Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/1aYU_XMA8vpsYh4p7yguh33GyfU.roa
File: 1aYU_XMA8vpsYh4p7yguh33GyfU.roa (raw, json)
Hash identifier: 5dLYwDMXBmQDLauBrQtVLVvk+H+Tk8UavUYRE179y4c=
Subject key identifier: D5:A6:14:FD:73:00:F2:FA:6C:62:1E:29:EF:28:2E:87:7D:C6:C9:F5
Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial: 018CC794F79D4AB38764DFA956F50F14F682
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/1aYU_XMA8vpsYh4p7yguh33GyfU.roa
Signing time: Tue 02 Jan 2024 00:31:17 +0000
ROA not before: Tue 02 Jan 2024 00:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 185.34.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f7:9d:4a:b3:87:64:df:a9:56:f5:0f:14:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Validity
Not Before: Jan 2 00:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5a614fd7300f2fa6c621e29ef282e877dc6c9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:c7:fd:2b:fd:32:b4:6f:50:b5:06:08:c7:
a4:df:d5:a6:34:ed:5b:f0:fe:08:90:20:1b:9e:d7:
c3:c3:aa:39:6d:d4:20:bb:10:ed:4f:77:bc:3e:97:
b3:b6:ac:11:ca:ae:d5:e5:20:5f:95:ab:b5:af:88:
1e:a6:14:aa:ec:48:53:27:96:35:c6:69:a6:9e:87:
7a:45:f6:a7:83:e2:f7:d3:6b:83:ff:ff:ed:30:b2:
46:37:fb:9d:2a:81:59:11:b9:53:09:f4:20:4f:6d:
34:c4:2f:42:03:91:25:f8:20:0c:90:5a:22:be:89:
9f:0a:8f:ff:72:9f:39:6e:05:73:46:c6:4a:d1:ab:
5c:53:38:81:61:e5:57:2e:98:3a:b6:29:00:be:8a:
07:80:e1:a2:e0:b7:cb:8a:fd:fc:85:1d:22:ff:d7:
65:f3:ef:d2:3a:f3:66:94:7a:67:9c:90:b3:42:a7:
03:ae:59:f5:ab:94:7a:ed:9a:83:73:d5:8c:52:7c:
2f:cd:c6:ea:9e:65:70:a5:96:3d:70:47:f7:74:a7:
c1:5d:0f:de:29:10:57:0e:74:48:ae:20:c6:34:3a:
e6:4b:3c:db:ae:65:d8:a0:45:54:ef:46:04:7c:07:
82:19:e9:58:2d:25:e5:84:d5:29:93:df:48:b3:a4:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:14:FD:73:00:F2:FA:6C:62:1E:29:EF:28:2E:87:7D:C6:C9:F5
X509v3 Authority Key Identifier:
keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/1aYU_XMA8vpsYh4p7yguh33GyfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1e:50:1b:17:4f:01:6c:43:6e:93:11:0f:1e:12:fd:97:2c:
5a:e1:04:ef:44:e4:1b:9b:f8:f7:c7:51:1c:c6:e1:68:91:de:
44:7c:1e:f7:dd:7d:62:ef:ee:3a:15:9a:b7:a1:05:d1:21:d0:
9c:a4:11:62:ca:8b:6e:15:0b:07:70:e8:9c:1d:43:23:53:cf:
6c:e0:af:90:09:fe:06:6c:d3:e0:22:90:ab:3d:ed:b1:75:f5:
f9:f1:18:19:9e:2b:0d:98:41:32:0b:a8:55:34:c0:05:ac:d5:
55:cf:5a:62:7d:fb:fa:40:11:7f:24:26:4b:9d:40:c8:c5:1a:
79:6f:c8:b0:1a:6b:7a:ee:6c:80:92:98:02:3a:7c:5a:df:ea:
df:de:91:c6:d6:85:d2:bc:bf:bd:09:47:f6:65:d6:14:db:50:
56:af:0c:10:03:0c:47:6d:a1:0d:bd:06:90:e8:99:54:b9:fe:
4a:6b:b3:f9:b6:61:c3:22:0c:07:59:c8:16:38:24:58:73:8a:
6a:4f:7b:33:95:35:2d:64:08:a1:f8:42:a8:52:83:27:c2:2b:
07:89:2e:b7:cc:bb:59:c5:72:89:cd:20:3f:c9:1c:93:10:56:
d8:57:b4:a4:8d:f3:25:ee:bb:7f:35:85:03:4f:ec:97:c5:65:
6f:db:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:04 2024 by rpki-client on console-fra.rpki-client.org