Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pp6_9S1p8Me-kts257xDYuqtXTc.roa
File: pp6_9S1p8Me-kts257xDYuqtXTc.roa (raw, json)
Hash identifier: QSaDAdGsG1mk7iJiGJWKZtQuneSxcLrv+IGP+JNH2Oo=
Subject key identifier: A6:9E:BF:F5:2D:69:F0:C7:BE:92:DB:36:E7:BC:43:62:EA:AD:5D:37
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018D40862DD862E3E65171D6A28C14227FD5
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pp6_9S1p8Me-kts257xDYuqtXTc.roa
Signing time: Thu 25 Jan 2024 12:09:11 +0000
ROA not before: Thu 25 Jan 2024 12:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204619
IP address blocks: 185.143.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:86:2d:d8:62:e3:e6:51:71:d6:a2:8c:14:22:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 25 12:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a69ebff52d69f0c7be92db36e7bc4362eaad5d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:13:7e:ac:7b:87:07:10:d5:44:67:dc:5d:
21:2d:e1:68:c9:ff:d0:f2:37:91:e5:c4:48:15:48:
31:41:2e:06:84:77:41:cd:9f:d8:88:9f:f5:c3:8c:
b1:05:12:03:6a:39:a6:13:4f:ff:69:3d:72:8c:ec:
54:81:fb:08:32:8f:d5:69:37:98:cc:43:07:11:a2:
cc:c5:ed:2c:6c:9c:0d:92:e0:d1:5f:bd:99:68:d4:
fb:52:94:ee:2f:e6:9e:7b:b1:34:75:ee:27:23:b3:
d4:39:ec:6f:8e:bc:a6:0c:9b:2b:74:fd:ff:85:f4:
c2:d1:51:37:26:4f:ad:e7:dd:98:ed:07:3b:ff:5f:
27:73:ff:04:80:5d:a1:5c:4a:49:88:e8:dc:dd:a8:
51:3a:11:ee:09:75:69:c2:f6:66:af:27:4b:10:bf:
da:c9:fa:69:52:4a:c3:dd:5f:1f:1a:cc:67:e5:42:
5e:7f:73:d5:11:f7:32:5b:12:18:25:5a:1b:25:ab:
4e:a3:28:c0:8d:93:d0:74:d4:73:ce:f7:de:78:3c:
a0:a0:51:86:d0:8c:05:ea:3e:28:da:3f:15:8d:08:
1b:24:d9:4b:8f:2a:2e:65:81:05:94:12:c3:8a:78:
b0:32:4d:22:87:f1:dc:95:56:43:f3:bf:ac:4d:da:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:BF:F5:2D:69:F0:C7:BE:92:DB:36:E7:BC:43:62:EA:AD:5D:37
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/pp6_9S1p8Me-kts257xDYuqtXTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.144.0/24
Signature Algorithm: sha256WithRSAEncryption
18:24:7a:36:01:6d:ad:ac:fd:20:68:e9:f5:26:aa:7a:ee:df:
07:0d:9c:68:a7:b6:de:71:71:73:10:3d:73:b9:c9:82:91:04:
f2:86:48:76:9c:a4:e0:97:10:5a:bb:62:34:ec:ba:f5:21:ca:
8e:65:71:5a:25:e4:a4:48:6e:8e:33:31:16:10:f4:bb:16:00:
49:85:51:84:b2:a9:60:1d:e3:6e:74:46:95:da:a8:7d:cf:a8:
a4:c8:96:ea:ba:50:c0:9a:b4:4d:60:c2:0d:06:7b:d9:ff:e8:
6e:08:29:9e:75:6d:8e:c2:1b:b8:6a:47:7d:fd:25:ee:95:1f:
a6:d9:0f:0f:fb:08:5e:07:a1:87:65:52:1a:a8:a0:f3:6f:fd:
ab:15:dd:a3:e4:6b:75:6a:fb:6b:44:62:19:1a:c7:a7:a3:d0:
6e:95:fa:99:1a:1e:22:84:19:10:26:c6:24:f4:d5:a9:25:d2:
f0:d7:56:c5:9d:4c:84:a2:0a:26:11:30:ac:a8:23:ac:e2:df:
9c:5a:d0:ac:c0:48:0a:c2:2a:d8:d6:73:84:4e:ea:cd:da:f7:
40:b9:aa:56:73:95:a0:99:3f:b4:e8:4e:a3:60:5d:95:c1:38:
55:2b:c2:7f:3d:59:08:77:0c:78:7c:cf:1d:4a:8f:bd:36:b8:
9e:12:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:18 2024 by rpki-client on console-ams.rpki-client.org