Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa
File: G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa (raw, json)
Hash identifier: wtkx4u7+uJuzY/Var52g30Sul31M23a4ANAq9wcayBk=
Subject key identifier: 1B:97:57:21:93:AF:0E:5E:95:46:16:7A:B0:EF:F2:A4:3B:7B:D7:08
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 018CC64B8CE1A94DC8F3A84EEE554A23B435
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204834
IP address blocks: 185.237.84.0/24 maxlen: 24
185.237.86.0/23 maxlen: 23
185.237.86.0/24 maxlen: 24
185.237.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:e1:a9:4d:c8:f3:a8:4e:ee:55:4a:23:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b97572193af0e5e9546167ab0eff2a43b7bd708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:71:c0:4a:96:e1:3d:14:3d:7e:ab:7f:1a:
c5:ab:d9:56:ca:1a:5b:97:b8:8e:14:28:8d:f0:c8:
de:68:82:29:ed:9f:2d:c1:12:f0:ff:32:90:7a:3a:
31:b2:cc:0b:a0:59:50:0b:63:53:8b:57:0d:36:ae:
14:3c:84:48:a7:28:fe:43:eb:84:b4:03:d1:bf:27:
38:19:8e:c3:ba:8f:ff:ea:fb:68:69:3d:ef:0a:cc:
00:19:d7:21:a7:04:8e:84:ad:95:db:64:47:a9:b6:
e4:ad:87:01:b9:72:db:c6:d2:ee:71:3b:d4:fb:99:
32:dc:7e:1d:ba:a9:0b:2b:2f:a3:a4:4f:73:9f:fd:
f2:2e:ba:7d:d9:3f:c5:fb:57:3b:46:b5:d8:33:35:
e2:e7:87:58:e4:a4:3b:fc:25:cc:76:34:1a:81:4e:
37:92:04:2f:7c:7d:c9:c1:88:2d:58:c8:36:da:b7:
64:b5:c5:c7:52:fe:88:4e:ba:b6:92:57:c7:ab:c5:
57:6a:75:c6:4e:92:8a:0b:8e:68:28:48:1b:97:d1:
a5:b8:4a:cd:b9:9d:ac:0f:20:8b:72:a1:36:e5:28:
33:af:44:94:e7:0f:9a:d0:3d:47:31:f1:4e:95:a6:
45:60:ad:6b:2e:7d:4b:58:b9:b3:29:f0:db:e1:5d:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:57:21:93:AF:0E:5E:95:46:16:7A:B0:EF:F2:A4:3B:7B:D7:08
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/G5dXIZOvDl6VRhZ6sO_ypDt71wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.84.0/24
185.237.86.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c5:2c:64:38:8e:c8:3d:bf:89:03:79:6f:4a:d7:78:ad:15:
36:19:e1:8a:fe:b9:79:69:8f:5b:51:b0:80:c7:46:e3:7f:1b:
6b:b3:bb:29:2b:a8:a1:4d:22:4e:2b:41:92:ed:05:7a:93:75:
62:f9:8f:01:1d:ca:f5:2d:f0:d9:46:aa:d7:8f:4c:9b:02:2a:
4f:5f:06:7e:c6:5b:b0:1c:4d:7f:df:94:7b:bb:71:c0:4f:40:
76:d0:db:49:81:75:9d:86:1c:95:bf:ce:3f:50:47:58:82:03:
4a:ff:e4:0d:d2:45:90:74:8d:be:13:68:f6:c7:3e:0f:59:6d:
26:c7:21:44:b5:9a:53:85:bd:c4:94:e7:4c:3c:c9:bf:70:e4:
ce:a6:6f:8f:1e:36:59:67:2b:30:08:4b:32:f4:da:b8:93:ed:
63:74:41:cb:b9:7e:61:ab:1d:93:9d:15:1a:94:63:39:e6:fb:
3b:e4:4a:37:42:c3:df:c3:d6:de:1e:20:ec:4a:14:6c:be:cc:
e4:45:59:c6:68:be:08:fa:c5:a0:58:5a:18:03:80:6c:04:6b:
13:f7:ce:a5:22:ff:a5:e8:54:c9:62:ec:67:20:e3:b2:09:80:
c5:ed:39:af:ce:10:30:3c:13:1f:d7:d3:15:e3:ed:dc:40:f8:
37:9d:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:05:44 2024 by rpki-client on console-ams.rpki-client.org