Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/9SkCGuoNljbL2EDgGouxdlPOqTg.roa
File: 9SkCGuoNljbL2EDgGouxdlPOqTg.roa (raw, json)
Hash identifier: ZMAN4J5TxFmmpmdOwo1YNfFuOEU8hRkcz3UkMu90jd0=
Subject key identifier: F5:29:02:1A:EA:0D:96:36:CB:D8:40:E0:1A:8B:B1:76:53:CE:A9:38
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 018E13585A39617957C62E10E5A8F62BBC5A
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/9SkCGuoNljbL2EDgGouxdlPOqTg.roa
Signing time: Wed 06 Mar 2024 10:39:01 +0000
ROA not before: Wed 06 Mar 2024 10:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215655
IP address blocks: 185.186.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:58:5a:39:61:79:57:c6:2e:10:e5:a8:f6:2b:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Mar 6 10:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f529021aea0d9636cbd840e01a8bb17653cea938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:6c:5a:34:b8:f2:34:86:77:0c:14:03:c4:
1f:68:e3:7e:b2:01:b0:e2:c0:41:03:77:02:ba:42:
34:83:ec:71:24:be:7b:1d:b1:c3:e9:b7:4d:03:44:
f6:d0:37:b0:99:1c:d2:7e:ca:1e:d1:d5:8a:0d:e1:
18:c9:12:8f:b3:e8:0d:10:8d:b0:03:1c:39:bf:2f:
77:25:11:cd:45:e8:ad:f8:68:36:2a:0c:51:cf:1f:
90:5a:62:75:ab:e3:a2:61:0e:e0:43:ba:11:74:cc:
30:c3:80:74:bf:db:d7:e6:1f:fc:d9:75:4f:57:64:
f8:94:9b:0c:53:8d:01:2b:53:ac:6b:08:82:bc:7f:
07:11:dd:c7:bd:47:d9:92:83:45:b0:d0:04:54:9f:
d7:81:55:38:34:e8:1d:3d:10:0b:ac:23:cb:e9:7f:
fc:0b:6c:3f:31:60:a8:45:b3:e7:44:5f:4f:62:6c:
3e:86:01:f5:86:11:69:b7:14:41:c8:33:3b:de:6c:
37:0d:01:84:67:6e:a7:1c:d3:0d:cc:0d:2d:f2:1e:
fd:fd:15:08:48:d6:4d:7b:2e:72:69:9d:85:ad:8c:
57:f3:2a:43:5f:fa:27:e9:da:57:21:3f:5b:32:f2:
ed:c4:a5:1e:6a:a9:7d:52:b6:81:31:b4:db:18:84:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:02:1A:EA:0D:96:36:CB:D8:40:E0:1A:8B:B1:76:53:CE:A9:38
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/9SkCGuoNljbL2EDgGouxdlPOqTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.51.0/24
Signature Algorithm: sha256WithRSAEncryption
17:09:90:18:0b:90:84:b6:df:b3:a5:55:32:09:0e:4b:d2:f0:
60:41:f6:45:49:3d:f5:f8:26:de:a1:5a:cf:3f:cd:dd:89:83:
23:87:35:f2:de:50:da:44:98:f5:7a:48:e8:36:91:0c:8c:ad:
df:b9:88:2d:17:45:7e:7e:59:11:cc:7c:ee:06:05:9e:65:60:
a8:ee:f4:15:a3:f1:12:77:25:af:dd:2a:35:c3:45:e4:0e:92:
fa:a0:3e:03:aa:a9:7e:ad:f0:31:f5:63:b6:40:dc:13:30:ea:
12:ef:b0:02:65:eb:8d:48:46:4c:66:a2:5e:eb:53:e1:03:c9:
0a:f1:0d:15:6a:09:34:05:78:84:3f:3d:17:d3:9d:65:78:b5:
fa:b0:64:23:72:60:c2:14:fb:83:ae:ed:09:b7:3b:e9:a6:11:
94:c8:dc:ec:2f:2b:7c:78:ed:d9:65:e0:c1:c8:21:94:e9:6b:
28:f1:81:32:d2:e6:c4:9d:8a:48:1b:a7:d9:08:45:3c:24:f1:
d9:b8:50:fe:72:1d:95:0f:7c:66:c9:f3:3f:c9:80:33:64:38:
89:9f:50:a0:ab:59:d4:c7:58:3f:58:fd:21:f5:96:23:b4:73:
e4:27:9b:47:af:3b:74:7c:c0:70:9b:5d:fb:78:2a:60:0a:a1:
38:3e:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:29:36 2024 by rpki-client on console-ams.rpki-client.org