Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/P9u9hX8-K9ijdSYgr4yk01fVYjo.roa
File: P9u9hX8-K9ijdSYgr4yk01fVYjo.roa (raw, json)
Hash identifier: aKLeqNMoKYRi996gEzhz1B1okB2gxbyi/50d5El1gFU=
Subject key identifier: 3F:DB:BD:85:7F:3E:2B:D8:A3:75:26:20:AF:8C:A4:D3:57:D5:62:3A
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 018CC9BBAB43994AD30ABA423432F2063F5D
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/P9u9hX8-K9ijdSYgr4yk01fVYjo.roa
Signing time: Tue 02 Jan 2024 10:32:48 +0000
ROA not before: Tue 02 Jan 2024 10:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 185.51.188.0/24 maxlen: 24
2a01:b5e0::/104 maxlen: 104
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ab:43:99:4a:d3:0a:ba:42:34:32:f2:06:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jan 2 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fdbbd857f3e2bd8a3752620af8ca4d357d5623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:6e:e0:8d:6a:f3:0b:be:7d:58:b4:39:3d:
f5:7b:58:71:73:6b:11:93:ba:59:4c:ca:af:fe:d4:
dd:18:a8:39:ca:19:b3:1f:bb:8f:4c:01:9f:75:82:
4e:0d:bb:7d:15:4d:59:cf:1f:8a:4a:a3:1e:08:0c:
d6:d5:f3:81:43:e3:51:8f:8a:af:6d:7f:40:59:67:
07:c0:53:dd:f4:ab:15:d0:10:c1:be:2a:c9:55:76:
d8:b1:aa:fd:87:34:dc:c3:58:a6:e3:49:48:fb:0e:
93:87:dc:27:da:a0:58:4f:cc:f8:c3:03:39:2a:8a:
b0:f0:af:d8:4f:71:f5:ed:20:2d:c5:9c:48:af:27:
cc:fa:84:74:81:f3:80:b9:f0:c0:91:22:08:0a:45:
92:91:d2:c5:97:d5:dc:c1:6d:ed:12:76:60:f5:56:
18:ad:cf:25:02:3e:52:2f:59:cd:5b:f2:cb:7a:e0:
c9:65:fb:c6:86:11:2b:1a:62:f9:c3:1e:f5:78:ee:
9e:3f:7d:bb:50:e5:f2:57:a0:8c:ee:94:ae:14:58:
0f:85:ea:a3:b7:e3:29:d5:e3:c2:e3:12:4d:62:1a:
4c:20:68:28:cf:12:e1:31:dc:dd:b5:6a:61:3a:2b:
98:1c:45:fd:05:7b:78:ec:03:fc:53:bb:51:57:c8:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:BD:85:7F:3E:2B:D8:A3:75:26:20:AF:8C:A4:D3:57:D5:62:3A
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/P9u9hX8-K9ijdSYgr4yk01fVYjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.188.0/24
IPv6:
2a01:b5e0::/104
Signature Algorithm: sha256WithRSAEncryption
16:e7:73:e5:50:a1:03:82:c8:54:1a:b2:7b:a3:39:1d:f5:75:
60:34:44:d7:0c:ab:3b:b8:8d:47:f6:d3:9b:3d:bd:0b:16:c2:
a6:9f:d4:a8:3f:b4:c3:81:ba:80:08:71:7f:55:93:ff:62:47:
9a:fd:b2:e1:3f:e6:18:15:7f:99:3a:11:b0:d7:3b:10:58:30:
4d:d4:e1:ab:e1:47:3e:39:5b:9f:16:2c:37:6d:31:ae:1c:43:
7b:fd:4d:76:a2:9a:fe:e8:04:59:5e:d6:cf:e6:8b:7b:3f:08:
4c:85:0c:d3:26:79:f6:37:75:bf:fc:9b:50:c4:29:59:8a:17:
4c:fc:f0:2d:43:0f:76:f7:65:8f:97:eb:b4:09:2f:85:91:ac:
bc:b2:d5:2d:31:fd:02:ae:04:72:ad:57:46:45:f5:b0:7b:4f:
d9:c8:24:1f:27:43:8c:23:3f:49:64:0f:4d:75:d2:8d:df:ed:
7f:0e:c6:f6:7e:73:72:8f:23:fd:e1:a3:23:77:e2:a7:f5:d1:
41:80:24:91:41:10:3f:e6:55:57:27:61:ca:4d:83:03:23:ee:
c1:1c:a3:6c:23:99:a3:8c:f6:34:82:27:ad:35:96:b9:b3:20:
f3:d7:ea:53:e6:0e:76:e2:b2:10:ec:61:bf:c0:ee:37:3d:a6:
9a:5a:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:50:00 2024 by rpki-client on console-ams.rpki-client.org