Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/rPyc5DFx0_hDHpOF9HXc0MSbFwI.roa
File: rPyc5DFx0_hDHpOF9HXc0MSbFwI.roa (raw, json)
Hash identifier: u4PfP7EZ+MTANlBjCKZ8ZhIXE0iYJIyEQLthrEawMpY=
Subject key identifier: AC:FC:9C:E4:31:71:D3:F8:43:1E:93:85:F4:75:DC:D0:C4:9B:17:02
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 018EC32964997C329BD67161B7D503CA19F1
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/rPyc5DFx0_hDHpOF9HXc0MSbFwI.roa
Signing time: Tue 09 Apr 2024 14:00:53 +0000
ROA not before: Tue 09 Apr 2024 14:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 185.197.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:29:64:99:7c:32:9b:d6:71:61:b7:d5:03:ca:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Apr 9 14:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acfc9ce43171d3f8431e9385f475dcd0c49b1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:e4:47:cb:0e:f6:eb:d3:be:29:5b:97:02:
13:33:58:0a:0e:f6:43:57:54:9f:fd:12:6c:f2:5f:
a9:b6:6b:f7:fb:c0:d0:a8:de:72:e7:75:a5:c6:31:
15:1a:a6:80:3f:4b:9b:8f:77:81:82:fb:dc:3a:49:
30:a4:09:77:da:b4:f2:d9:a7:76:82:22:5c:30:06:
6b:65:aa:c5:02:d9:88:b5:0e:a7:dc:39:41:28:0b:
1b:40:f8:e5:8f:ae:de:49:4d:d5:c5:5f:54:1d:ee:
dc:37:77:c4:49:d8:c7:27:1a:34:d2:05:6d:50:2d:
68:6d:a6:b1:ef:ba:d7:c0:c6:3e:3c:af:17:05:56:
7d:f8:c8:13:70:3e:f0:86:ba:5f:f6:85:f4:ab:d0:
08:16:05:f8:cf:23:14:67:e9:3a:9b:ad:ca:db:08:
4c:18:57:bb:c6:8b:4e:0a:f5:77:68:29:5f:de:55:
b5:c0:24:19:84:74:53:2e:fb:69:f3:53:5e:14:29:
f1:a0:c9:05:ac:aa:a1:6d:f6:96:f5:ce:99:1f:f3:
c4:3d:ad:11:cb:e3:83:1c:70:ec:63:48:e4:10:8b:
d9:dc:c1:06:ab:f1:92:2d:54:b5:b6:df:c6:26:1a:
38:a2:e5:76:43:a3:fd:ad:83:17:5e:1a:32:22:e3:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:9C:E4:31:71:D3:F8:43:1E:93:85:F4:75:DC:D0:C4:9B:17:02
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/rPyc5DFx0_hDHpOF9HXc0MSbFwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.10.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4d:5e:f5:d9:b6:a9:7f:18:bd:4e:70:65:ac:29:2d:28:3c:
cb:b2:03:7a:c5:1e:80:10:c7:e1:59:39:dc:2f:55:19:9f:e3:
da:57:aa:c4:a7:82:b3:44:01:ca:07:08:92:c3:7a:07:30:21:
95:7f:97:6b:c8:c5:db:40:7a:66:af:62:c1:36:54:88:99:13:
58:04:b3:5c:6a:6d:ba:06:fc:8f:31:50:51:88:7c:13:96:79:
2e:17:5f:55:cf:42:cc:e7:3a:37:3b:a0:b5:4e:50:c3:64:5f:
3d:3d:ec:8b:a2:ca:0c:93:b9:d4:e0:3b:33:b6:bf:66:68:a5:
27:da:f8:3e:90:bb:6e:fb:5e:83:2d:48:8e:09:8e:aa:5d:62:
65:ea:07:02:4d:a7:3b:7a:38:0a:72:7b:2b:85:f4:58:67:11:
99:bd:de:fd:0b:2f:c7:09:33:0e:0d:8e:93:3c:94:01:89:fc:
70:0c:a7:32:3e:9a:e8:46:0b:28:9f:f6:74:39:75:db:d4:4e:
9d:e9:55:a6:37:be:91:e3:39:a5:d0:06:12:1b:d6:51:d2:83:
01:21:2a:93:10:52:c8:1b:fd:49:e7:bf:c1:fd:a8:9f:43:c5:
57:fd:0a:23:1e:7f:26:a8:4d:ae:f8:c8:cf:56:ce:a8:b3:c4:
3f:47:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:01:14 2024 by rpki-client on console-ams.rpki-client.org