Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ssDZ1KcozW_nvSTHmXGAzWGPi_k.roa
File: ssDZ1KcozW_nvSTHmXGAzWGPi_k.roa (raw, json)
Hash identifier: OvfjPbGWPm+ngLL3A3uSx4AxJWviYCg7PLZo0SBUl7o=
Subject key identifier: B2:C0:D9:D4:A7:28:CD:6F:E7:BD:24:C7:99:71:80:CD:61:8F:8B:F9
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 0192EB9CE69E0E0E8E3C25A92AFB90CD75A3
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ssDZ1KcozW_nvSTHmXGAzWGPi_k.roa
Signing time: Sat 02 Nov 2024 06:43:01 +0000
ROA not before: Sat 02 Nov 2024 06:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 185.224.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:9c:e6:9e:0e:0e:8e:3c:25:a9:2a:fb:90:cd:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Nov 2 06:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c0d9d4a728cd6fe7bd24c7997180cd618f8bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:96:d7:fa:d7:0c:b1:84:37:d2:9e:56:52:
50:64:36:19:be:19:21:97:7e:da:76:61:35:e2:17:
c1:72:34:a5:4e:eb:71:95:95:50:9a:89:b0:b4:e1:
b4:67:84:0a:ad:01:44:a8:08:8b:a3:eb:85:ef:1e:
8d:2f:ad:22:cf:67:82:e5:15:fc:6c:c5:06:e3:33:
c5:04:f7:65:e2:ba:ed:e5:09:e2:f5:d0:9f:b5:b3:
33:52:b9:0c:1a:2e:5a:86:28:8b:af:be:a7:e0:49:
9b:4b:cf:ea:1f:48:12:7b:fc:55:31:a9:47:1c:00:
68:e0:56:62:4f:9b:f6:11:13:b7:50:16:bb:b5:a8:
47:ba:b0:4d:6b:06:ed:69:8e:40:e7:49:c8:e1:61:
70:ca:1d:ba:86:0a:98:a0:69:63:9e:61:39:49:d1:
bc:ae:5e:73:a5:35:86:4d:9a:59:97:b8:78:45:2d:
c4:28:ab:38:46:06:11:b4:47:84:d2:50:9a:1e:6d:
15:19:29:4b:41:0e:6d:70:7a:72:54:72:33:63:0f:
2d:65:ae:0e:f3:03:c4:51:47:99:6b:5d:3b:00:de:
ba:9d:cb:34:f4:dc:af:50:e0:28:af:a6:8e:9c:d8:
5b:2a:b3:24:13:9c:e4:80:76:68:4d:3a:a6:d1:0a:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:D9:D4:A7:28:CD:6F:E7:BD:24:C7:99:71:80:CD:61:8F:8B:F9
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/ssDZ1KcozW_nvSTHmXGAzWGPi_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3a:5c:b4:85:cc:d8:52:39:78:7e:fd:25:ce:61:3b:4c:bb:
12:f9:01:b5:ca:93:98:43:ab:1f:3f:34:39:6e:17:c3:b0:9e:
c8:de:e4:9c:d0:e9:4d:54:5c:e5:dd:ef:8f:d3:e3:d2:9c:15:
91:39:a9:7e:3b:40:bc:5e:6a:f0:d3:89:22:8a:12:26:de:77:
70:a2:57:00:9f:76:0b:a6:3a:4d:c7:fc:25:19:58:e6:81:0f:
51:48:0b:7d:4c:c1:c0:81:ef:3f:c7:54:fb:44:7e:5b:09:40:
81:43:f9:1b:3a:0c:55:a4:d4:f9:a5:65:ab:76:3e:f4:b7:fd:
2d:4e:66:d2:b7:5e:e1:ef:4e:80:b8:ac:6d:ee:98:29:4a:e8:
db:d7:69:17:b7:04:7a:e3:23:25:b2:25:31:e7:36:7a:3e:32:
ca:9e:da:00:03:d0:58:24:26:d5:6c:d8:1a:9b:62:50:13:b9:
be:d4:c4:65:d0:b7:e4:fb:d0:24:ea:19:75:4a:9a:d1:e9:6f:
10:4c:57:d1:8c:e6:18:1c:54:f5:ed:e3:de:9a:41:c5:6b:f6:
65:af:87:c9:bd:91:70:5b:1a:5c:64:91:76:8c:cf:e0:5f:5a:
d8:90:53:61:4b:a0:70:6e:ca:79:ea:a5:b0:67:c6:a9:78:80:
f9:5f:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:34:51 2024 by rpki-client on console-ams.rpki-client.org