Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/rZDelkySUU5qgD3Pwbx5vPH1RD0.roa
File: rZDelkySUU5qgD3Pwbx5vPH1RD0.roa (raw, json)
Hash identifier: Kv6E7nfSHfHcC1s7cNfYISAn6aZ4D3DmUOAPxbdcvEw=
Subject key identifier: AD:90:DE:96:4C:92:51:4E:6A:80:3D:CF:C1:BC:79:BC:F1:F5:44:3D
Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial: 018CC34964CF03C4765D0FE6B66C3A673ED1
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/rZDelkySUU5qgD3Pwbx5vPH1RD0.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206591
IP address blocks: 185.181.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:64:cf:03:c4:76:5d:0f:e6:b6:6c:3a:67:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad90de964c92514e6a803dcfc1bc79bcf1f5443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:6a:1e:0a:43:fc:b5:f3:78:a7:c5:69:d4:
2c:7c:30:3c:01:16:f2:aa:3f:a7:1f:27:a2:ac:30:
b8:9e:e2:f2:d5:f8:f7:10:85:15:ff:b1:bd:f5:6a:
67:4e:3e:17:a1:21:dc:a8:af:44:c9:3d:40:8d:8f:
6c:6b:bd:c4:9f:f8:a3:70:e8:65:92:2e:6a:db:ed:
44:de:72:bf:5a:23:33:f6:5e:ec:d8:c7:4a:7e:45:
7d:2f:59:0a:2c:62:e3:1e:ea:db:cb:1d:ea:dc:8b:
92:78:43:2d:24:22:25:f7:31:f7:f4:13:ce:42:ea:
89:d2:45:03:79:1b:a8:35:5a:4e:18:95:63:ea:21:
35:2c:92:9a:2d:1f:d7:22:d7:1e:16:6e:46:58:b3:
a2:1d:c3:a5:18:33:80:ce:29:92:c1:e5:60:e1:b9:
b5:c5:aa:01:3b:56:36:56:e9:25:b1:7d:ba:0f:ef:
1d:64:78:d4:bb:78:ee:61:cd:f1:a9:eb:d5:ed:35:
d0:b4:f1:b7:01:bf:59:5d:90:86:38:95:a7:24:1a:
11:1f:ec:a4:74:b4:71:a3:2a:03:7b:dc:c5:34:84:
9b:e7:f9:12:c4:f9:fd:46:ad:c1:10:14:65:f2:f4:
b1:33:5c:9b:bb:34:fd:b6:d5:64:92:b0:a4:af:73:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:90:DE:96:4C:92:51:4E:6A:80:3D:CF:C1:BC:79:BC:F1:F5:44:3D
X509v3 Authority Key Identifier:
keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/rZDelkySUU5qgD3Pwbx5vPH1RD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.179.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b1:bb:15:bf:12:4a:48:f1:2d:39:7b:59:19:70:22:f8:70:
59:14:83:1d:fb:3f:70:7e:c9:79:cf:6d:e7:b2:55:10:18:d6:
62:1e:3b:b7:6c:ee:d6:18:e6:4d:f0:61:21:b0:ca:4e:a6:0d:
df:87:4f:51:0e:47:06:92:5b:5d:bb:76:dc:32:a9:87:7d:e2:
d6:17:32:84:9e:dc:67:5c:a2:f5:53:7c:40:15:a8:72:34:8a:
38:2d:b3:1f:7a:dd:a5:23:3e:d4:6e:cf:12:95:d0:5b:de:6d:
09:7f:14:5b:27:4d:59:9b:07:73:4b:d4:2a:9e:72:4e:25:3f:
e8:7d:fc:a6:98:27:f2:8e:bb:c2:2f:96:c2:fd:72:23:ce:25:
cd:6e:d3:c9:a9:b8:30:1d:ba:ce:e5:f9:dd:ff:52:25:03:e6:
8c:a5:eb:b7:e2:1c:f5:db:08:ab:71:14:dd:a4:85:d0:e9:12:
2d:ec:5d:f3:94:39:d1:d1:80:17:72:f1:f7:83:1b:f7:77:cc:
d0:dd:b4:c4:bb:fc:3a:83:8e:22:e5:fe:8f:3a:f3:fc:f6:a8:
f7:53:9d:1f:69:d0:3d:2b:46:ad:8f:df:6f:98:c5:95:ac:22:
71:8c:9a:00:e2:51:8e:d1:10:f8:d8:13:53:a0:48:cc:9a:cd:
73:e1:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:40:09 2024 by rpki-client on console-fra.rpki-client.org