Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/DjHbkzyUCcvYY2yAEY6YdHPf0Eg.roa
File: DjHbkzyUCcvYY2yAEY6YdHPf0Eg.roa (raw, json)
Hash identifier: 6BwuYPESNpaDw0t9tguuxcpyjbwjDUrk2yvcdgFU6Kw=
Subject key identifier: 0E:31:DB:93:3C:94:09:CB:D8:63:6C:80:11:8E:98:74:73:DF:D0:48
Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial: 018CC3495E7E9A37E3274A146B8AC095E1EC
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/DjHbkzyUCcvYY2yAEY6YdHPf0Eg.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21212
IP address blocks: 185.110.96.0/24 maxlen: 24
185.110.97.0/24 maxlen: 24
185.110.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5e:7e:9a:37:e3:27:4a:14:6b:8a:c0:95:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e31db933c9409cbd8636c80118e987473dfd048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:16:c6:30:4d:39:dd:e6:2b:e9:53:74:7f:
4f:75:7d:a0:d4:55:fc:7f:d6:35:f6:3a:2a:e3:a0:
3d:3a:a4:f3:94:0e:c6:da:a0:d5:c9:3d:90:cb:50:
0b:ed:ac:dd:8b:d1:4b:fd:05:f6:07:74:27:47:11:
25:20:3d:73:fa:8a:4e:4f:c3:fc:66:d3:d5:3d:10:
71:9a:a8:36:3c:4a:02:88:af:65:1d:44:bc:6b:29:
7e:19:d0:75:d9:06:33:3e:0e:19:2a:3a:e4:21:de:
98:fc:34:5b:e5:29:f4:98:f3:89:cf:98:0d:18:07:
a1:33:9b:6d:25:69:5c:95:41:8e:65:ff:eb:ba:a8:
35:6d:35:0d:ad:56:c8:c3:1f:1f:02:4d:84:33:46:
59:53:4e:af:41:7f:58:71:d5:0d:a8:27:4f:d7:d4:
22:5b:e6:65:6c:9c:75:fc:1d:c6:fe:b4:6f:c1:e0:
f2:c5:9c:ee:c8:40:b0:5c:e6:30:6d:80:96:31:02:
8e:98:ac:83:8f:4e:8d:2d:95:f4:32:ba:88:95:97:
80:d6:ae:46:67:d5:0a:8d:52:28:42:33:e1:d9:2f:
9a:40:96:37:78:17:ef:20:57:80:8d:b3:11:0f:43:
4b:56:c2:e8:d2:bf:07:8a:82:b4:ea:92:aa:cf:de:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:DB:93:3C:94:09:CB:D8:63:6C:80:11:8E:98:74:73:DF:D0:48
X509v3 Authority Key Identifier:
keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/DjHbkzyUCcvYY2yAEY6YdHPf0Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.96.0-185.110.98.255
Signature Algorithm: sha256WithRSAEncryption
85:ba:c0:a9:7a:b4:5c:73:62:0e:c3:83:aa:c4:85:03:06:78:
57:49:54:d5:d9:df:eb:e3:4a:08:91:95:46:39:a8:05:38:5e:
61:6f:94:a9:5f:7b:c3:2c:18:e5:bb:e9:b2:1c:0d:2e:bd:c1:
d6:86:ae:b9:db:bf:d1:59:6f:a8:d2:54:34:cc:78:60:48:57:
63:0d:75:78:c7:6e:e1:f7:fc:f7:13:93:b0:36:c3:f6:10:af:
ca:1f:5f:cd:86:50:ae:0e:11:75:67:7c:04:d1:2b:b2:37:ed:
5a:33:94:75:c1:53:67:07:ee:66:b8:99:d1:25:84:15:e3:51:
bd:d8:fc:bf:9d:53:b2:35:7c:ea:9b:64:96:26:38:e8:e2:02:
b9:9f:80:02:ff:0d:a4:59:57:46:dc:5f:7a:19:55:a9:55:be:
cd:53:cc:b2:c2:25:49:df:2f:f9:58:8a:cf:7a:ad:95:ba:20:
e9:04:0e:83:c6:24:42:a1:2a:0b:9c:e1:d2:f0:77:02:87:2b:
cd:af:38:e8:d6:38:a8:5b:0c:bb:48:74:5e:0e:e0:22:a4:fb:
b4:00:cb:d0:f7:2e:b7:0d:8e:c4:a7:58:51:3f:95:77:8a:74:
c0:6b:62:99:81:a3:2c:02:23:84:86:10:75:da:26:b7:00:97:
3a:56:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:59 2024 by rpki-client on console-ams.rpki-client.org