Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/TEqL1Of7R25tA6D02eik87S8zWM.roa
File: TEqL1Of7R25tA6D02eik87S8zWM.roa (raw, json)
Hash identifier: QICeCdd7iUyYQqwo+GCq8rr0D81cyQhj8Yj2smsu7/g=
Subject key identifier: 4C:4A:8B:D4:E7:FB:47:6E:6D:03:A0:F4:D9:E8:A4:F3:B4:BC:CD:63
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0191FC191997F7DC1ECF02870A2F006951D2
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/TEqL1Of7R25tA6D02eik87S8zWM.roa
Signing time: Mon 16 Sep 2024 18:29:48 +0000
ROA not before: Mon 16 Sep 2024 18:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
185.119.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:19:19:97:f7:dc:1e:cf:02:87:0a:2f:00:69:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Sep 16 18:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c4a8bd4e7fb476e6d03a0f4d9e8a4f3b4bccd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:5a:6b:68:4e:7c:12:a6:3a:7c:eb:5c:47:
79:a1:4f:0e:b8:67:b9:1e:8a:d1:b8:5b:d7:7d:fd:
a6:ee:db:34:ba:49:35:e9:c9:6c:5c:ff:8a:c6:9a:
9d:0c:5c:2c:a6:59:23:8f:11:92:c9:24:6b:6c:88:
9f:57:c5:ad:61:65:43:01:4d:6d:cf:05:b8:c4:79:
79:e0:ff:79:cd:87:f2:b0:21:b8:3c:6e:cf:00:d6:
7b:88:24:9b:e7:25:fa:82:7b:80:e6:aa:65:d4:50:
2a:cb:68:5f:bc:e8:06:b5:5b:b9:bc:61:17:5c:b4:
dd:a6:95:61:2a:e6:a3:84:f0:dc:5f:43:7c:dc:b9:
25:07:1b:b5:0e:58:97:72:a1:7e:dd:aa:e7:e8:d3:
82:08:c6:6f:5e:1e:9e:2c:9b:1f:9e:64:79:e7:6d:
b7:52:68:78:50:7f:ca:34:b9:fe:eb:b8:c1:f1:fc:
c7:8c:00:37:f3:35:b7:69:67:b6:0a:54:79:6d:c9:
05:8c:bf:e5:0d:7b:3c:3b:59:d4:f5:3a:7d:39:08:
ac:ed:a1:4f:10:11:48:41:90:d7:5f:5f:f6:e6:8b:
75:37:4f:49:a8:a3:8b:6f:7e:f3:64:9e:3f:8d:2d:
48:9b:c3:8b:46:8b:54:36:2b:85:45:57:41:b0:14:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:8B:D4:E7:FB:47:6E:6D:03:A0:F4:D9:E8:A4:F3:B4:BC:CD:63
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/TEqL1Of7R25tA6D02eik87S8zWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
185.119.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f0:c7:5b:78:1a:fe:e4:ad:6c:eb:69:d5:31:a8:36:eb:4b:
3b:05:14:b0:bd:4e:ee:9b:d5:97:1b:bd:52:96:22:aa:97:28:
3d:bd:4b:1d:8c:3f:15:4d:23:5d:a7:8e:c0:ed:47:3e:78:a0:
62:b6:9d:63:a8:cb:b4:4f:34:4c:3b:8d:32:57:9a:0a:fc:aa:
07:4e:c6:47:d5:06:b1:c9:8d:a3:d5:ac:94:73:a4:7e:fc:41:
19:9c:b1:e2:5a:8d:b5:0a:a6:f1:c5:2c:89:dc:36:a8:0b:82:
49:ff:fa:4e:93:d9:60:a3:f7:6b:a3:82:dc:db:ea:b0:1f:ca:
31:07:1d:41:2e:be:12:b9:5d:9d:ab:60:39:23:44:5a:9d:1b:
ea:ce:e9:0c:2d:3a:6d:54:16:d9:2e:a9:bd:8d:a6:16:db:37:
84:09:91:b4:80:b0:48:72:45:2e:e1:52:cb:ad:ed:8e:89:7a:
a2:2e:21:91:de:76:ad:88:bd:e4:bf:a5:d6:1b:1b:30:96:43:
b2:dc:3f:e5:06:e1:6a:fb:c4:b2:03:77:c6:d0:39:ce:4f:e9:
60:19:b3:fe:71:e9:09:c3:8a:03:56:26:a8:93:57:4c:ad:67:
61:7b:34:bd:4f:27:ed:7c:f9:cc:3f:fe:f9:27:26:96:39:76:
f4:8e:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:17:39 2024 by rpki-client on console-ams.rpki-client.org