Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/DBdi3zso_QNE4WFXgizPgHJLs7Y.roa
File: DBdi3zso_QNE4WFXgizPgHJLs7Y.roa (raw, json)
Hash identifier: sf2shcYrUebU2pn4PSdpb7blTCAJ4tozUzegcM+ID7I=
Subject key identifier: 0C:17:62:DF:3B:28:FD:03:44:E1:61:57:82:2C:CF:80:72:4B:B3:B6
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 01924E3B422A297F76A1FC74C2FEE2C0B05D
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/DBdi3zso_QNE4WFXgizPgHJLs7Y.roa
Signing time: Wed 02 Oct 2024 17:15:59 +0000
ROA not before: Wed 02 Oct 2024 17:15:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61218
IP address blocks: 185.209.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:3b:42:2a:29:7f:76:a1:fc:74:c2:fe:e2:c0:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Oct 2 17:15:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c1762df3b28fd0344e16157822ccf80724bb3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:a5:5e:ef:18:0b:c4:76:17:84:18:e0:58:
ae:87:57:80:5e:5f:f6:43:87:0a:97:81:ee:4a:b3:
99:97:ac:36:85:fa:e4:be:1b:3a:d2:3e:75:1b:ee:
70:32:27:04:85:b7:bc:5e:d2:c6:c1:b8:cb:b2:0d:
bb:8d:db:c5:fb:ba:0e:b0:0e:fb:30:e0:2f:ca:60:
42:50:ab:c1:e9:17:28:cc:b6:12:9d:e9:61:49:ab:
04:e5:80:66:1d:cd:20:8f:2a:50:2f:c1:c1:a6:6a:
0f:38:40:2f:a0:bf:a7:72:4f:23:17:36:88:ae:94:
48:4d:3e:48:0a:f3:eb:f5:bc:aa:91:96:02:3c:7c:
de:98:69:19:20:af:1d:a1:48:76:c6:d4:a8:68:67:
ae:b2:34:9b:60:60:4d:66:44:be:60:9d:e6:8e:79:
0d:33:55:c8:f3:bd:db:e7:65:51:b2:a9:6f:67:d9:
2e:c0:a5:42:07:3a:e2:1a:a4:c2:b6:46:fd:12:76:
d8:66:c7:5d:76:78:31:41:48:b7:92:bb:2a:9e:ee:
cd:e9:16:51:e7:e9:56:08:8a:0f:72:34:18:52:da:
c3:23:91:be:c5:33:a8:cb:83:be:a3:ee:bb:9e:34:
c6:be:b3:7d:c0:1f:6c:40:6a:42:d4:90:67:cd:42:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:62:DF:3B:28:FD:03:44:E1:61:57:82:2C:CF:80:72:4B:B3:B6
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/DBdi3zso_QNE4WFXgizPgHJLs7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.43.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0c:f3:fb:a4:37:8c:b9:9a:87:9d:45:9e:dd:2e:04:03:8e:
23:6d:88:5d:2c:ba:65:a6:f5:49:e8:40:5d:3a:d9:31:d0:c2:
d6:08:bf:68:53:0a:87:59:ef:0c:03:f9:45:60:57:72:b0:ec:
6b:11:18:ac:ad:0e:97:61:4d:c5:02:91:c7:4d:e5:99:04:33:
99:21:17:d5:aa:9a:5f:dc:22:84:ad:22:ec:13:5e:5a:94:e4:
01:e3:3e:94:3a:3f:99:d6:92:4a:3d:f3:a6:7e:22:08:bb:29:
3d:40:32:12:41:91:fd:f6:cf:49:3f:e6:b3:9d:1b:4e:59:04:
ab:0b:a4:88:1a:8e:58:16:6a:ac:e3:3f:50:05:d2:9b:ff:1a:
60:38:d0:c6:3a:b3:71:98:f5:e5:49:99:84:16:38:05:36:64:
19:5f:e2:17:93:e9:3e:65:4f:d6:8a:5e:d2:02:f2:0d:e3:f0:
69:44:73:8c:d2:f4:14:d1:c0:4c:e0:1e:70:2f:64:09:77:fe:
36:e4:20:3b:78:aa:bb:4b:11:5d:37:06:e8:ae:4b:7d:01:ec:
90:e5:ef:97:a7:74:5c:7b:c9:ac:51:fd:07:a2:cf:6f:e5:db:
6f:c5:62:9a:aa:bc:24:2c:fb:7c:12:ca:bc:e1:59:e8:d9:7c:
75:78:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:18 2024 by rpki-client on console-ams.rpki-client.org