Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pI0TG-U1AZnpoTEGnhXuvMWm6Xw.roa
File: pI0TG-U1AZnpoTEGnhXuvMWm6Xw.roa (raw, json)
Hash identifier: c1OL9VsC6n8DZB6cbXk+hVxrzlLEzjjQHzPsHex7N1Q=
Subject key identifier: A4:8D:13:1B:E5:35:01:99:E9:A1:31:06:9E:15:EE:BC:C5:A6:E9:7C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E0412B94F5F35F1F322F1F7EEAA2E
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pI0TG-U1AZnpoTEGnhXuvMWm6Xw.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201125
IP address blocks: 148.81.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:04:12:b9:4f:5f:35:f1:f3:22:f1:f7:ee:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a48d131be5350199e9a131069e15eebcc5a6e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:68:97:6e:59:06:05:14:3a:e1:0e:ce:bb:
44:3b:f4:98:28:bc:2a:95:d0:32:42:b4:7c:6a:31:
dd:f7:ac:11:3c:28:1f:2b:25:bc:0d:30:6b:58:64:
2c:a9:0b:1d:f2:8a:eb:47:f0:6e:96:e6:2c:df:43:
ca:c5:29:45:9a:4e:19:64:c1:08:e3:9c:74:67:1a:
e7:37:65:07:7d:1b:90:1b:08:b7:c4:5a:c5:bc:cd:
63:77:4f:80:82:ce:a9:e6:64:0c:e0:e9:30:83:e3:
4f:f6:61:81:3e:ea:ae:8b:66:ae:48:6b:28:83:d9:
bf:85:2a:21:cb:8f:e7:cc:3b:a0:12:b0:49:3c:62:
84:81:0b:4c:46:47:df:e9:f8:14:c8:7c:23:d2:74:
ce:e5:a8:9a:82:13:f0:3a:6a:3e:34:24:d0:cf:85:
3a:01:bc:54:f9:98:72:26:4c:3a:8d:d0:31:b1:81:
9d:fb:5e:c9:c4:0b:cf:a3:ca:e3:65:22:4b:08:e8:
b9:87:c5:e1:48:79:df:b5:52:6d:d9:9c:0a:2a:40:
6c:ce:8f:de:6d:b4:71:2a:be:ff:34:07:12:c1:79:
54:8d:ed:3c:01:c9:37:d1:39:68:3b:b0:2a:87:9a:
0b:57:1e:74:55:4c:0d:0e:61:9d:ff:0e:9a:03:9f:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8D:13:1B:E5:35:01:99:E9:A1:31:06:9E:15:EE:BC:C5:A6:E9:7C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/pI0TG-U1AZnpoTEGnhXuvMWm6Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.248.0/24
Signature Algorithm: sha256WithRSAEncryption
37:44:c7:68:ca:ba:f0:74:ad:ff:45:70:1d:cc:18:1c:c0:03:
0a:f8:fe:c8:66:80:15:18:4c:7a:bf:27:e8:ab:d5:ad:95:dd:
3c:60:5c:eb:f2:55:07:c3:af:bb:74:38:0b:78:fd:73:f7:9e:
0f:47:56:f8:94:d2:88:38:14:d6:8e:24:88:cf:f3:54:bf:98:
a4:49:a7:f8:75:40:71:2a:5f:51:b0:d2:f1:ea:c0:e7:7b:e1:
76:3e:7f:ab:41:31:e2:ad:98:53:f7:de:01:b1:fa:89:0c:08:
89:5f:0c:bd:b9:64:c1:4e:00:90:24:7b:20:09:97:85:28:7a:
f1:18:3d:26:53:6e:94:38:9a:50:49:64:13:45:49:bb:1f:cd:
93:35:5a:bd:ed:5e:8f:fb:4c:5e:52:46:5a:2c:bc:50:5a:da:
f6:0a:42:b4:4c:dc:09:c8:fe:3d:29:36:c2:17:90:d1:cc:dd:
74:f7:3e:fc:f6:5e:78:d0:ce:55:da:dd:58:26:c1:f3:cb:a0:
80:69:4f:68:1d:7b:20:91:30:e3:21:98:55:c9:7d:9c:e3:2c:
81:66:c4:14:3f:45:c9:84:84:f9:3a:2a:17:77:8e:e4:b6:94:
27:4b:39:5a:9c:31:bf:6b:03:a0:97:59:b8:0b:70:86:da:54:
06:79:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:44:17 2024 by rpki-client on console-ams.rpki-client.org