Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/pxkZTOP1JU5nSA4mNVaEA76BcaU.roa
File: pxkZTOP1JU5nSA4mNVaEA76BcaU.roa (raw, json)
Hash identifier: bLxkrnoGWPtTY4VWiM7vrucHj9g7mO3vRC4UXy13IrM=
Subject key identifier: A7:19:19:4C:E3:F5:25:4E:67:48:0E:26:35:56:84:03:BE:81:71:A5
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 018CC50100BD8FC050EB8494F62655B7F315
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/pxkZTOP1JU5nSA4mNVaEA76BcaU.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199667
IP address blocks: 185.110.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:00:bd:8f:c0:50:eb:84:94:f6:26:55:b7:f3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a719194ce3f5254e67480e2635568403be8171a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:69:6c:31:6a:e9:ba:67:d0:bc:64:37:5a:
b2:40:49:bf:b5:ea:3e:cd:0d:05:21:af:71:42:71:
53:0f:b8:c3:65:0d:a9:a9:3d:e5:ce:a0:ec:e4:2f:
3f:3d:92:6a:05:a1:0c:5b:8f:e6:0d:c8:ae:40:30:
3b:9a:59:62:c7:1a:22:6d:b3:20:58:41:81:51:ac:
7c:fc:9c:56:7c:27:22:b8:90:a9:47:ff:60:65:fd:
94:68:d5:b6:21:4d:9a:77:2c:b0:62:ac:05:0e:f2:
fa:c3:9b:30:6f:22:1a:00:14:36:7f:ae:eb:07:cb:
05:2e:67:f8:84:9f:d8:a0:18:07:3b:8b:1d:04:ee:
cd:63:b5:6e:84:36:41:59:88:f4:56:3e:d3:a6:f5:
50:b6:e7:c0:e9:a0:a2:30:02:86:8a:69:fd:ef:76:
e8:dd:50:b1:0a:9d:6f:12:c2:9b:c2:e2:9a:fe:04:
c6:e9:90:af:76:bb:ac:81:70:ef:10:4d:34:4a:32:
3c:07:f7:ad:66:29:95:b2:e1:c4:76:7a:70:66:58:
d3:23:1b:e1:88:ea:8c:c5:0b:4d:66:70:b6:c0:19:
13:44:1a:3e:ec:86:0c:79:51:8a:7b:3e:ac:7f:e1:
ee:d3:fe:c7:f5:0b:cd:e3:c9:69:5f:60:00:6e:c3:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:19:4C:E3:F5:25:4E:67:48:0E:26:35:56:84:03:BE:81:71:A5
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/pxkZTOP1JU5nSA4mNVaEA76BcaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:25:ae:38:70:80:ea:90:ee:e5:e0:bb:a8:6d:04:d1:c6:0b:
9c:11:13:fb:43:6e:0c:10:8a:de:1d:f4:37:81:89:69:ba:d7:
35:16:34:20:80:a8:15:73:17:54:62:9b:d9:60:39:fc:15:f8:
a0:66:40:ec:b2:b0:eb:de:88:c9:19:92:9d:a2:ce:45:c5:23:
43:a7:4c:88:02:8b:47:e7:f1:12:23:ad:1b:50:9d:76:16:42:
df:b3:2c:18:84:77:2f:ca:f4:70:9f:2a:c7:6e:4e:22:f7:9f:
cb:35:9a:43:1c:aa:02:59:46:20:23:dc:bc:b1:17:0e:73:b3:
92:8f:18:f0:70:5f:90:10:63:03:e1:ae:17:41:08:bb:a0:b8:
3c:05:8c:99:9b:08:d3:47:00:52:63:46:c5:06:12:27:e1:c5:
c0:36:31:bc:21:ba:2e:72:b2:ef:88:22:ca:b9:59:f5:21:e8:
0e:82:11:df:46:0b:67:19:b5:a0:a0:e5:1c:df:dd:40:03:48:
ef:23:ee:a1:51:df:48:cf:9b:a7:33:ad:45:e5:04:f6:06:68:
ae:ea:5c:11:44:a2:98:52:14:e9:ec:8c:97:ad:49:2a:19:d4:
1a:2a:87:31:22:22:ea:46:2a:e2:26:02:c3:e9:70:71:a2:ba:
8c:13:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:17:33 2024 by rpki-client on console-fra.rpki-client.org