Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa
File: l4uK-yayieCiI4ipj2Kc1UVAlcw.roa (raw, json)
Hash identifier: 50Q0NYy2xGxDWn8zO+bdIhyp2k9MHMlOstEwEsIF/jg=
Subject key identifier: 97:8B:8A:FB:26:B2:89:E0:A2:23:88:A9:8F:62:9C:D5:45:40:95:CC
Certificate issuer: /CN=f73a6daf6522f29555519afd142d4a035c7492b8
Certificate serial: 018CC349552D02BDF36497A5BA5C7F6B05BF
Authority key identifier: F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56883
IP address blocks: 185.211.43.0/24 maxlen: 24
2a12:af80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:55:2d:02:bd:f3:64:97:a5:ba:5c:7f:6b:05:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73a6daf6522f29555519afd142d4a035c7492b8
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=978b8afb26b289e0a22388a98f629cd5454095cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:f3:ed:5c:5d:c2:24:96:e3:72:74:c3:7a:
31:dc:56:b4:2f:d3:46:a4:48:2a:a3:ff:63:b8:b3:
6d:5d:39:6c:01:4e:e3:02:09:73:4c:e8:77:c1:fa:
99:1f:31:bb:0d:bd:aa:0e:e2:e5:12:71:85:d6:b0:
11:43:9c:99:e4:35:2a:da:fe:fb:15:f9:54:58:25:
02:f5:dc:cc:14:ac:9c:00:4a:2b:ad:d0:42:b2:42:
d4:79:84:77:ed:b9:1e:d1:7c:a2:14:aa:6f:a3:b5:
5d:46:0a:3e:ee:72:b9:08:60:c0:e6:79:c6:0d:e9:
5c:8d:a1:c8:7f:b4:a8:71:0c:ca:4b:e6:99:c3:df:
5c:de:6f:2d:4e:15:36:33:ff:e6:ad:73:f5:96:50:
f4:f4:70:d9:2c:52:25:4c:31:00:59:8f:07:25:1e:
00:54:13:25:6e:d6:f0:64:d8:78:8a:38:c4:8e:46:
f6:06:a8:ae:d2:45:3f:d6:ce:b6:8a:78:b0:07:b6:
e5:30:9d:1e:06:b6:19:31:cf:d5:ea:bd:1f:d2:0b:
dd:31:75:af:9e:a8:61:ce:9b:1a:c2:26:70:e9:18:
7a:93:95:83:58:51:9d:02:74:73:ed:20:d2:69:e0:
ed:b0:b4:99:68:87:23:7c:d2:f5:e3:a4:5c:f5:05:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:8A:FB:26:B2:89:E0:A2:23:88:A9:8F:62:9C:D5:45:40:95:CC
X509v3 Authority Key Identifier:
keyid:F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.43.0/24
IPv6:
2a12:af80::/32
Signature Algorithm: sha256WithRSAEncryption
4d:6c:06:3e:0c:bf:58:50:1a:fc:81:0d:ec:86:1d:b2:05:53:
32:57:76:64:de:9e:c0:ea:d1:d6:7a:ae:c2:91:64:ba:4a:35:
b5:40:84:3e:da:ab:df:16:75:08:51:60:31:a3:37:0d:88:f1:
2c:e1:7c:1e:cd:af:40:dd:67:78:22:27:29:75:01:81:f5:32:
d1:df:33:0b:62:10:e0:19:0f:8f:cd:05:6f:48:fa:47:27:1f:
05:ae:05:fc:e2:f1:93:01:0d:78:7b:91:fa:d6:20:f8:2a:ff:
2a:fd:ab:9a:13:cc:ab:86:d4:1a:69:a1:7d:28:bd:12:d7:51:
8b:d0:a6:f3:87:ec:34:04:c6:51:11:3c:dc:2e:f6:21:07:5a:
8f:1b:6e:80:5c:22:ab:38:74:c1:30:76:d7:38:0b:61:e2:4d:
28:a9:81:63:78:7f:2e:55:00:9e:48:57:61:ec:12:bc:de:32:
a8:6f:27:14:a0:11:3f:9f:96:60:dc:26:f4:f1:c7:7e:71:b5:
65:b9:a2:ec:25:e5:3c:ee:6e:82:d9:e3:e1:88:22:8e:e3:cd:
6c:af:1f:8e:ce:59:88:92:ce:dc:dd:02:9f:07:2e:c8:3e:70:
b1:b7:83:4a:4c:fa:8b:ef:b8:3f:e2:51:d0:f3:45:6b:13:81:
b7:63:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 20:39:00 2024 by rpki-client on console-fra.rpki-client.org