Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa
File: vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa (raw, json)
Hash identifier: rvLgnRURJqH52muTZhK2IWq5PFu/2ABCGoxAWztEDHs=
Subject key identifier: BD:CE:C7:65:EF:43:DC:8A:F4:2F:96:FC:A1:C9:A7:63:F6:9E:89:28
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 018CC8016B3C09DC7CA7858448D198FD3374
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa
Signing time: Tue 02 Jan 2024 02:29:45 +0000
ROA not before: Tue 02 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 185.165.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6b:3c:09:dc:7c:a7:85:84:48:d1:98:fd:33:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Jan 2 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdcec765ef43dc8af42f96fca1c9a763f69e8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:01:5f:af:b9:78:da:87:06:2e:50:0a:64:
b4:c3:dc:a1:61:aa:41:ac:2c:94:b0:60:e2:58:f8:
28:b1:7c:df:c5:25:34:f5:61:42:12:81:c6:bb:c1:
1e:91:13:d4:85:e9:27:0f:d9:e8:e8:ea:dd:9a:c2:
53:9d:be:b8:df:e1:26:a5:bb:1e:e9:74:8d:e0:ba:
71:cc:69:54:1d:3e:9c:d2:50:c2:81:1e:1c:64:1e:
cd:e8:49:78:b6:a5:b6:a6:02:3d:89:c6:56:c2:aa:
94:9a:fc:d2:a1:e3:b5:28:97:d9:e9:13:2a:7d:54:
9b:9d:77:1a:7b:c4:2d:c6:1c:d7:cd:ac:a1:90:7a:
61:1f:49:ac:28:58:ca:a4:38:c7:81:74:44:11:fd:
f5:92:be:74:c4:ef:a6:d6:e0:26:a0:88:9a:b5:ca:
d8:eb:01:47:2a:34:72:12:e9:3c:ec:d5:10:4a:2d:
9b:04:e4:e5:19:3c:97:f6:7a:43:82:f5:87:3e:b4:
62:9c:71:a0:a9:74:88:15:8b:8b:c3:01:ed:bd:9f:
89:15:3b:20:9c:6c:9b:72:28:3c:3f:55:84:ab:a1:
86:96:0d:18:b3:76:79:80:a7:eb:92:ff:b5:7a:14:
a3:c1:c3:a0:86:bf:ff:d1:84:82:f9:72:d4:f3:ff:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:C7:65:EF:43:DC:8A:F4:2F:96:FC:A1:C9:A7:63:F6:9E:89:28
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/vc7HZe9D3Ir0L5b8ocmnY_aeiSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.29.0/24
Signature Algorithm: sha256WithRSAEncryption
18:21:b2:8b:36:0d:60:b0:a4:a0:d8:73:e3:50:1a:37:bb:2b:
77:ef:f6:9a:ef:00:70:a4:65:2d:44:ec:81:b9:81:12:00:6b:
84:e0:22:ba:df:06:5e:70:15:78:33:4e:32:5a:68:70:0e:22:
ec:4e:d8:ce:d3:4a:65:6c:ce:39:53:85:bb:35:66:46:42:67:
0a:11:8f:0f:ef:e6:c7:f4:15:72:59:34:2d:8c:ac:76:85:96:
6d:fa:ec:7f:82:c0:ae:9e:61:3e:ae:5c:bf:69:3e:5d:4f:a5:
e4:81:0f:f9:54:ad:61:b6:b3:34:b3:83:72:f3:dc:4d:30:07:
eb:19:bc:16:6c:69:93:82:8e:5c:6d:66:4d:4d:c7:8f:82:9f:
43:c0:8c:5c:58:4c:6b:49:b1:fc:81:41:69:13:95:28:25:33:
85:fd:ff:8f:76:c1:bf:66:4d:d7:70:4f:a0:9c:b3:e5:54:23:
ba:47:39:1e:51:f0:73:23:b9:6e:c5:26:46:4f:67:a2:89:aa:
c6:19:fa:f8:75:b1:fb:a3:b2:ff:56:01:c9:14:42:81:8e:2a:
f1:51:08:f2:74:c9:42:13:95:a6:b8:72:d3:81:7a:ba:f5:70:
5e:ab:e7:bd:a6:0f:ec:25:0e:2a:7e:f2:63:1c:53:39:df:eb:
b9:eb:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:29:12 2024 by rpki-client on console-ams.rpki-client.org