Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/r0YRkTc7WcWD1fEwG1Shi9K3ySc.roa
File: r0YRkTc7WcWD1fEwG1Shi9K3ySc.roa (raw, json)
Hash identifier: q4j0aY/rmIOHNlxEtbP+Vi9xdqlFNkLZkse4CFlYIpo=
Subject key identifier: AF:46:11:91:37:3B:59:C5:83:D5:F1:30:1B:54:A1:8B:D2:B7:C9:27
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019121F8952A275521C616056B1CF3020C82
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/r0YRkTc7WcWD1fEwG1Shi9K3ySc.roa
Signing time: Mon 05 Aug 2024 09:57:04 +0000
ROA not before: Mon 05 Aug 2024 09:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44966
IP address blocks: 185.84.226.0/24 maxlen: 27
2a13:76c0::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:f8:95:2a:27:55:21:c6:16:05:6b:1c:f3:02:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Aug 5 09:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af461191373b59c583d5f1301b54a18bd2b7c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:47:a9:12:62:a2:91:c9:21:55:d7:f4:85:
85:fd:e8:25:6e:27:52:50:4a:d8:c9:32:a3:00:56:
91:98:0c:19:51:e4:f5:37:90:bc:ea:18:ae:b1:2d:
9c:62:46:9a:40:f7:80:70:b6:6d:6b:1a:db:00:89:
74:13:d1:79:e7:e0:09:33:ea:b7:e4:ee:ed:da:31:
e1:c7:79:53:d7:2f:23:67:b9:86:2d:28:03:e1:be:
20:95:a9:8c:9c:b7:33:72:e5:1b:3b:f9:10:b9:a3:
7f:47:d2:73:c5:8c:62:00:58:40:ce:97:b8:a1:5c:
29:0d:bc:d3:b0:ef:ba:46:76:d2:92:eb:78:c7:fd:
a4:96:ff:8b:1b:b4:d5:a6:7c:88:6c:a7:69:5b:ee:
0f:29:77:e3:7f:7f:6a:e4:02:91:d8:92:62:9c:69:
f9:c4:0a:49:9f:82:5b:a5:d5:ea:ea:bf:30:f7:2c:
2c:1e:99:9f:47:5e:12:51:28:43:10:f3:6c:48:64:
31:f2:57:11:bb:39:27:83:82:b8:29:a1:bf:7a:0c:
58:1d:c8:93:9f:9d:19:2d:c0:57:4b:60:eb:2c:ee:
5f:76:81:f4:96:e8:cc:af:a6:52:54:00:6d:a8:ae:
45:11:13:fa:e7:ba:44:c4:4b:97:8b:2e:09:61:2b:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:11:91:37:3B:59:C5:83:D5:F1:30:1B:54:A1:8B:D2:B7:C9:27
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/r0YRkTc7WcWD1fEwG1Shi9K3ySc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.226.0/24
IPv6:
2a13:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:bb:fa:f2:32:e1:08:94:9a:72:57:9f:e8:f2:87:c0:8d:e9:
6a:61:99:e5:a2:73:f1:01:e4:ef:33:98:ce:80:06:76:f9:a5:
f0:e9:bf:5a:cb:1d:7b:56:11:8b:7c:07:17:22:b5:d3:ed:4d:
65:dd:a9:d1:47:40:09:5d:a7:76:e4:eb:16:b8:66:78:86:ea:
71:f8:cb:5d:ea:8b:03:88:4a:d6:e0:41:bd:5a:75:4f:0b:dd:
db:eb:77:53:d2:e0:6e:f9:88:1b:9a:ff:56:08:66:b3:44:ca:
7a:31:41:53:4c:4c:34:55:17:ec:21:49:7c:24:3d:96:de:2b:
6f:db:f0:e5:20:63:32:21:0e:f9:4a:80:01:b1:5e:c6:fe:bd:
c3:8d:94:70:49:7b:43:d7:df:9d:f9:ab:49:eb:ce:a8:bc:7a:
f1:ba:9a:c2:5f:38:e3:63:40:b8:a6:57:84:39:b8:cc:6d:ed:
f7:17:24:3c:3b:8a:4f:9b:37:1d:17:05:e4:85:cd:e2:cb:8e:
31:30:82:25:15:a2:e5:15:fe:7b:1e:e9:07:8b:cb:50:c9:80:
c2:03:f1:dd:74:ba:85:17:64:da:e4:8a:8b:ce:e8:0e:cc:c9:
80:4d:19:20:09:d4:79:b8:ff:35:69:c6:86:77:0e:f6:d1:7c:
75:31:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:36 2024 by rpki-client on console-ams.rpki-client.org