Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i9SVfyYX8gvqWONA_WgYWZiu_a8.roa
File: i9SVfyYX8gvqWONA_WgYWZiu_a8.roa (raw, json)
Hash identifier: tn2QLqJAmjlEsG2oxeYu2yX2WAZm5t4ppb/wghTuLNo=
Subject key identifier: 8B:D4:95:7F:26:17:F2:0B:EA:58:E3:40:FD:68:18:59:98:AE:FD:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD8D2A1A82E8677CF7D5454FACD3C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i9SVfyYX8gvqWONA_WgYWZiu_a8.roa
Signing time: Tue 02 Jan 2024 10:34:05 +0000
ROA not before: Tue 02 Jan 2024 10:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.132.0/24 maxlen: 24
2a0e:97c0:b33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d8:d2:a1:a8:2e:86:77:cf:7d:54:54:fa:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bd4957f2617f20bea58e340fd68185998aefdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:05:8b:a5:55:1c:85:bd:19:f7:18:77:93:
ec:c4:d2:bd:e9:03:ac:2c:e0:23:cb:c1:62:e2:46:
a7:ca:bb:0d:01:71:42:19:de:e8:c2:48:02:49:e2:
7d:8e:b1:5d:2a:0d:62:e1:4b:a8:26:42:27:10:26:
bf:bd:a6:74:ae:b4:7d:a8:41:53:56:db:6f:74:d5:
18:c0:18:08:36:22:73:e7:38:5e:c0:bc:3d:f6:fc:
12:56:01:63:a1:30:c9:cf:b1:a6:2d:bc:da:75:c2:
98:6c:f7:7d:48:61:cd:17:de:68:2a:ff:a6:93:4f:
21:3e:13:52:d6:9f:77:08:90:b6:b0:5d:dd:36:1c:
4e:c6:91:47:25:eb:bb:02:4e:c5:7c:9f:e9:08:48:
53:e9:a9:cf:90:e9:93:69:f8:65:88:f4:98:67:09:
03:8e:31:dd:2d:94:96:29:a0:17:21:4d:4c:54:df:
ae:c1:12:16:73:76:64:c8:51:ee:bb:0e:39:b9:ba:
5c:fd:ca:65:43:22:8e:fa:ea:45:57:95:8f:e5:e0:
2d:c8:df:b5:fd:18:78:db:3b:b6:70:af:db:18:e0:
51:77:d7:f8:c7:31:0f:67:ed:de:1e:29:6b:e1:2c:
a2:75:6b:a8:be:81:9b:56:29:0c:dc:2b:a4:88:0c:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:95:7F:26:17:F2:0B:EA:58:E3:40:FD:68:18:59:98:AE:FD:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i9SVfyYX8gvqWONA_WgYWZiu_a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.132.0/24
IPv6:
2a0e:97c0:b33::/48
Signature Algorithm: sha256WithRSAEncryption
b8:1d:ea:0b:8e:f6:a3:99:4a:48:b4:2c:a3:55:25:72:15:8f:
52:99:bf:b3:f7:fb:65:51:29:60:fb:64:13:2b:c0:68:1d:9e:
24:ef:27:e0:64:ad:0a:c1:29:52:d1:86:6f:c0:aa:5c:11:c9:
69:1c:ac:64:74:fd:7a:b3:b0:c8:91:ee:80:6b:d7:b1:16:14:
2b:57:23:67:dd:d7:27:dc:25:85:2c:d3:eb:fe:1e:41:a7:cb:
64:04:0d:5f:3a:fa:fd:6b:2d:2a:ab:01:d8:83:da:d9:04:90:
81:6c:c5:d4:d8:70:64:34:3c:ca:24:9c:bd:cc:9b:c0:98:a3:
27:56:64:c7:e3:2c:c9:c9:05:c4:d5:99:80:20:25:72:4c:52:
13:be:43:80:6b:46:a5:6f:f6:8d:81:e4:0d:0e:65:b1:b3:8c:
9d:f6:94:a6:c0:d4:99:cc:20:2f:37:de:1f:21:8e:c4:63:67:
0b:95:cd:83:2e:9d:da:1c:e1:7b:be:70:e0:5e:26:e0:2f:6f:
30:b6:ee:d3:7e:fb:1e:d9:c8:c0:66:3b:98:d1:92:08:05:d0:
7d:f6:44:23:94:0d:26:95:59:46:aa:93:87:bb:c2:fa:e7:67:
ca:95:5c:99:f8:85:84:0c:1f:57:93:bf:a4:66:9d:11:35:e3:
1c:67:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:31 2024 by rpki-client on console-fra.rpki-client.org