Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/0IMlkCQdUhFHct35Px_LptLvUms.roa
File: 0IMlkCQdUhFHct35Px_LptLvUms.roa (raw, json)
Hash identifier: obwowx5e47sj3+/YK1YhuqLZN01JqoKn2xMGUUYwgB8=
Subject key identifier: D0:83:25:90:24:1D:52:11:47:72:DD:F9:3F:1F:CB:A6:D2:EF:52:6B
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 018CC3B6EC33A6629A9F7ACABE35A49ABAD6
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/0IMlkCQdUhFHct35Px_LptLvUms.roa
Signing time: Mon 01 Jan 2024 06:29:54 +0000
ROA not before: Mon 01 Jan 2024 06:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60341
IP address blocks: 185.251.236.0/22 maxlen: 24
2a0c:1ec0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ec:33:a6:62:9a:9f:7a:ca:be:35:a4:9a:ba:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jan 1 06:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0832590241d52114772ddf93f1fcba6d2ef526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:5f:2a:7b:0b:3c:53:da:13:98:c5:51:c0:
b3:51:8f:de:2d:d8:8b:06:08:ef:7d:1e:26:13:14:
cf:71:43:1f:43:04:3b:c5:6f:14:41:61:a1:18:f0:
4a:83:e6:38:fa:bf:ce:02:87:89:36:38:ca:2b:cd:
9c:28:61:d4:48:c5:89:9e:48:32:fe:ef:8f:02:69:
1d:27:d8:d9:c0:18:5f:d2:99:68:41:e0:ba:c5:f6:
f3:f2:ca:34:31:24:18:25:27:31:24:24:22:bd:e6:
8b:19:5d:e8:33:9f:90:fc:d7:5a:f5:41:0a:d6:4a:
dd:33:13:ad:73:0f:23:1e:1b:12:07:41:0d:28:4f:
97:b2:2e:68:0c:05:77:67:33:71:58:9b:4d:d6:55:
d6:57:4e:5e:7c:66:ba:8e:bd:70:d1:a1:61:c8:b4:
8b:9c:56:db:8c:1c:b9:d8:6f:95:0f:f6:93:7b:cc:
cc:3e:c0:7e:6a:02:01:41:85:b8:8d:67:8e:e2:56:
a9:7d:63:32:69:5a:bf:8c:2a:bc:55:97:e8:19:60:
72:fb:58:f5:48:96:5d:14:55:8e:6e:66:a5:8b:66:
14:3e:68:46:4b:66:72:33:08:a0:03:40:eb:32:7e:
83:83:bc:2d:e9:33:09:6a:f6:31:26:9d:19:d4:bf:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:25:90:24:1D:52:11:47:72:DD:F9:3F:1F:CB:A6:D2:EF:52:6B
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/0IMlkCQdUhFHct35Px_LptLvUms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.236.0/22
IPv6:
2a0c:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ce:84:a2:67:ef:c3:f3:ef:6e:74:b0:06:54:da:7d:98:a0:
bb:24:e0:05:3e:ed:51:59:3f:b8:a5:50:b4:ac:11:76:1e:cc:
6b:3c:a3:0f:bb:89:c4:ae:ac:af:9e:f2:44:a1:5a:1c:79:a0:
9d:59:3b:54:e9:b9:62:61:1c:89:c7:c3:ca:44:48:77:e6:cd:
a4:15:c5:97:0b:2a:f5:bd:1b:8b:e1:3f:3c:6b:94:4d:9d:9d:
69:79:74:31:9b:d6:54:6d:6a:28:38:6c:f0:d8:9e:b5:e5:0d:
84:84:9b:24:8c:b0:3c:fe:d2:9e:8f:2d:26:ca:ca:88:70:7b:
79:6d:4f:c1:d2:70:cd:98:77:56:fb:31:ad:95:98:98:0f:c1:
6f:f5:17:a5:d3:c2:1f:53:23:62:3c:ad:d4:7b:8d:f0:8e:07:
f9:e8:70:8b:e7:fd:0d:8d:ec:6e:3e:8c:e9:45:13:30:d8:80:
e0:51:4c:0b:8c:ba:08:de:07:4b:c3:6f:12:2d:b6:77:04:92:
e5:41:b6:ef:53:30:3d:b5:90:b9:5d:7f:dd:fe:f5:3a:ab:e2:
94:46:39:82:d8:cc:1e:62:64:4d:ff:48:9f:70:8e:d1:51:1b:
6e:fb:ab:5f:01:9f:92:de:7d:92:39:66:4c:0d:69:9a:b1:0d:
63:b0:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:09 2024 by rpki-client on console-ams.rpki-client.org