Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/g8NLlIfAFG-qkOUNX_m3y_Pq4RM.roa
File: g8NLlIfAFG-qkOUNX_m3y_Pq4RM.roa (raw, json)
Hash identifier: lJAMgJ4FR73hNJ7CPsth/Gk9LlFw0eEvAkP0TKm5aGE=
Subject key identifier: 83:C3:4B:94:87:C0:14:6F:AA:90:E5:0D:5F:F9:B7:CB:F3:EA:E1:13
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 018CC2DAFD8C7019DA38C2A3234993490406
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/g8NLlIfAFG-qkOUNX_m3y_Pq4RM.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6663
IP address blocks: 185.190.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fd:8c:70:19:da:38:c2:a3:23:49:93:49:04:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c34b9487c0146faa90e50d5ff9b7cbf3eae113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:65:ee:ca:c7:ce:4b:d8:50:f3:c7:16:f1:
5f:b3:9d:b5:bd:6c:e1:47:07:51:58:92:ad:f0:1d:
09:62:08:af:a4:90:fa:81:a4:b4:4b:ee:de:c5:c8:
6d:29:f3:ac:e7:13:e3:bc:af:4f:28:7c:93:7d:48:
5c:92:51:e5:83:6a:27:59:bf:b2:44:16:11:b5:04:
06:60:c6:55:19:21:6b:6b:97:7d:a5:c1:40:37:fb:
db:a0:cd:fe:ad:49:85:d7:e6:72:ad:16:3a:33:29:
51:41:8e:d2:8c:ba:7a:7a:d5:b6:69:65:d3:3d:b1:
1a:bf:96:a9:cf:55:cd:44:53:cb:d2:02:e5:b1:58:
ed:77:c5:59:64:15:69:cd:ec:84:93:58:29:c0:f4:
5f:e9:11:c6:5c:38:d4:26:61:ed:64:be:36:50:68:
d1:c0:e9:0e:b9:25:01:24:74:af:ca:cc:1d:11:cd:
61:8e:da:e9:3d:40:32:97:82:eb:c1:4c:f8:4e:cb:
89:08:15:6b:19:63:c7:8a:65:0d:bb:3a:e6:dc:4d:
3d:c3:52:bf:11:c3:f1:3f:7d:e4:11:3c:d9:f6:4e:
f3:01:be:3c:bd:5b:6f:cf:87:03:c8:09:1a:4a:8a:
17:7a:37:1d:15:60:19:2c:12:f4:7c:38:14:fb:4c:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:4B:94:87:C0:14:6F:AA:90:E5:0D:5F:F9:B7:CB:F3:EA:E1:13
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/g8NLlIfAFG-qkOUNX_m3y_Pq4RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ba:b2:e1:29:01:6e:84:5c:a2:0c:42:c1:d1:db:d7:af:97:
f7:57:18:34:0f:26:09:72:73:37:cb:b7:59:41:a1:bd:83:19:
ac:1e:07:8e:43:ad:e0:09:1d:81:ca:27:97:6f:8f:55:74:6c:
0b:71:10:a0:10:b8:f1:b0:88:7d:54:53:fd:1d:1e:c0:98:d6:
41:27:26:af:ab:54:6c:92:c8:fe:bc:00:70:73:64:2b:86:82:
80:52:0b:3f:08:de:28:e6:69:7d:24:16:8a:d9:f5:5a:a2:80:
1a:e2:aa:cc:96:1f:7d:d6:c4:19:39:48:c6:cf:14:1d:b1:39:
1b:ce:c2:50:c8:7f:76:c7:94:0e:09:e2:8e:2d:da:dc:fa:f3:
b8:4c:ea:16:de:8d:f4:2b:4b:46:f5:a3:02:d5:bb:69:ae:31:
9f:39:f3:75:b8:2d:7a:58:0a:5f:50:d5:cf:42:68:3d:bb:e0:
67:4d:31:cc:b4:cd:e6:33:2f:1c:61:91:86:a3:25:06:d7:72:
a3:74:67:83:42:24:99:da:00:b8:a5:9b:39:51:1d:64:54:ab:
43:48:3b:f3:27:de:40:54:25:d5:ba:fb:e4:ef:da:d1:39:a1:
28:df:72:a8:63:a7:18:e9:cc:e0:77:19:b7:98:c7:b5:f1:36:
bb:df:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:07:36 2024 by rpki-client on console-fra.rpki-client.org