Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1b2V4qnXqsTIQYDRE7QsGw2sX0s.roa
File: 1b2V4qnXqsTIQYDRE7QsGw2sX0s.roa (raw, json)
Hash identifier: IdYVx1uewecoAGBizOQwrSy7ZpbXCi9IieOhcRV+ulA=
Subject key identifier: D5:BD:95:E2:A9:D7:AA:C4:C8:41:80:D1:13:B4:2C:1B:0D:AC:5F:4B
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0192778E5ED67C37EE4E6DC85E3005C2AA52
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1b2V4qnXqsTIQYDRE7QsGw2sX0s.roa
Signing time: Thu 10 Oct 2024 17:51:11 +0000
ROA not before: Thu 10 Oct 2024 17:51:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 185.221.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:8e:5e:d6:7c:37:ee:4e:6d:c8:5e:30:05:c2:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Oct 10 17:51:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5bd95e2a9d7aac4c84180d113b42c1b0dac5f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:34:e7:56:3f:7c:9c:e6:e1:99:e8:9c:83:
4a:77:d0:62:ed:6f:2a:ad:c3:9f:db:26:4c:24:df:
7b:b3:5e:83:c0:2c:96:fa:c7:d2:ad:ca:ad:3b:06:
c3:36:ef:f7:0b:24:f7:86:0c:6e:0e:94:55:d4:26:
7c:6d:31:35:ec:9a:4a:2d:ec:6d:5a:03:14:a5:4b:
2d:26:58:a6:be:d0:3f:17:43:79:d8:61:09:f2:19:
7c:fd:4e:5d:bc:85:5b:49:98:10:dc:e9:30:b2:b2:
d2:24:0e:1a:44:84:52:4d:99:50:b8:34:d1:24:e6:
c5:e3:6c:9c:f7:8e:ac:94:a1:8f:f7:84:41:69:9c:
74:41:b4:ec:52:d5:d5:2c:9a:83:c8:71:04:1f:43:
2e:ea:9f:e0:f6:02:62:82:da:bb:8f:95:3f:12:8d:
54:c5:6e:96:f3:58:ea:b8:30:ff:bc:a8:ed:39:a3:
6f:b6:9f:2e:a1:40:16:86:e7:ed:58:c5:93:42:97:
0b:f4:85:b0:4d:9e:45:e9:95:c0:43:6e:83:4c:a3:
b1:b1:be:f0:5e:b3:f0:35:11:4c:7b:c8:bd:02:92:
5a:d4:78:e0:b0:ae:b3:b1:85:74:d2:fb:86:75:56:
c8:8e:e4:2f:29:b2:23:e3:59:5c:35:70:49:76:de:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BD:95:E2:A9:D7:AA:C4:C8:41:80:D1:13:B4:2C:1B:0D:AC:5F:4B
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/1b2V4qnXqsTIQYDRE7QsGw2sX0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:d5:7c:af:31:dc:e2:12:c7:18:5b:d7:4c:6e:44:83:e4:
9e:80:52:ee:c0:5d:dd:d5:92:14:37:70:88:f1:5e:38:18:56:
e5:11:57:dd:df:d3:ca:a3:c9:cd:bb:be:b7:6c:82:cf:59:92:
1a:a3:f8:89:55:6b:11:98:a8:4e:7a:3c:a7:54:f2:4b:e2:37:
bb:ef:9c:cf:d7:83:0a:04:6a:28:b9:aa:a2:2b:d8:96:89:26:
06:99:e7:2b:e4:7e:6e:71:e4:e5:34:1a:4e:23:80:02:2b:c6:
4f:41:61:52:8b:24:02:c1:86:49:9f:19:b2:37:dd:81:3c:b3:
fb:24:de:2f:99:fb:df:83:ef:fb:2e:35:b6:7f:e2:1c:7f:6a:
e6:e9:a0:ce:a1:cc:94:48:5b:c5:2e:a1:07:88:b5:cd:4b:c1:
08:cf:9b:fc:2c:f2:ac:e0:cb:5e:b5:fe:f3:33:60:23:3d:e2:
bb:ab:79:5d:eb:4b:bd:25:23:8a:84:e2:12:81:62:88:64:91:
d0:f2:ba:f5:f0:9e:ea:16:06:cb:93:ba:7a:3b:15:a8:f8:47:
9f:61:1a:d0:1a:93:f7:ae:0c:ea:cb:cc:a2:ee:66:da:b5:72:
97:24:bd:93:29:dd:4d:d3:a3:b6:a2:2e:3b:9d:30:4a:03:f6:
b8:be:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:23 2024 by rpki-client on console-ams.rpki-client.org