Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/B_yv1qDXNaRAa-3QMSzSBpPOc4g.roa
File: B_yv1qDXNaRAa-3QMSzSBpPOc4g.roa (raw, json)
Hash identifier: U/OBvcuU78sHMjTuVObN5XfToYCADBQmxoOLaSr6myo=
Subject key identifier: 07:FC:AF:D6:A0:D7:35:A4:40:6B:ED:D0:31:2C:D2:06:93:CE:73:88
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 018CC42545DBADE42E13C4B82F8237B96C9A
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/B_yv1qDXNaRAa-3QMSzSBpPOc4g.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199757
IP address blocks: 185.39.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:db:ad:e4:2e:13:c4:b8:2f:82:37:b9:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07fcafd6a0d735a4406bedd0312cd20693ce7388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:3b:eb:af:fa:f3:8a:ce:ea:2e:6c:a2:4e:
96:5a:84:1c:0e:03:a3:a3:c6:65:9f:ab:cd:05:6d:
69:10:03:1f:b9:62:4d:cb:18:c5:32:16:9d:a2:a6:
9c:d4:e9:4f:f2:f7:3a:a2:c2:83:46:f7:00:d3:17:
2e:52:5f:73:37:05:8e:93:57:9d:1f:09:48:7d:f1:
8a:18:c4:dd:a6:4a:3f:e7:ac:98:57:e2:45:c9:08:
dd:62:f3:47:c8:ff:14:09:e6:1f:9f:c2:5b:0e:30:
1a:af:7a:96:4e:e7:bb:8d:37:ae:1b:f0:2f:0b:70:
92:4b:0e:00:f3:64:57:bc:cf:80:d5:5e:8e:3a:30:
ae:32:ad:f3:4f:0d:ba:9d:2c:f2:60:c7:e2:0e:7e:
ab:ea:8f:b7:a3:78:c4:c6:6b:d4:d4:ab:05:26:5e:
be:3c:7f:e4:09:8e:73:b0:28:bd:f4:5c:f7:42:1e:
ef:e6:03:0b:c5:d4:17:7d:2b:ad:17:36:0a:ba:ae:
8f:69:de:87:00:ab:4e:e1:f8:db:85:87:d9:5f:20:
3a:cc:82:7a:40:74:e6:6d:df:1d:5f:1c:4a:0a:9e:
ed:a8:d5:28:a8:69:d5:cf:3a:b6:22:3b:b6:28:1e:
cd:8d:fe:d0:e5:69:c9:32:39:ef:b7:d6:6c:d7:01:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:AF:D6:A0:D7:35:A4:40:6B:ED:D0:31:2C:D2:06:93:CE:73:88
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/B_yv1qDXNaRAa-3QMSzSBpPOc4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9c:80:bd:03:3d:d8:c0:d1:76:25:b8:70:71:c0:e3:ca:5d:
97:cb:ea:38:59:73:be:63:81:61:a6:5f:64:84:4b:a9:af:ae:
cc:d1:0f:9e:cc:2c:43:16:8d:21:97:e7:b3:7a:7f:f9:13:e1:
f1:2d:76:73:f4:4a:e7:0d:93:49:44:48:38:ff:5b:2d:03:a9:
98:5c:d6:af:95:46:2f:37:76:76:80:0b:09:af:b1:87:40:31:
13:f5:26:88:f4:92:4b:e3:83:96:f0:4e:3b:87:38:a3:ad:79:
56:5b:ee:60:cf:8a:bb:bd:69:52:f0:d6:ac:91:8f:a3:64:b4:
e2:40:71:2a:a3:b9:3a:5a:6f:43:db:b6:ef:ea:f8:57:00:02:
40:7b:7d:af:88:5a:ec:c0:9a:78:8c:2a:f9:c3:1a:a1:cc:3b:
32:5b:aa:ec:b8:83:f8:c9:5b:96:df:a5:11:71:57:f0:ae:6f:
4c:f5:2e:92:ce:02:4f:f6:be:fb:c2:c6:ea:71:a5:16:2b:78:
13:07:4b:30:a9:3c:46:81:ef:af:78:50:9b:40:33:b6:ec:1d:
6b:9e:a4:de:4b:27:74:2b:5d:c6:0a:3c:68:de:75:4f:1a:fe:
b1:68:18:04:6c:52:91:0e:3c:43:9e:19:98:42:6f:76:a0:ae:
b3:3b:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 10:56:33 2024 by rpki-client on console-ams.rpki-client.org