Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/m2CTq3Foo8BE73BPfwLKYRv0mj4.roa
File: m2CTq3Foo8BE73BPfwLKYRv0mj4.roa (raw, json)
Hash identifier: QuCWz1gopQHJNdrdCgqaCpkymSP71TuZbODrNujcW94=
Subject key identifier: 9B:60:93:AB:71:68:A3:C0:44:EF:70:4F:7F:02:CA:61:1B:F4:9A:3E
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019118CB573ED1FEBE898C4A44E8A6AA0DE8
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/m2CTq3Foo8BE73BPfwLKYRv0mj4.roa
Signing time: Sat 03 Aug 2024 15:11:04 +0000
ROA not before: Sat 03 Aug 2024 15:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:cb:57:3e:d1:fe:be:89:8c:4a:44:e8:a6:aa:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 3 15:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6093ab7168a3c044ef704f7f02ca611bf49a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:1d:d6:4b:60:80:18:dd:75:3d:0e:8d:d0:
cc:c0:4f:7e:3c:ab:4e:dd:c3:9c:c0:aa:3a:bf:47:
a8:9f:c3:c4:e3:2a:ed:45:3c:67:99:93:bd:20:3d:
5d:cc:57:27:7b:0a:92:16:02:91:0e:a6:01:ff:b2:
e1:f9:7c:35:07:89:45:1e:1a:15:38:1a:44:4b:dc:
58:c4:20:af:a2:64:54:1d:23:68:b6:ef:aa:49:07:
24:f6:e1:12:71:ba:66:ba:1a:ab:5d:be:b6:3b:f5:
ec:ed:50:43:a1:20:33:47:e3:3d:2e:d5:f2:8f:e6:
81:c4:9b:e3:02:68:db:f2:5f:e4:67:24:e4:d8:74:
74:e0:3b:e2:78:8c:5b:72:be:7a:d1:d6:de:90:91:
53:da:d7:47:f7:6e:63:5d:5e:f6:5d:64:76:c2:dc:
de:7d:70:bb:74:6d:77:b8:6d:fd:56:c1:0e:aa:ab:
ee:f2:86:45:37:b4:a8:e4:e1:be:b1:cd:43:6d:ae:
8c:5b:57:db:76:a7:0d:cd:3f:f7:24:dc:fd:d7:73:
cb:6b:a3:57:00:17:da:47:1d:b0:de:6f:86:3d:54:
07:99:7a:d4:e2:e6:06:4d:ab:00:eb:7c:70:5c:fe:
13:1b:ee:cc:a5:22:d8:89:9a:d7:c8:03:a3:d4:14:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:93:AB:71:68:A3:C0:44:EF:70:4F:7F:02:CA:61:1B:F4:9A:3E
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/m2CTq3Foo8BE73BPfwLKYRv0mj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:52:b1:ab:f7:3b:b4:64:f1:30:b5:ec:70:c4:12:e7:a2:e4:
55:c9:8b:cb:db:a6:99:bf:c1:69:c8:14:cf:78:e4:01:87:f4:
37:57:7a:bd:8e:24:f4:85:4a:cc:d7:a3:3e:2d:18:6a:ca:21:
f2:90:1b:3a:f8:ea:ab:7d:17:97:5c:8b:b1:77:c9:51:3b:64:
49:ff:93:1b:e0:a6:bc:21:ea:70:02:99:e0:c2:40:6b:58:d8:
ad:6d:ca:6f:bd:2d:df:15:33:f9:ee:1b:6c:54:53:02:c7:98:
9a:f0:71:26:e5:fe:bb:f6:dc:e6:e4:c9:de:62:91:66:a3:4d:
f9:f4:05:40:f9:02:b4:f2:e9:48:6c:e0:9e:c0:92:ea:cd:3e:
dc:0d:13:8f:7b:36:f0:d1:9d:f0:da:9e:f5:89:c3:d3:6f:ed:
32:d2:7f:a2:8c:fd:2c:28:d9:fd:46:39:8f:13:ad:13:78:9f:
84:f5:b8:02:a7:0a:ff:18:3b:6f:95:d4:25:95:1f:fb:bb:a3:
77:3b:0c:a9:01:43:6e:dd:15:bc:9b:3b:e7:6b:41:10:d0:df:
39:30:90:3a:9e:37:68:69:98:8f:64:2c:e9:69:91:87:2d:c6:
9a:1e:8b:bc:30:7d:20:81:7e:ae:3b:d9:29:80:72:61:b2:67:
69:3e:57:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:51 2024 by rpki-client on console-ams.rpki-client.org