Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa
File: O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa (raw, json)
Hash identifier: pgmTaFJudaOPdu4xq5HXXii27fhwH417aICU6d74tSc=
Subject key identifier: 3B:DD:B7:D2:32:7F:CF:B8:0A:E9:60:7E:33:BA:40:31:0F:3F:84:D3
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 018CC64B26691901DBD7C0FF67B49E359880
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.250.187.0/24 maxlen: 24
185.250.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:26:69:19:01:db:d7:c0:ff:67:b4:9e:35:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bddb7d2327fcfb80ae9607e33ba40310f3f84d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:63:b6:26:1f:0e:04:aa:6a:04:ea:23:6d:
62:a9:d6:b9:9d:a1:aa:1e:76:33:09:48:09:40:92:
02:e9:0b:69:e9:7f:62:38:5d:72:9c:7f:71:34:d9:
ff:73:70:47:b8:59:e3:b7:5f:9b:53:ea:9c:f9:d1:
70:c3:0e:03:ab:47:9a:e6:e8:7a:c1:27:4b:af:de:
3e:db:14:99:d6:c2:2c:a7:71:75:e6:94:cf:79:d5:
bc:ce:d4:4f:86:cd:9b:8f:66:d4:ab:63:20:77:f4:
ae:b6:1e:2e:dc:7d:2f:54:d8:f9:0c:08:d2:5b:04:
3e:dc:9f:73:c3:1d:7c:78:93:9a:7c:ff:d7:9e:6f:
91:22:97:ae:a0:d7:c1:88:05:c1:d5:51:ca:54:40:
60:54:6b:60:73:d7:cb:00:53:84:88:ca:5c:e1:83:
81:1d:ba:68:c1:7f:fa:7d:59:ef:24:f8:c6:38:00:
d3:c6:dd:61:5d:34:bd:0b:90:14:a4:a0:63:6e:9f:
8d:c5:ae:66:33:e6:83:97:27:b6:32:b4:8a:bd:e7:
d9:1d:ea:56:da:b2:97:07:47:21:eb:ce:76:e3:fc:
83:e9:19:7a:9d:60:6b:86:25:66:c1:fe:ab:df:af:
b6:53:44:76:0f:fe:21:c1:42:13:43:6e:f5:f8:86:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:B7:D2:32:7F:CF:B8:0A:E9:60:7E:33:BA:40:31:0F:3F:84:D3
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:74:4a:92:a1:18:3a:23:21:3c:5d:09:e6:c2:da:bc:e5:c8:
a1:64:1d:63:19:90:51:ea:ff:ad:80:9e:31:81:68:e8:88:c2:
ae:73:33:9c:df:12:fb:a5:dc:80:61:8d:04:54:c0:65:8f:ec:
9a:a5:cf:ae:32:90:96:13:b3:b5:ba:aa:2f:06:4a:61:7d:be:
0b:7f:4d:d2:cc:7b:43:fd:65:29:52:17:d0:9a:3b:52:64:02:
fd:d9:01:0a:a4:a6:78:f3:de:f3:1a:9c:08:18:72:53:e5:f0:
f5:cf:2a:5d:dd:0c:71:c5:31:8e:ef:f6:69:91:24:6e:b0:0b:
10:6a:6e:47:79:13:b2:c3:66:77:03:6f:60:35:6c:87:96:5e:
9e:40:1c:6d:00:24:04:32:30:e2:be:8e:35:d6:a8:bc:bd:0b:
65:65:dd:90:d8:a4:b3:71:12:d7:09:8b:bb:4e:8b:ff:56:ed:
e1:06:9d:ac:6b:5e:68:ac:39:fd:3f:ee:3d:82:7f:7a:6f:6e:
2c:62:ad:a1:54:08:5a:c1:ba:10:f2:b8:10:90:aa:ef:6e:0b:
a4:b0:6b:ad:20:46:21:20:9a:ed:73:44:ee:92:e6:68:a9:1e:
5d:71:7e:4a:62:9a:f9:2a:13:5c:76:19:90:f0:2e:5b:21:a8:
a2:bf:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:41:36 2024 by rpki-client on console-ams.rpki-client.org