:b6:
1c:17:f3:21:2a:d0:ac:e1:c2:5d:0e:b6:70:ce:db:ca:55:54:
85:48:1b:34:7e:00:d5:73:64:f1:cb:80:bd:92:17:ec:94:df:
33:91:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:33:19 2024 by rpki-client on console-ams.rpki-client.org