Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/VItzM9RdUBieF0_xobY1wC2rjyg.roa
File: VItzM9RdUBieF0_xobY1wC2rjyg.roa (raw, json)
Hash identifier: I1TlU9mC0MtpSuY6WgsXyC+qUTPZuHZU/RWQdF5vDZI=
Subject key identifier: 54:8B:73:33:D4:5D:50:18:9E:17:4F:F1:A1:B6:35:C0:2D:AB:8F:28
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 018CC8DCE87CD8E381A81AA50BF9C048B0E9
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/VItzM9RdUBieF0_xobY1wC2rjyg.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203038
IP address blocks: 185.243.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e8:7c:d8:e3:81:a8:1a:a5:0b:f9:c0:48:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=548b7333d45d50189e174ff1a1b635c02dab8f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:ab:2f:ea:0c:a4:cd:20:cb:fc:e1:2e:67:
9f:47:16:54:38:79:a7:99:3b:77:2a:e1:3a:73:3e:
38:f0:86:a5:e3:d8:c3:3a:81:1b:79:d7:e7:ce:ba:
07:40:9d:91:bf:d6:bd:e9:c2:f6:23:c0:2a:13:26:
b1:96:1f:87:60:57:a3:bc:f4:bf:25:d9:74:32:2c:
bc:3d:f5:fc:c9:bd:a7:01:91:ac:22:b3:bf:07:30:
aa:ff:2f:79:f9:fb:94:6c:9c:1d:29:aa:eb:ca:b4:
11:9d:8c:07:53:c7:cb:50:bc:46:ef:6a:f7:0f:f5:
ab:ad:f9:06:c2:db:52:96:38:0b:12:07:41:6f:06:
ba:01:aa:34:10:60:30:5d:22:4c:85:42:9c:d5:2a:
0c:bb:d4:74:2f:67:16:46:22:f6:7b:7d:a3:74:b7:
1b:a3:a7:3b:f0:72:67:d3:92:60:c3:03:a1:66:92:
7b:6a:5a:10:e5:60:ea:59:b1:a2:d0:d5:4c:f2:b1:
f4:0a:a6:49:13:d9:95:85:71:1d:b4:0b:f2:96:d9:
cb:4a:24:ce:ef:14:cb:a5:ab:0d:fd:48:ae:4f:fd:
ba:b1:b1:e0:dd:c4:1c:0a:d0:36:8c:d4:9e:e8:b4:
ba:32:52:85:7a:cc:20:c4:6a:ed:a2:5a:a3:ac:8b:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:73:33:D4:5D:50:18:9E:17:4F:F1:A1:B6:35:C0:2D:AB:8F:28
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/VItzM9RdUBieF0_xobY1wC2rjyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:38:58:fe:8b:70:8c:54:0d:8d:39:13:89:6a:9a:73:bf:cb:
33:b6:cf:05:fa:05:e2:f2:1b:10:d3:d7:d1:81:10:10:93:97:
99:b9:4d:cd:92:13:97:ec:c8:a4:48:65:cb:86:24:c8:79:10:
60:81:0b:d3:c9:05:37:0a:9a:75:af:d5:f9:2f:5e:c7:72:c6:
58:b1:b1:a5:3c:97:21:b5:90:2a:2f:15:0b:09:2e:5a:5c:fa:
95:74:47:91:08:01:97:aa:f4:f9:e0:69:90:20:ca:64:63:3d:
d5:34:5a:aa:aa:09:d8:e3:28:85:5d:cb:31:a3:b6:6c:b9:71:
ef:7e:e4:b6:4e:7f:97:1c:ae:e3:56:b4:2c:42:76:85:a1:da:
0a:ef:e3:52:7f:0e:0f:57:58:0c:fa:9a:57:39:ac:79:d8:a4:
2a:b7:fe:ad:72:70:c3:25:a3:d8:b8:d8:71:85:5b:58:e4:f6:
fc:19:63:5b:95:1a:39:0a:93:06:a9:62:89:92:9b:94:30:87:
e4:e2:fc:3e:e5:0e:99:3d:2b:e4:ff:c5:5c:c6:da:b4:e2:ba:
aa:d0:e9:b4:44:5d:d9:77:1d:6f:5b:6b:73:7b:29:3a:e9:08:
90:f6:33:d7:68:3e:e2:ae:06:da:1e:fa:2a:a1:4e:dc:a4:5a:
95:46:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:34:38 2024 by rpki-client on console-ams.rpki-client.org