Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IfUpR432O_qAQ6EbO7SflRhTeJA.roa
File: IfUpR432O_qAQ6EbO7SflRhTeJA.roa (raw, json)
Hash identifier: 6K8WflvCkRooXh6avAOghg3tkRhWIj9NzDBwdvSmdtM=
Subject key identifier: 21:F5:29:47:8D:F6:3B:FA:80:43:A1:1B:3B:B4:9F:95:18:53:78:90
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 018CCA2B2D74199C32E359378C9C69E80425
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IfUpR432O_qAQ6EbO7SflRhTeJA.roa
Signing time: Tue 02 Jan 2024 12:34:36 +0000
ROA not before: Tue 02 Jan 2024 12:34:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211246
IP address blocks: 185.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:2d:74:19:9c:32:e3:59:37:8c:9c:69:e8:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Jan 2 12:34:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21f529478df63bfa8043a11b3bb49f9518537890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:a5:59:d0:2e:24:a4:5c:ac:b5:af:d2:b5:
61:a1:fd:9b:de:49:f3:e3:6f:f0:f4:9c:84:b8:52:
6c:87:63:2e:86:f8:d9:13:5e:b3:d3:ec:33:70:ec:
d8:89:41:23:16:75:83:d1:e5:76:1f:79:7d:80:2b:
ae:29:9c:bd:3d:66:45:f0:6d:55:1b:c7:38:5d:6d:
e4:5b:3b:98:f6:a0:51:99:65:36:73:73:18:fa:d1:
6f:48:cc:3c:1f:a2:2d:6f:96:11:3b:da:a6:e4:96:
2a:5a:9c:86:e0:25:f5:91:54:b6:9c:37:48:d9:0b:
84:aa:93:97:e2:24:b7:6b:6b:00:b5:b1:45:aa:f4:
f1:40:96:b8:e4:bc:38:63:3b:d9:0a:26:c5:11:db:
c8:10:1e:db:a2:e7:fc:50:2a:83:a6:cd:bc:7f:c3:
60:82:8a:4f:da:9e:4a:7a:e2:d0:f9:68:22:c7:68:
cb:ba:54:ab:d8:0e:a8:9a:50:15:15:67:9a:17:1e:
54:d1:46:54:8c:5f:d8:e8:91:0d:6d:b0:9a:51:b6:
9b:27:3e:d3:75:75:53:4f:5f:7c:fd:9f:2b:0c:b9:
e2:f6:f8:0b:03:c8:dd:78:7b:8d:ff:3b:58:08:25:
38:04:66:48:9d:ad:3a:d9:03:c2:9a:bb:5c:72:4b:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:29:47:8D:F6:3B:FA:80:43:A1:1B:3B:B4:9F:95:18:53:78:90
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IfUpR432O_qAQ6EbO7SflRhTeJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:41:9c:be:ca:15:34:77:ff:ed:6c:c7:07:07:31:09:21:a1:
37:95:86:4f:ba:7a:f2:8b:86:1b:99:0b:60:de:d4:c7:1c:44:
b3:6e:0b:86:62:69:78:7f:57:e7:bd:86:71:dc:ec:77:9e:94:
61:94:18:44:d0:b0:1f:09:b0:9d:aa:7a:1a:9e:5a:35:8b:47:
41:de:4a:8c:cd:33:bc:56:ae:15:b0:cc:f1:61:4d:86:9c:30:
60:f9:92:94:c1:d4:58:b6:d7:90:1d:64:cd:2f:a6:9e:68:db:
15:c1:d6:1f:46:9d:41:b9:2f:96:83:7c:44:93:3c:90:6e:dd:
ad:ce:31:aa:45:b3:e0:c1:fe:db:a4:2d:59:bf:b7:bd:ef:56:
c3:62:d2:c3:53:bd:57:5b:32:b2:97:bf:9f:37:e7:88:6a:e5:
83:c3:52:d1:8e:ec:d8:2a:9b:2b:fd:08:7c:0e:a3:6e:12:93:
d8:33:1a:c9:20:eb:37:db:e6:f3:c0:8e:c4:84:d3:88:e3:dc:
fe:f8:58:9e:d7:84:e8:49:fb:aa:20:1c:e3:ae:87:d4:08:d5:
48:b1:d2:31:c4:20:c3:70:e4:47:85:f7:04:d3:03:3f:96:86:
73:53:24:68:a5:fa:b6:0b:31:9d:9e:74:7f:19:5f:03:c3:19:
12:2f:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:25 2024 by rpki-client on console-fra.rpki-client.org