Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0fghH1pnzo5TiEDr7u-2goYMMQs.roa
File: 0fghH1pnzo5TiEDr7u-2goYMMQs.roa (raw, json)
Hash identifier: NUy+a/UukpjCxrS8cKHIvfTMqDzyRlXc+zX6qRPwpl0=
Subject key identifier: D1:F8:21:1F:5A:67:CE:8E:53:88:40:EB:EE:EF:B6:82:86:0C:31:0B
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018CC8712121FEBC35B74FA0B36381822EBF
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0fghH1pnzo5TiEDr7u-2goYMMQs.roa
Signing time: Tue 02 Jan 2024 04:31:46 +0000
ROA not before: Tue 02 Jan 2024 04:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62081
IP address blocks: 185.48.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:21:21:fe:bc:35:b7:4f:a0:b3:63:81:82:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 04:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1f8211f5a67ce8e538840ebeeefb682860c310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:5d:17:63:45:41:b7:4e:de:c0:85:29:50:
b8:2d:de:4b:a9:50:81:18:3e:00:15:67:8c:b5:c5:
2b:17:00:04:64:d4:87:9c:fc:b6:ce:72:4e:a0:e1:
8d:71:cd:c5:57:41:6f:ed:f0:9f:e9:de:e9:c4:3e:
4c:12:65:e6:6c:83:17:fc:4f:4b:ab:aa:f2:19:6f:
26:f3:79:60:57:bb:b6:cb:73:35:9b:7a:86:9d:e8:
d6:93:b2:6d:22:29:87:f0:27:5d:6f:10:86:22:a1:
33:60:f4:87:66:6a:2d:06:3a:05:18:39:ed:87:82:
c8:7c:1d:82:66:95:8d:b8:69:3e:b5:eb:81:cc:79:
99:9c:50:8a:ff:c0:e7:aa:91:3f:96:16:30:d5:79:
0c:7f:70:ae:75:ce:93:0e:40:f9:8f:54:5f:e5:fc:
ae:8e:d2:44:2a:1c:9e:3d:c4:22:97:f9:e1:a0:84:
f7:c8:ae:e8:57:9f:c7:95:7e:5c:34:fa:90:ef:8a:
47:e3:6a:65:68:21:67:5e:ff:49:77:cb:79:d7:85:
53:9c:d1:7b:88:4a:d5:25:86:62:b4:68:a4:b0:36:
1c:79:d8:2f:27:c2:18:43:ba:85:96:68:ff:a6:4a:
4f:72:5e:bc:c6:71:35:a3:52:17:1a:9f:12:50:c6:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:21:1F:5A:67:CE:8E:53:88:40:EB:EE:EF:B6:82:86:0C:31:0B
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/0fghH1pnzo5TiEDr7u-2goYMMQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.8.0/24
Signature Algorithm: sha256WithRSAEncryption
04:49:71:2e:07:07:01:16:7d:12:39:d2:19:68:88:6d:3f:1e:
4f:06:b3:0b:97:29:23:7a:84:21:8e:fa:b7:f4:1f:8f:24:bb:
72:44:66:8d:89:58:40:e9:89:96:4e:0c:a0:d4:e1:c1:fd:4e:
52:37:d5:cf:4f:96:08:3f:d6:c1:e4:0a:8e:1f:c1:54:2f:8a:
e8:be:b9:44:55:b5:c3:fa:49:2f:97:72:0a:d0:d1:53:1e:72:
2f:db:bc:6c:86:f3:4d:46:bb:ad:54:58:b3:6a:2d:ca:96:02:
2d:74:2c:9e:d7:0f:79:be:04:04:3e:06:1d:99:40:8f:5d:46:
f1:9f:d8:4f:1d:a4:78:99:7d:af:44:9e:ec:e2:19:81:cc:83:
a1:04:49:67:49:12:ec:49:fb:df:69:b3:70:25:b9:e9:02:54:
20:97:1d:d3:40:6f:a5:c5:6c:05:a9:06:b7:2b:88:be:e0:4e:
20:12:64:e3:02:18:6d:95:07:34:9f:e5:66:60:a8:9e:eb:8d:
34:3d:26:27:eb:08:79:d7:c4:f9:84:55:58:94:10:f1:09:5b:
d0:9f:a1:6d:09:58:af:b0:93:7d:41:e8:f2:8f:14:1f:ce:22:
8f:46:50:07:c8:d5:c0:1f:c2:c5:1e:29:37:b9:d8:6a:18:b0:
12:3c:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:45 2024 by rpki-client on console-fra.rpki-client.org