Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/DwtQp7uON0fWxJrQ2NxW1K7jg1A.roa
File: DwtQp7uON0fWxJrQ2NxW1K7jg1A.roa (raw, json)
Hash identifier: 0EPlUaZ+6HfI3gwsc6Yvi2DhF/aUqthYu9S7SWLwiRc=
Subject key identifier: 0F:0B:50:A7:BB:8E:37:47:D6:C4:9A:D0:D8:DC:56:D4:AE:E3:83:50
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 018CC5012A9408E6ECF2BAA9AA9125361A84
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/DwtQp7uON0fWxJrQ2NxW1K7jg1A.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209399
IP address blocks: 185.11.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2a:94:08:e6:ec:f2:ba:a9:aa:91:25:36:1a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f0b50a7bb8e3747d6c49ad0d8dc56d4aee38350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:64:bf:4e:e9:93:87:82:82:40:61:b1:7d:
7e:37:6c:b2:6a:10:f4:62:e2:bd:b1:b6:08:6c:9c:
c6:50:64:69:03:f0:53:9f:2d:7a:7e:8d:a9:9e:17:
99:14:67:fd:64:de:38:ae:88:cd:7c:0b:5e:1c:50:
3b:22:6c:60:5c:67:2e:2a:85:f0:c2:65:6f:ad:ba:
7f:2d:7d:d6:7c:dd:52:ff:fe:78:27:55:1c:28:b1:
6c:0a:d6:cd:4d:27:8e:9d:a1:03:32:cf:0a:6e:c3:
0b:c5:73:33:57:84:4b:94:a1:2a:72:42:f8:bc:32:
46:c1:68:b8:26:b6:38:87:1c:e0:4c:4c:d9:31:c6:
3a:c8:f4:e9:95:31:7c:9e:89:87:7c:a0:a8:c5:e8:
e8:ad:05:d8:01:07:d6:68:9e:85:e9:d7:de:50:7a:
73:a4:a9:4e:b3:20:05:5c:0f:ab:bf:aa:57:08:50:
79:e7:68:79:eb:ac:bf:2e:3f:70:37:7f:8e:fc:c6:
f6:10:eb:0f:7a:01:ac:b6:e9:7d:69:1f:3f:85:9f:
80:eb:1d:63:e2:c0:31:9f:fe:58:c5:5b:44:20:f7:
57:fa:8d:ff:78:34:dc:a4:68:eb:17:65:c7:75:3c:
b9:50:cf:7a:27:af:b6:bf:73:e4:e5:4e:6f:86:d0:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:50:A7:BB:8E:37:47:D6:C4:9A:D0:D8:DC:56:D4:AE:E3:83:50
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/DwtQp7uON0fWxJrQ2NxW1K7jg1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:75:ca:ee:95:84:0a:e1:15:c4:53:09:5e:e5:6d:5a:0f:83:
14:e3:ee:7b:93:30:76:64:fc:1c:cc:51:0e:c1:f4:1a:9e:1c:
91:9b:24:85:1f:46:d8:47:dc:42:14:96:96:27:dc:8c:16:33:
e4:6b:cf:0f:ce:a6:ef:70:be:ec:13:83:5f:bf:f8:84:4b:72:
19:d5:94:b2:81:ef:42:a2:19:30:86:6d:89:62:07:e0:a5:2e:
0f:56:42:46:ea:34:01:89:b5:4a:d7:83:3c:c3:4e:34:5d:94:
69:24:6f:5b:ae:6f:76:96:65:4e:dc:88:25:45:f0:b8:fc:21:
8d:5d:ae:c4:6d:f3:5d:3d:92:3a:f3:f0:98:6f:2a:37:bf:3f:
70:25:9e:0b:c1:9d:99:f0:b8:f3:a9:5d:4c:6d:95:32:1f:06:
86:62:33:e0:a2:99:bd:32:46:94:1c:79:9d:bc:71:c6:03:95:
2e:b3:24:0c:2f:fa:e9:21:81:ef:42:3a:76:50:70:42:67:14:
6e:df:a2:69:0d:78:de:f0:1e:09:e7:8a:fe:a7:5b:58:35:96:
f4:44:d3:fe:0f:25:61:1f:b2:00:8f:1a:ce:dc:78:3c:e5:93:
7f:e8:aa:88:f4:7d:3d:96:32:46:66:5a:b6:85:a2:aa:ed:f3:
43:1e:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:05 2024 by rpki-client on console-ams.rpki-client.org