Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/gIp5PUcLgR3DupXrvfl748mN3DE.roa
File: gIp5PUcLgR3DupXrvfl748mN3DE.roa (raw, json)
Hash identifier: 6Ppms/IS4Ktu1YqHLBnAxERboyoGHR9BycUFxhB5Inc=
Subject key identifier: 80:8A:79:3D:47:0B:81:1D:C3:BA:95:EB:BD:F9:7B:E3:C9:8D:DC:31
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 0190E3F555864A97422141B1DD802BCF8EDD
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/gIp5PUcLgR3DupXrvfl748mN3DE.roa
Signing time: Wed 24 Jul 2024 08:57:04 +0000
ROA not before: Wed 24 Jul 2024 08:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48631
IP address blocks: 185.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:f5:55:86:4a:97:42:21:41:b1:dd:80:2b:cf:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Jul 24 08:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=808a793d470b811dc3ba95ebbdf97be3c98ddc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:92:53:6e:c2:c6:a0:57:20:25:6a:fc:60:
90:c8:c3:b6:26:ea:a7:ac:cf:89:56:a9:0e:c8:aa:
2a:db:1a:71:9a:a0:ec:14:48:44:85:f4:34:d8:ed:
87:05:8b:9a:a5:5d:ed:ce:87:5b:e2:e0:f5:ed:fb:
d6:b8:9b:56:f7:b5:ee:f3:79:fb:06:96:d0:bf:53:
b9:3d:c0:1f:68:7c:97:e3:3b:ce:1e:bf:76:c6:e3:
80:d0:17:a1:03:41:77:90:04:e5:b6:bb:56:23:a6:
0a:66:14:20:c4:20:32:db:68:d4:ac:95:7d:56:13:
50:5a:3c:46:0b:92:94:61:f7:af:52:27:cb:c3:4f:
fc:1d:94:4a:6f:f8:57:54:16:d4:0f:2e:08:29:30:
ca:03:82:4d:5b:42:7d:09:b9:0d:17:25:82:b9:95:
f7:60:5a:62:b4:f2:07:d1:c7:cb:a9:a3:dd:c7:31:
fa:37:17:bc:51:e3:20:69:d5:ee:77:6b:8c:50:50:
06:a9:ab:c5:45:41:4d:76:d9:d6:81:47:a2:22:f7:
4e:71:17:8a:39:c4:57:7f:3c:9e:ee:81:88:d5:a5:
56:dc:b2:91:2a:5d:6b:2f:1e:c9:50:2d:64:ca:48:
c7:f4:ba:57:a2:f9:34:79:60:72:9c:49:c0:1e:fc:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:79:3D:47:0B:81:1D:C3:BA:95:EB:BD:F9:7B:E3:C9:8D:DC:31
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/gIp5PUcLgR3DupXrvfl748mN3DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4f:15:5c:d5:7f:cd:95:9c:72:50:96:c6:91:a8:3b:2b:16:
63:9a:77:63:33:19:f7:55:16:ae:10:36:85:3c:13:01:59:9e:
b6:6a:93:5f:23:c1:10:b0:84:24:cf:ee:4f:2f:2f:84:1d:d9:
7b:41:40:0c:9a:fb:2d:d6:a6:e2:dc:2e:2d:f4:a4:51:d0:d9:
e6:98:83:9b:a4:38:27:c4:b9:76:aa:83:9f:0d:7b:6a:6f:b7:
e1:fb:f9:22:e0:eb:6b:8a:2f:3e:9b:66:c9:d1:86:a0:d9:6a:
3b:15:17:85:b3:fc:f7:aa:21:49:00:8e:94:17:f0:8f:b4:5e:
8e:2f:a2:44:a7:ce:49:5c:17:d8:41:0f:ce:eb:de:62:01:77:
73:9a:5b:24:ae:45:6c:05:29:e4:eb:bb:a4:52:f6:9e:7c:a2:
99:0a:d7:b9:1e:f5:f1:5b:8f:d5:95:35:b0:6d:96:b2:79:26:
87:68:0a:98:0b:58:06:74:d5:7d:cb:26:b7:47:72:8c:b1:43:
96:1e:ee:e5:98:b4:3e:5f:8c:b2:b7:9c:4e:04:53:91:7d:d2:
9d:40:3a:c6:5b:a1:22:cc:38:c4:e4:b5:26:76:aa:be:ad:44:
16:ca:8f:57:d2:ab:ea:ac:34:12:06:74:9e:53:ce:37:f7:d0:
2e:ac:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:32 2024 by rpki-client on console-ams.rpki-client.org