Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/gztZvF1VpVklPOf8FcrOxP7mmeg.roa
File: gztZvF1VpVklPOf8FcrOxP7mmeg.roa (raw, json)
Hash identifier: dYNZri4N036XMmg+2qPI89rqMGawuNYSrMEFYmB+CQ0=
Subject key identifier: 83:3B:59:BC:5D:55:A5:59:25:3C:E7:FC:15:CA:CE:C4:FE:E6:99:E8
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 01930344AD31C85C3EB1D4AC1928AFD9F5B1
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/gztZvF1VpVklPOf8FcrOxP7mmeg.roa
Signing time: Wed 06 Nov 2024 20:57:32 +0000
ROA not before: Wed 06 Nov 2024 20:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211733
IP address blocks: 185.204.199.0/24 maxlen: 24
2a10:9b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:44:ad:31:c8:5c:3e:b1:d4:ac:19:28:af:d9:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Nov 6 20:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=833b59bc5d55a559253ce7fc15cacec4fee699e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:60:22:c8:e9:30:20:43:ef:ef:97:5d:ea:
4a:f4:f6:3d:a5:72:7a:56:11:7a:f3:d8:61:d3:1f:
ac:17:f7:86:24:bd:2f:ea:06:c1:bf:0e:36:74:8e:
d5:77:08:eb:31:30:b0:d7:79:b2:9c:27:76:e7:6a:
fc:91:01:f7:c2:df:1d:88:22:45:0f:6e:a3:2a:22:
0b:6b:de:7a:ec:e7:46:ee:7b:7b:1a:9a:70:3e:ab:
bb:29:56:9e:9c:ed:87:e1:b4:be:f1:fe:ae:15:9a:
8b:26:59:cc:5c:a3:c9:d7:98:90:d8:5d:9a:0a:a1:
57:fd:03:e2:f2:27:20:15:56:d4:68:25:71:a3:9e:
de:89:1b:38:de:3f:42:c0:ec:1c:ad:7e:88:78:3b:
25:71:4b:0b:89:72:8d:1f:fa:f8:bc:d4:0b:84:e1:
7e:f0:f6:5c:bc:76:7d:d8:0f:73:2e:18:c1:9f:d3:
b1:61:52:72:a3:d3:94:38:a1:33:68:f4:db:93:3d:
21:09:84:ff:54:c5:19:c3:96:d4:42:cd:f9:f3:a6:
0a:17:af:55:47:66:5b:07:f5:f8:98:67:7e:00:aa:
8f:84:35:a4:8e:63:f4:86:57:ae:38:1b:81:36:0f:
5f:7b:1a:03:d5:45:ca:dc:87:d7:61:87:e6:a3:37:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3B:59:BC:5D:55:A5:59:25:3C:E7:FC:15:CA:CE:C4:FE:E6:99:E8
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/gztZvF1VpVklPOf8FcrOxP7mmeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.199.0/24
IPv6:
2a10:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
83:68:7a:e6:7e:cb:52:e2:f4:2f:79:d6:f9:ef:5b:e7:5c:2d:
c9:a6:22:22:d8:46:63:c2:7d:dc:b0:39:34:ea:8e:9f:28:d4:
74:8a:ce:0d:d7:4d:b2:ce:27:9d:84:5b:26:86:40:92:fd:72:
44:60:a6:74:52:f6:db:67:59:88:af:71:59:14:4b:2d:59:43:
31:ca:a8:0c:24:1e:f0:71:9d:9a:ac:fa:dc:a9:6d:9a:16:b5:
3f:11:cc:4f:83:b7:35:e5:5e:84:e0:80:64:3d:b0:8e:2d:9a:
af:61:c5:ca:c2:42:54:98:4f:30:ce:a9:72:cc:7d:f8:30:1f:
b5:a5:15:29:1a:fd:27:a9:6e:42:62:bd:6b:1f:75:2e:92:47:
f4:f3:3c:ac:06:3f:1e:b5:86:3d:22:cd:d5:60:1f:97:86:5b:
2c:24:96:e6:d3:46:fe:bc:5a:f6:2b:9a:25:c1:0d:48:41:97:
3d:30:fd:8e:62:92:e1:b6:f9:d5:76:f0:03:aa:01:43:43:7a:
ed:fd:f4:58:ae:61:da:bb:97:75:ed:a2:50:ab:6c:b3:ef:b7:
88:0e:fc:71:dc:b5:6d:af:49:6f:e2:fd:7d:a6:62:4c:83:3b:
12:8d:a7:bd:72:82:72:ed:59:6c:52:74:0d:f5:a3:35:e1:f9:
0f:f9:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:53 2024 by rpki-client on console-ams.rpki-client.org