Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/R1dd-lHvCJ41QiaF9juj4Rv4v-k.roa
File: R1dd-lHvCJ41QiaF9juj4Rv4v-k.roa (raw, json)
Hash identifier: cBl6PO4XFxkA8iGP2La64Ogv1q9k1yacXozFBy/KrQA=
Subject key identifier: 47:57:5D:FA:51:EF:08:9E:35:42:26:85:F6:3B:A3:E1:1B:F8:BF:E9
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 018CCA2AA7440D5BF94E915333C8C944BE82
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/R1dd-lHvCJ41QiaF9juj4Rv4v-k.roa
Signing time: Tue 02 Jan 2024 12:34:02 +0000
ROA not before: Tue 02 Jan 2024 12:34:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a7:44:0d:5b:f9:4e:91:53:33:c8:c9:44:be:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jan 2 12:34:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47575dfa51ef089e35422685f63ba3e11bf8bfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:b3:29:c5:70:aa:fd:0a:7f:02:12:f0:46:
75:f2:2f:c6:e3:35:f9:79:ae:1a:c9:30:6b:8d:44:
ac:c6:c5:9f:81:3e:d7:fb:2d:da:6e:de:80:64:b4:
7a:8b:e6:5a:71:17:58:90:b3:8e:39:b0:73:57:bf:
1d:2e:40:17:11:ed:c8:ff:20:03:ef:53:dc:ea:c5:
29:aa:61:be:31:e9:4a:a5:81:a0:1a:62:b1:fa:b7:
b5:9e:eb:ce:9b:b0:c3:15:e9:75:c5:58:06:29:7e:
dd:bd:2b:66:08:f8:d3:73:6d:96:59:b2:5a:bb:74:
ab:61:9b:2d:16:85:e9:d7:55:19:5d:95:20:34:55:
3e:52:f0:55:5b:16:bc:6a:9a:80:53:b1:9f:c4:0e:
a7:f4:51:ea:11:c4:c1:3b:1b:3f:03:6e:92:56:a3:
2f:be:c0:bb:a6:c7:45:7a:1e:9c:0f:d7:e1:d0:9f:
af:d5:02:6b:d4:0e:8e:f0:33:13:a5:6e:77:b4:bb:
82:66:31:3c:69:a5:0b:61:90:43:a3:b8:79:4f:52:
22:b3:e9:8f:d8:6c:58:c1:d9:ec:87:4b:93:65:f3:
ec:80:b8:9f:38:cd:5a:15:7a:d2:2b:33:a6:58:55:
67:1c:e8:bc:a4:70:8c:b5:f3:a1:88:fe:de:04:4a:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:5D:FA:51:EF:08:9E:35:42:26:85:F6:3B:A3:E1:1B:F8:BF:E9
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/R1dd-lHvCJ41QiaF9juj4Rv4v-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5f:6f:c2:66:a7:7d:30:df:d5:90:90:e3:28:7d:80:ec:10:
89:f8:f7:20:0a:4f:ae:71:8a:55:63:c6:f5:40:cd:7c:83:dd:
88:ed:b9:99:c1:c3:d9:89:94:87:4a:77:5c:9f:8e:5f:32:20:
0b:3b:a4:5c:3e:99:bd:3a:1c:a8:80:02:49:4c:79:e5:24:01:
e1:07:53:95:53:fb:53:62:24:7d:a4:55:6a:05:25:5a:75:3f:
15:ca:e2:d9:91:93:73:f7:6a:57:bb:04:99:89:32:12:f7:41:
f8:c7:9e:99:09:7d:98:dc:2e:8e:e6:6b:62:8a:24:f7:b2:13:
a2:68:81:99:56:0b:1f:39:ec:41:5d:20:7d:25:65:d4:de:bc:
5e:cc:81:47:dd:1d:9e:82:34:f9:27:b1:89:ef:9f:d3:33:36:
0e:47:a6:d4:e7:e5:df:77:64:cb:17:72:0f:83:0f:21:9c:f4:
ba:7c:0b:b9:bf:4e:7d:22:6d:0e:8a:d4:85:7a:eb:c2:21:f9:
22:7b:ea:b9:0e:99:db:22:a2:9a:f9:9a:d7:54:bb:bc:bf:85:
43:0d:91:3f:b2:1c:d3:70:6b:b7:87:e6:a6:c9:40:18:69:a0:
58:f8:dd:9c:21:0f:75:07:24:c9:18:0a:f1:ba:9a:02:57:6c:
5f:d9:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:54:17 2024 by rpki-client on console-ams.rpki-client.org