Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/L0JyOOvymbxgbWlaEf2fWxHIRMk.roa
File: L0JyOOvymbxgbWlaEf2fWxHIRMk.roa (raw, json)
Hash identifier: 11n2v63K7pR3fURYaC8lqlou9ayPhZL1RVP4NQEugVE=
Subject key identifier: 2F:42:72:38:EB:F2:99:BC:60:6D:69:5A:11:FD:9F:5B:11:C8:44:C9
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 018CC50050A2CAABEBB1BA82A58D2DDE424D
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/L0JyOOvymbxgbWlaEf2fWxHIRMk.roa
Signing time: Mon 01 Jan 2024 12:29:41 +0000
ROA not before: Mon 01 Jan 2024 12:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201063
IP address blocks: 185.3.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:50:a2:ca:ab:eb:b1:ba:82:a5:8d:2d:de:42:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 12:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f427238ebf299bc606d695a11fd9f5b11c844c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:92:b4:9e:38:19:5c:31:41:20:ea:45:d6:
6a:af:5e:cd:11:dc:1c:08:97:e1:69:34:9d:31:76:
04:a8:9a:f2:21:74:5a:b8:b7:89:1f:12:c8:68:2e:
d1:e7:42:af:da:d5:cf:7e:4b:69:66:4b:36:7e:1c:
ec:aa:4a:bf:26:ad:9d:44:c7:f3:98:2e:fc:27:5c:
ab:78:84:f9:82:30:2b:da:d3:cd:57:e5:d4:f5:9b:
17:63:cb:de:ee:cf:96:5a:ea:1b:ea:e8:72:92:0f:
8e:20:63:cc:c0:ba:25:2c:3e:c6:15:7c:af:9a:5d:
b3:f6:1b:f9:07:c8:9a:3d:8c:80:03:bf:19:42:11:
43:cf:b8:15:47:df:e1:b1:ae:45:3c:b6:75:97:52:
b1:0f:ea:c7:76:99:b6:8b:c5:c1:ce:c9:b2:c5:f9:
c6:64:5a:aa:41:57:74:6f:6f:f3:80:55:af:37:ff:
65:ee:c3:4b:6b:86:30:b6:64:69:65:91:a2:6e:5f:
fa:d6:9e:f0:ed:c3:a8:bd:69:c6:7d:9f:e7:1f:a8:
ff:09:af:fc:96:74:01:11:a1:d9:bc:f9:f3:63:54:
0f:15:25:ca:08:b6:aa:32:9d:43:6a:4f:1c:04:72:
85:47:ff:01:f0:be:c8:ef:39:c2:78:57:ff:2b:68:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:72:38:EB:F2:99:BC:60:6D:69:5A:11:FD:9F:5B:11:C8:44:C9
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/L0JyOOvymbxgbWlaEf2fWxHIRMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.189.0/24
Signature Algorithm: sha256WithRSAEncryption
58:aa:7e:80:e2:e0:8d:3b:18:05:26:ac:25:7d:08:c2:6c:d5:
9f:e1:50:f8:8d:fc:84:d0:b8:f4:7e:da:54:f4:89:ac:08:e7:
76:4e:e7:84:72:d0:de:a3:35:bd:2f:da:3e:12:cd:15:7e:c8:
ca:98:7f:ad:dd:26:1b:77:35:21:8d:6a:bb:28:b8:62:5b:d3:
ba:f0:29:78:c2:94:44:d7:18:74:9c:d2:4d:59:b2:87:a9:32:
f3:6e:04:9d:d9:a5:2a:4e:f3:42:30:84:19:af:fb:17:3d:ad:
61:cb:25:9f:99:ad:a0:78:2f:f2:21:38:14:26:25:fb:77:64:
26:82:1b:c3:a0:e1:25:8c:b8:60:ce:71:a8:e0:7a:6e:f3:91:
1b:ea:88:8b:d3:cb:79:f1:33:df:d1:37:83:c2:d5:ca:99:4c:
8f:b6:b9:63:a9:8f:41:c7:f4:3d:d3:98:43:a9:23:48:a6:78:
59:ad:3f:eb:5a:92:60:7d:f9:8e:e3:ad:99:a9:2e:81:b2:90:
f8:f5:0a:f9:ad:df:c4:4e:b4:19:ea:f2:eb:d7:ba:a6:f3:43:
ab:6f:4b:9a:07:a7:c1:bd:08:ca:04:c5:a1:2f:2e:9b:76:c2:
9a:e2:58:89:b5:6a:99:16:c2:f7:ba:02:6b:9b:a0:c4:44:20:
71:35:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:55 2024 by rpki-client on console-ams.rpki-client.org