Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y9EIHhMPnKXuif-FS0PtQidKeEo.roa
File: Y9EIHhMPnKXuif-FS0PtQidKeEo.roa (raw, json)
Hash identifier: YGQSklfQLJbCAQgOe4Zu7uxSfRcK00D3oGqljpllN/0=
Subject key identifier: 63:D1:08:1E:13:0F:9C:A5:EE:89:FF:85:4B:43:ED:42:27:4A:78:4A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A77E6CF22359E369C1038FD4FE4F2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y9EIHhMPnKXuif-FS0PtQidKeEo.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211686
IP address blocks: 185.148.12.0/23 maxlen: 24
37.123.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:77:e6:cf:22:35:9e:36:9c:10:38:fd:4f:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63d1081e130f9ca5ee89ff854b43ed42274a784a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:29:79:f1:58:0b:00:f8:9c:10:72:01:ad:
40:c7:b8:d2:86:9f:ec:14:a8:c5:14:46:38:0c:25:
df:b9:37:58:ba:fe:00:11:99:a1:f7:1b:fb:c4:fe:
54:a5:5d:7c:f4:e5:5f:bb:bc:79:cb:82:20:46:08:
37:a0:10:da:de:af:88:8a:47:9d:c8:2b:11:17:e5:
1a:21:1e:d1:53:3b:3f:8b:05:53:53:60:3d:6a:66:
b9:8e:b9:82:21:ca:bf:c5:51:77:0e:7c:70:94:b8:
c1:ff:25:dd:d7:9a:de:66:45:dd:e3:51:23:df:8a:
4d:c2:72:fc:5e:7b:fc:a5:ae:dd:c2:8b:2d:98:f3:
69:51:e8:a1:05:bc:8e:2c:dd:5a:4e:b4:7c:67:ae:
7f:5f:f1:b6:68:e9:f7:74:97:09:0d:b1:d9:01:20:
86:0a:aa:19:e4:d7:13:a7:f4:c2:88:90:c4:89:eb:
d3:2d:99:c1:e0:bc:02:6e:49:ca:aa:7a:3c:71:e5:
17:81:a7:c7:9d:40:d7:1c:01:2e:2b:51:5a:25:a0:
03:c2:71:ff:2a:de:76:83:7a:65:96:6d:67:c2:87:
11:f9:8f:3d:56:2a:4e:37:0e:9a:ae:b1:45:82:19:
7a:56:47:3f:f5:13:68:7e:67:c4:a8:aa:d2:b6:26:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:08:1E:13:0F:9C:A5:EE:89:FF:85:4B:43:ED:42:27:4A:78:4A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Y9EIHhMPnKXuif-FS0PtQidKeEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.192.0/23
185.148.12.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a1:b3:08:bc:b5:fa:fb:e4:4a:5c:6f:d2:29:48:66:11:6e:
58:59:63:f3:58:aa:1c:4f:24:6b:12:65:a0:aa:65:fd:78:00:
08:8b:4a:67:e6:2e:7c:e7:72:89:63:ac:8b:cf:bf:f7:c4:8a:
8a:0c:8e:cd:40:f1:ee:d3:f5:5f:f7:6c:27:21:a5:13:77:b1:
2d:91:f3:fb:ed:9a:ce:b5:af:c0:24:6a:e1:b9:1f:d4:bb:c5:
6f:2e:90:d1:19:ea:74:00:fe:cf:a0:e4:c8:bf:db:8f:00:ed:
cf:e1:a0:ac:4f:21:bc:ed:5d:76:0a:d3:00:dc:61:de:23:99:
31:6c:00:81:3d:68:c5:f2:0a:70:97:64:2d:b5:aa:ab:02:26:
fb:ab:64:8d:ff:17:f1:a0:20:b4:34:52:14:07:ae:d8:b6:24:
2d:11:12:e9:7f:b4:c8:b5:82:55:04:82:b3:d1:a4:3d:4a:59:
70:e6:99:cd:c5:35:73:1f:63:c3:4d:04:fb:e5:be:55:75:c5:
29:38:bd:58:ae:91:a4:2b:e0:10:05:cd:7a:8a:08:56:83:20:
bd:8d:c8:03:2b:f7:86:ac:6f:90:5f:0c:8d:ce:4d:50:ac:bb:
0c:49:fb:45:86:81:9d:04:54:0d:3a:aa:26:be:a2:c7:83:14:
0a:b8:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:10 2024 by rpki-client on console-ams.rpki-client.org