Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/V5EkRtCjuINU6JJWvdGZYNCnlpQ.roa
File: V5EkRtCjuINU6JJWvdGZYNCnlpQ.roa (raw, json)
Hash identifier: kexHJV9iei0P/+HEckUnlvJeBrFfi7thZ6cNDTw51WM=
Subject key identifier: 57:91:24:46:D0:A3:B8:83:54:E8:92:56:BD:D1:99:60:D0:A7:96:94
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 0192007176B66DB3F1153FA91F4BAE7EABF0
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/V5EkRtCjuINU6JJWvdGZYNCnlpQ.roa
Signing time: Tue 17 Sep 2024 14:44:48 +0000
ROA not before: Tue 17 Sep 2024 14:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.192.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:71:76:b6:6d:b3:f1:15:3f:a9:1f:4b:ae:7e:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Sep 17 14:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57912446d0a3b88354e89256bdd19960d0a79694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:92:94:a4:e4:7c:2f:32:54:89:b0:51:5b:
95:42:02:08:6a:f4:8d:e5:fd:c1:bd:e9:09:b8:a8:
8e:54:f6:0a:a4:70:30:90:91:ef:de:1b:a7:7b:1c:
51:3a:b3:ce:79:50:e3:3c:b6:f7:44:47:44:e1:ad:
6d:d7:16:41:0b:d9:a3:b9:df:1c:48:09:8c:7f:27:
73:b4:d4:1b:91:6e:12:bb:7c:3b:2a:f2:23:f3:0e:
3b:60:d5:6a:03:0b:f6:0d:06:7e:5d:cb:34:5e:58:
71:3f:79:5d:f8:14:b3:42:de:b2:e6:fb:43:10:06:
4a:7b:87:5f:6d:be:8f:55:19:11:c2:38:92:7e:78:
23:7e:e9:5b:26:65:bf:bd:d8:6a:ed:42:e5:6b:6a:
ff:85:b8:53:fd:ff:85:85:b9:ba:ad:92:20:fe:11:
a0:16:f7:09:37:21:70:75:c9:10:fc:f0:5d:e9:6d:
94:a8:1c:4a:b6:3d:df:e2:f4:c8:42:a6:87:c9:9a:
b2:c7:01:57:9b:f9:7b:79:44:f3:d2:84:8a:bf:ea:
e6:17:a4:4b:e9:63:82:b4:54:f9:7b:41:ef:11:d6:
71:00:50:2d:1f:4a:64:11:00:0e:3c:f5:1c:7e:dc:
aa:49:bc:d6:d3:04:09:93:f8:c8:fe:e9:d4:95:3c:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:24:46:D0:A3:B8:83:54:E8:92:56:BD:D1:99:60:D0:A7:96:94
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/V5EkRtCjuINU6JJWvdGZYNCnlpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b5:7d:d2:fb:d1:b8:73:e8:84:25:28:c7:48:bb:81:11:71:
fd:f8:e1:de:ee:d7:aa:7f:b0:88:6d:dc:ae:e9:5b:c9:cc:fb:
43:22:15:6c:6c:20:44:48:4c:48:26:b7:33:9b:9f:cf:d6:f0:
be:7e:65:4c:bf:5c:a2:f9:66:6c:15:c2:52:1e:9f:43:00:a5:
e0:6c:f3:cd:5a:56:13:0b:44:3c:99:1d:14:40:ce:4f:73:aa:
63:80:d7:3b:9b:a4:66:13:7a:81:fa:71:e8:d4:84:b7:86:f2:
51:24:fc:c2:a8:cd:73:54:d4:8b:b6:42:a7:1c:8e:12:72:ae:
86:df:47:0b:89:54:16:ff:c8:05:8c:64:ec:8c:a3:77:bd:8c:
b6:00:a3:0b:db:5a:fb:d6:ab:7b:ed:1c:39:64:0e:7a:9f:54:
f2:58:55:cd:ae:2f:b7:f8:71:4e:0b:b2:cf:c6:6c:6c:02:c3:
fb:33:d4:a0:77:4c:3e:82:be:ab:fa:e7:a5:f2:f5:c8:0e:ed:
a7:a1:22:95:93:ee:33:20:fb:ad:14:ab:03:62:71:67:4f:ea:
2a:63:7d:4d:19:f5:fa:9e:17:1d:9a:39:42:2d:43:81:2f:c0:
f9:46:b3:c5:96:e7:32:69:5c:05:44:6b:5b:3a:1f:cc:6a:5c:
06:9b:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:24:34 2024 by rpki-client on console-ams.rpki-client.org