Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/AmulEq34E5ioacYzNAAHO5Bx4j8.roa
File: AmulEq34E5ioacYzNAAHO5Bx4j8.roa (raw, json)
Hash identifier: q9ufjJtKCOFUedU4D/NiE/TMwb/5BdulUQqNFRauYkY=
Subject key identifier: 02:6B:A5:12:AD:F8:13:98:A8:69:C6:33:34:00:07:3B:90:71:E2:3F
Certificate issuer: /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial: 018CC6B87ED3EF981204945B2C2ED0D4B68B
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/AmulEq34E5ioacYzNAAHO5Bx4j8.roa
Signing time: Mon 01 Jan 2024 20:30:29 +0000
ROA not before: Mon 01 Jan 2024 20:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35000
IP address blocks: 185.7.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:7e:d3:ef:98:12:04:94:5b:2c:2e:d0:d4:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
Validity
Not Before: Jan 1 20:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026ba512adf81398a869c6333400073b9071e23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:1f:70:a4:2e:80:82:6f:3b:ad:9f:d1:7c:
76:95:a3:9a:1c:4b:b0:af:a2:b2:ea:60:c0:d7:12:
87:1b:da:82:19:8c:6c:fe:99:bb:25:82:fd:16:11:
75:2a:70:8c:92:ba:70:30:0f:cc:b0:e9:39:8a:67:
b6:07:a1:16:52:08:a2:c7:75:9e:f1:6a:2e:48:9c:
82:24:3c:11:15:53:4d:75:82:bd:b2:1e:73:f7:64:
17:22:e2:f5:bf:d4:81:b4:0c:4b:47:bc:2b:ef:34:
9a:df:b3:e2:a0:1b:70:ba:2d:3f:43:d4:55:9c:38:
37:ee:1d:21:de:cc:c0:22:fe:19:1c:b3:fb:80:ad:
a1:9d:69:84:a6:4d:d1:70:44:64:96:93:82:35:57:
52:1f:8c:ac:1b:01:20:ea:7f:96:73:99:45:65:ed:
ea:6a:62:9a:cd:fa:6d:25:c1:f2:4e:b8:bb:cf:fa:
9b:af:ca:43:b8:e9:29:e9:2f:9d:7e:81:55:54:4f:
d4:2c:43:fa:0b:a4:2b:51:67:bd:c8:ca:ef:24:73:
53:c3:ea:8f:26:c4:3e:1a:ad:3c:a7:89:5d:ce:9e:
d1:61:dd:b3:44:69:ac:95:cc:ad:63:b1:ff:d0:0a:
1d:66:3a:ae:c3:8e:e3:11:08:56:59:e4:0e:e7:0e:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:A5:12:AD:F8:13:98:A8:69:C6:33:34:00:07:3B:90:71:E2:3F
X509v3 Authority Key Identifier:
keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/AmulEq34E5ioacYzNAAHO5Bx4j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.147.0/24
Signature Algorithm: sha256WithRSAEncryption
02:39:16:48:b5:38:68:db:96:ba:6b:16:61:52:10:c5:d8:91:
c0:9c:dd:d5:d8:39:19:47:73:4b:1f:fa:e6:14:ff:1a:f4:c7:
64:11:21:d8:86:8d:75:59:06:8c:0f:51:6f:cf:1a:bb:61:40:
03:c3:b1:7c:c7:86:64:d8:40:41:77:61:f4:90:88:f1:32:44:
e4:6e:89:67:88:28:19:c5:23:57:26:f4:7b:d3:7c:e2:f9:65:
c9:2a:34:b4:83:77:fe:e2:9a:ae:04:de:24:49:cc:20:7a:02:
1c:e5:1e:db:e8:ba:44:d8:a7:47:8c:29:7d:df:99:47:f9:2c:
4c:dd:7c:70:25:9b:07:e3:12:ca:ce:c1:3e:0d:db:3b:42:2e:
2b:29:a5:02:54:98:8c:10:6f:e0:35:b6:52:9b:21:c8:d0:e4:
08:68:46:46:33:64:52:22:99:67:56:43:35:9a:ef:8d:5b:9c:
be:6a:d6:d6:74:47:e9:6e:e6:3b:9c:a1:dd:35:fe:23:dc:15:
4c:e9:56:54:eb:80:9c:c1:a7:d7:36:25:97:3d:6e:19:2a:61:
4c:fb:53:99:1f:e5:0a:7c:62:ba:60:5a:d5:e7:86:f3:20:46:
88:75:79:01:69:c2:68:77:0b:2c:30:cd:2c:2c:ab:8c:95:56:
7a:a3:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:37 2024 by rpki-client on console-fra.rpki-client.org