Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/_N1VG_MfPkRf6LRJh6ZkbqWPeuE.roa
File: _N1VG_MfPkRf6LRJh6ZkbqWPeuE.roa (raw, json)
Hash identifier: WLjLLyTPonTHZiNrohpAodN+eZ5NQtyD3825duOCmlg=
Subject key identifier: FC:DD:55:1B:F3:1F:3E:44:5F:E8:B4:49:87:A6:64:6E:A5:8F:7A:E1
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 018CC26D10A7534184BE4FB581AF3D5CE539
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/_N1VG_MfPkRf6LRJh6ZkbqWPeuE.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 185.109.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:10:a7:53:41:84:be:4f:b5:81:af:3d:5c:e5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcdd551bf31f3e445fe8b44987a6646ea58f7ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:e2:5f:e5:08:bc:30:8d:e2:a3:75:5f:ae:
1d:92:0e:b1:44:6b:a2:db:2a:13:77:33:66:b3:5c:
5e:3d:3d:f5:60:bd:93:24:cf:aa:16:3d:a3:2c:fa:
e8:34:03:07:1e:fc:3e:7f:35:f9:58:f3:b5:9f:b8:
7d:e9:59:43:35:0d:a4:2b:77:10:00:36:8a:20:6a:
24:ba:4b:2b:09:a7:53:38:22:e7:ff:ba:b7:06:c7:
a3:f0:a1:ca:c6:ec:c3:26:c0:d9:3b:75:6d:40:60:
99:ad:0b:2d:49:54:7f:1e:b1:fc:68:75:ef:ff:ed:
c9:54:f8:ac:a5:c0:84:bd:9c:7c:60:f2:f1:c7:bd:
6d:48:fa:d7:91:62:ff:9b:f4:b6:d3:de:6f:08:87:
66:98:a2:13:ac:85:14:bf:88:b5:34:0c:0d:0b:38:
5f:19:de:e8:e1:92:6c:75:fa:18:3f:69:4e:3c:71:
7e:0a:15:93:f5:de:6a:7e:dc:90:45:b5:fc:54:cd:
88:cb:e1:64:2f:bb:13:e8:64:c1:01:4b:99:42:fb:
1f:78:e1:5f:83:1a:3d:7e:9c:2c:94:93:ca:7d:de:
03:11:63:6e:98:8b:ed:c7:6f:32:b8:09:bc:be:26:
16:51:38:88:d4:c8:ec:9a:97:be:e7:7a:63:17:87:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:55:1B:F3:1F:3E:44:5F:E8:B4:49:87:A6:64:6E:A5:8F:7A:E1
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/_N1VG_MfPkRf6LRJh6ZkbqWPeuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.49.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b9:ff:80:90:45:e3:25:32:86:a2:3f:73:0a:ca:7d:42:a6:
d5:ce:80:93:94:26:aa:05:5f:7c:1f:a3:16:64:34:4a:1d:f7:
2e:88:fb:a2:30:dc:92:8a:3f:42:e2:ec:f0:25:d3:34:69:65:
89:e4:c0:93:ed:11:61:6d:08:cf:32:4a:5a:d9:58:fb:17:73:
e3:2d:04:23:de:a8:d5:00:cc:29:9b:8e:34:52:31:5a:38:99:
12:17:0c:9f:88:51:a6:d1:d0:46:fe:cc:b6:40:3d:38:7a:6e:
c7:52:b4:aa:fd:90:a7:fb:f5:ec:01:ba:dc:fc:a6:b0:61:87:
60:5e:50:ba:4d:17:ce:3e:87:1f:93:22:4c:b2:9c:80:91:b2:
ed:b0:32:b0:d8:39:9f:d5:16:cc:89:66:9f:9e:44:87:9a:63:
e9:6e:64:ef:40:cb:0b:e3:3d:4d:64:88:39:a1:ef:02:29:fd:
9e:77:1c:30:b3:fc:35:50:40:87:20:86:e1:57:30:da:a2:04:
80:25:8c:ee:de:d3:08:2a:e8:a7:35:c5:86:c9:92:be:40:cb:
b1:fc:a3:a9:68:40:04:19:24:d7:fa:66:9c:5c:a4:d2:8d:53:
3b:60:7a:a9:e9:43:83:f2:58:2b:84:3f:63:fb:d2:c4:22:df:
ba:0f:27:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:08:03 2024 by rpki-client on console-ams.rpki-client.org