Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/8c_jgTaYgH9o3dUkPBllYz80gqg.roa
File: 8c_jgTaYgH9o3dUkPBllYz80gqg.roa (raw, json)
Hash identifier: fvDCrnnMH0zsiFpABK1uVaN6wDtpxV6n5E67NASNc7M=
Subject key identifier: F1:CF:E3:81:36:98:80:7F:68:DD:D5:24:3C:19:65:63:3F:34:82:A8
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 018CC42520CE553CBDA0FB1F4B6558D541D3
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/8c_jgTaYgH9o3dUkPBllYz80gqg.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39378
IP address blocks: 185.197.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:20:ce:55:3c:bd:a0:fb:1f:4b:65:58:d5:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1cfe3813698807f68ddd5243c1965633f3482a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:59:b2:95:7e:c5:4d:44:c8:17:11:14:54:
cf:aa:7a:9a:77:2e:db:f0:54:9f:f1:8b:0a:89:1e:
63:85:0d:b6:55:43:76:57:b9:77:0b:4d:75:c9:e7:
8e:46:86:35:7f:b9:17:5e:bf:0e:b4:af:ea:f5:bc:
31:a7:1a:c3:be:d6:88:1a:71:66:ab:c2:a6:d9:60:
0d:ba:94:e8:ff:9d:17:0b:b0:3d:10:b4:96:94:4d:
37:f9:9e:9d:46:64:43:8c:08:bc:5a:62:f3:f0:cc:
5b:04:2c:b3:c8:ed:85:86:2c:15:2f:f6:c8:61:be:
85:0b:ab:04:58:f7:2c:b4:39:6a:96:b1:e9:52:da:
14:30:05:b6:94:98:66:c6:e0:28:2d:88:43:e8:5d:
a0:6a:7e:7a:0b:be:cc:c1:a9:a5:96:f5:55:c6:3f:
7e:d1:da:8d:fe:5f:84:50:61:7c:65:ec:4a:47:c5:
cf:44:8f:94:93:60:26:e9:e5:15:cb:ee:a8:f7:b5:
96:bc:be:13:20:fc:39:25:73:68:86:27:90:8e:51:
1d:24:3c:20:2e:67:3c:57:37:30:69:43:6c:fa:b3:
6b:93:f7:b7:ed:1b:5e:b2:1c:35:3e:f9:e2:90:79:
6c:e7:fb:b3:6d:bc:84:ad:33:74:ba:3a:44:7e:35:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:E3:81:36:98:80:7F:68:DD:D5:24:3C:19:65:63:3F:34:82:A8
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/8c_jgTaYgH9o3dUkPBllYz80gqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b8:a2:6b:ac:69:97:24:0e:41:ba:22:69:70:8d:ec:15:1a:
ff:d1:ab:9e:db:dd:74:14:d7:43:65:b5:51:0d:50:c0:6a:f6:
8e:a2:fc:cc:ef:a8:d7:f8:a0:7f:e2:96:88:2d:bd:45:b9:e7:
dc:9a:b9:f7:89:8f:48:21:44:2c:36:14:a5:dd:e8:1b:ae:bc:
12:82:55:49:2d:82:d3:c3:63:ec:52:a6:de:c2:56:75:73:ee:
f3:28:8f:f6:ed:bf:a4:5f:d6:40:b2:10:9d:79:ff:aa:99:c3:
a3:ad:25:21:a7:d1:f9:be:56:42:8b:9d:d7:32:96:a4:42:04:
aa:a2:0e:93:06:e6:c8:b9:c5:e8:a2:77:35:c8:12:af:33:4a:
bd:03:17:cf:72:65:0b:42:a0:4e:04:ac:e9:8e:69:46:21:8e:
f0:e8:33:b8:47:d6:c4:cb:8c:6c:8d:40:39:80:50:ab:d0:94:
22:2a:e0:77:f0:2b:b6:80:d5:de:1f:bf:23:25:e5:3c:66:fc:
99:05:f9:0e:fc:ba:c7:09:7a:6e:84:4c:04:f4:d1:a6:46:c9:
8f:25:5c:91:9e:27:5b:3d:1c:6d:f7:fc:6b:28:1a:5f:30:86:
23:67:05:a2:ac:26:ad:a6:bb:aa:25:22:41:8b:27:c5:01:1c:
2e:7e:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:35:48 2024 by rpki-client on console-ams.rpki-client.org