Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/CYV1aJaXxk4egv7JL_VnwTE3S-k.roa
File: CYV1aJaXxk4egv7JL_VnwTE3S-k.roa (raw, json)
Hash identifier: jm2OhyIyyGNal67iozfXeCihpG/2xVHPrB3XUbvLFvc=
Subject key identifier: 09:85:75:68:96:97:C6:4E:1E:82:FE:C9:2F:F5:67:C1:31:37:4B:E9
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 019329E38758972AEB209020D9B44D85C4F5
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/CYV1aJaXxk4egv7JL_VnwTE3S-k.roa
Signing time: Thu 14 Nov 2024 08:56:37 +0000
ROA not before: Thu 14 Nov 2024 08:56:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205110
IP address blocks: 185.226.88.0/24 maxlen: 24
185.226.90.0/23 maxlen: 23
185.226.90.0/24 maxlen: 24
185.226.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:e3:87:58:97:2a:eb:20:90:20:d9:b4:4d:85:c4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Nov 14 08:56:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098575689697c64e1e82fec92ff567c131374be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:85:da:78:0c:96:54:c2:f0:60:52:3d:1f:
1b:74:3d:8c:12:50:0f:b3:8c:61:75:58:40:9f:20:
cb:dc:df:42:89:37:eb:12:44:8a:6e:5b:17:f7:b1:
37:9f:47:4d:de:73:29:43:43:50:74:12:c5:32:1b:
18:7d:91:53:d7:28:fe:f2:92:7f:15:4e:0b:5f:07:
19:52:9f:b7:14:ff:24:5d:47:1b:28:39:3d:87:3c:
46:f5:e3:ce:20:2d:fc:80:20:db:04:b5:10:7f:3b:
5c:df:83:03:43:0f:8a:e6:bf:d5:55:1b:75:4f:d1:
33:7d:3f:a5:4c:ac:67:5d:ab:38:80:32:60:65:a4:
3e:f3:f8:02:06:3e:f0:2e:63:bb:4a:3b:d0:96:2f:
17:c9:bb:b2:12:f4:7a:d6:dd:a1:6b:6e:0f:74:bb:
09:f4:a6:05:a6:43:ae:db:45:1f:c4:79:6e:cc:22:
94:97:66:4a:ff:a6:fe:67:c1:0e:db:33:b1:a9:c9:
f1:4b:76:c8:d5:24:20:f8:78:d8:16:6f:df:8c:52:
aa:51:22:e3:70:bc:72:40:b6:3d:55:d8:4b:b9:d9:
5a:6a:69:e0:40:05:36:7a:db:26:eb:be:b9:36:3c:
61:e3:9f:70:d2:01:2e:ee:b0:b5:b1:d2:9a:5e:0d:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:75:68:96:97:C6:4E:1E:82:FE:C9:2F:F5:67:C1:31:37:4B:E9
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/CYV1aJaXxk4egv7JL_VnwTE3S-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.88.0/24
185.226.90.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:cf:2c:67:a9:08:c5:65:37:dd:29:36:bf:99:5d:54:b1:b0:
72:6f:e3:d0:39:73:d7:8f:01:ff:69:0e:37:9d:25:fc:7d:07:
dc:23:23:b1:f7:55:c3:14:19:7f:cf:b0:0e:33:0f:93:e4:db:
92:a7:00:68:cd:93:74:38:fa:ce:8b:a2:f3:ea:b6:0b:5d:6f:
38:8f:63:4a:97:13:bf:06:16:65:b3:be:e6:ab:a4:d4:7d:05:
44:ac:ee:5b:69:8a:91:36:b6:da:c0:9d:fc:78:27:60:da:76:
74:bb:97:08:69:a8:33:cb:17:f1:10:36:13:89:e0:cf:97:fb:
04:2c:02:4c:6d:37:f8:3b:6e:3b:51:18:f3:0e:b3:f7:1d:11:
3c:95:d7:31:46:3a:86:90:89:06:72:56:df:6c:55:ab:2c:71:
d1:33:25:54:4a:cc:f6:ee:fd:95:fb:27:73:46:80:a0:11:a5:
4d:ce:fa:0f:3c:67:b5:48:78:b2:f5:03:28:aa:42:c9:97:f5:
4a:1f:56:b6:a6:f0:0f:2a:d8:db:ab:07:d0:af:19:7b:59:a0:
72:61:6e:8b:75:eb:8a:6f:c1:e6:4e:b7:22:ec:82:05:d7:f4:
36:01:a6:94:9e:58:85:b3:d6:9c:3a:51:b3:ba:b3:5f:a0:44:
3b:3b:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:27 2024 by rpki-client on console-ams.rpki-client.org