Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gDhrmK40cWj5JuNjaz0Gq1z9mM8.roa
File: gDhrmK40cWj5JuNjaz0Gq1z9mM8.roa (raw, json)
Hash identifier: 1w3aJ4LUGZk4eXiJ0UANeXrTZZa/amdb/kVghDt9QSM=
Subject key identifier: 80:38:6B:98:AE:34:71:68:F9:26:E3:63:6B:3D:06:AB:5C:FD:98:CF
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01926607EE8E4D2CD81D5B5517BB6D88FF17
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gDhrmK40cWj5JuNjaz0Gq1z9mM8.roa
Signing time: Mon 07 Oct 2024 08:10:48 +0000
ROA not before: Mon 07 Oct 2024 08:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198193
IP address blocks: 185.223.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:07:ee:8e:4d:2c:d8:1d:5b:55:17:bb:6d:88:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Oct 7 08:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80386b98ae347168f926e3636b3d06ab5cfd98cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:2d:5a:97:b0:8d:76:de:bc:a7:93:58:f8:
0c:63:5a:7d:0d:50:1f:ea:6f:d9:c2:f9:07:86:81:
f6:3b:e8:5e:a7:bf:49:56:93:ba:aa:aa:04:ba:b6:
06:46:86:f1:a7:af:fc:38:60:9d:56:d7:94:ae:1e:
a7:9a:d6:89:64:60:00:18:68:f1:c2:b0:31:57:f4:
03:3e:b7:c3:8a:c1:a1:ab:92:bc:df:7b:6e:c6:5e:
d4:2f:fa:23:35:36:14:d3:f1:01:45:48:ee:c6:16:
1d:6b:f5:2a:62:c0:02:f5:7c:a4:8d:d5:1e:6b:32:
e3:0b:1f:26:bd:ec:f5:ca:0f:e5:52:a9:a1:a8:75:
2d:b8:bd:90:94:b4:89:f2:c3:fe:aa:77:77:8a:53:
18:cf:6d:3e:ee:7b:76:5b:16:06:29:7d:b7:23:33:
f2:ba:56:87:33:c7:fd:6e:14:c5:8d:04:99:75:80:
e3:38:65:30:cd:32:a7:13:90:a2:dd:0e:a5:91:c4:
83:fd:74:7d:8e:70:f3:37:0a:5c:b7:00:8a:f5:39:
2c:a6:43:bc:f6:d1:06:33:ce:42:fa:19:6c:86:55:
d2:d8:99:88:dc:55:ed:e2:bf:16:52:69:bb:2f:84:
fd:1c:6a:81:cd:61:c0:67:cf:19:c9:70:99:9e:34:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:6B:98:AE:34:71:68:F9:26:E3:63:6B:3D:06:AB:5C:FD:98:CF
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gDhrmK40cWj5JuNjaz0Gq1z9mM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.219.0/24
Signature Algorithm: sha256WithRSAEncryption
59:da:7f:57:7a:92:d6:b0:55:c1:fe:90:d4:a7:27:e5:16:f3:
67:ad:5e:85:a0:ca:2a:5c:f8:74:94:19:4a:8e:60:22:4c:25:
51:12:62:93:62:88:f4:e4:24:59:a8:4f:07:f1:f3:ec:23:35:
1e:47:36:a5:00:c9:4b:bf:7d:9d:d8:0c:6c:a6:b0:b3:54:c5:
a9:b1:ab:6d:d3:00:74:f4:8d:77:93:85:59:ae:f5:76:24:d9:
8a:bc:f3:5d:d4:89:42:b8:70:3e:0a:b3:42:0a:ae:57:37:55:
66:a8:f2:be:fe:c9:33:56:85:34:83:83:f2:d9:a3:60:8c:0e:
09:f1:e8:fc:38:2e:da:06:0e:53:01:da:ec:29:1b:52:5e:17:
2c:9a:45:ae:4b:35:17:ac:3d:dc:0f:f1:3b:cf:db:7f:45:ac:
2f:13:2b:99:d5:93:42:6b:d7:0b:65:92:fd:db:87:ed:6d:ec:
0f:35:c1:d9:8f:51:5d:fc:1b:34:28:d3:6c:3d:a2:3d:19:af:
e9:e2:b0:cd:52:65:57:6d:2c:5a:35:8b:e5:64:44:4f:e1:51:
90:f1:e3:fa:73:33:8d:af:3a:f2:57:e4:34:3c:3a:9a:fe:68:
20:d8:12:09:f2:6a:26:49:0b:ee:7a:d4:ac:2e:b6:0e:df:8e:
d4:fc:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:38 2024 by rpki-client on console-ams.rpki-client.org