Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-m-PD7dtRoLYSXd5qXE8qScViU.roa
File: I-m-PD7dtRoLYSXd5qXE8qScViU.roa (raw, json)
Hash identifier: XJVfetPODZ3szIg8/i0ZCiJxZblXZGEgqrbjxzQ1r8Q=
Subject key identifier: 23:E9:BE:3C:3E:DD:B5:1A:0B:61:25:DD:E6:A5:C4:F2:A4:9C:56:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191C861435637822E4DB93130E5C68F8693
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-m-PD7dtRoLYSXd5qXE8qScViU.roa
Signing time: Fri 06 Sep 2024 17:28:22 +0000
ROA not before: Fri 06 Sep 2024 17:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.141.217.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:61:43:56:37:82:2e:4d:b9:31:30:e5:c6:8f:86:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 6 17:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23e9be3c3eddb51a0b6125dde6a5c4f2a49c5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:7b:70:02:1b:52:28:cd:ba:bb:35:34:59:
20:1d:7f:97:99:0c:56:00:f6:16:4a:79:2e:81:63:
de:85:22:79:63:ad:47:ae:07:f4:dc:a9:0f:ba:0d:
22:09:0a:9b:c7:72:dd:ad:9c:b8:f9:3d:36:61:7b:
fa:55:ec:2e:ac:47:4e:55:d3:2a:60:82:f8:ac:7a:
c4:de:30:4d:d0:c7:7f:3a:85:9d:fe:78:c6:9e:30:
52:14:1a:c8:f6:f6:87:60:7b:8b:10:13:3f:d2:29:
50:bc:bc:6b:78:48:98:5a:df:4f:e2:b0:ef:e3:1b:
a1:fd:57:c7:5d:05:1b:3c:4d:d5:b0:cf:7e:db:09:
28:cb:c2:4d:f9:a5:04:99:09:00:f1:5e:9f:48:1a:
64:8e:2a:6d:3a:1d:25:1b:c9:8d:9e:3a:ba:4b:9a:
2c:85:79:bb:bf:4b:3b:a3:06:9a:49:05:c7:d3:9b:
39:91:6f:7d:67:09:06:ac:12:55:42:41:5d:fe:7c:
4b:a9:0f:5e:cb:81:75:44:08:0e:a1:7a:66:db:0c:
05:3a:86:b5:04:b9:94:b7:89:17:00:14:03:39:a6:
5c:25:1a:75:24:26:7e:0a:df:e1:40:38:2e:f5:81:
21:81:8e:e6:a0:e4:16:31:78:29:5e:12:84:9a:94:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:BE:3C:3E:DD:B5:1A:0B:61:25:DD:E6:A5:C4:F2:A4:9C:56:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/I-m-PD7dtRoLYSXd5qXE8qScViU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.217.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:45:6e:94:38:ff:a7:5e:f1:1c:fa:72:59:0f:72:2a:64:
84:17:be:61:0c:f3:1a:dc:78:cf:7e:6c:32:5f:c3:b1:f2:24:
a2:33:e7:d2:79:af:71:e0:57:1c:8e:34:3f:c4:0a:f1:af:ca:
89:40:5e:0e:05:3f:45:99:85:76:78:f8:e2:c4:1c:ec:41:e0:
59:28:67:0f:da:44:22:7b:12:41:60:bc:c4:91:c4:f7:f2:0e:
17:0c:44:49:42:19:41:0e:f0:57:dd:4e:bb:51:99:45:1e:d3:
80:a2:90:db:0c:f6:e9:c1:f4:7d:18:25:bb:e6:d4:1e:c0:97:
ef:5d:e7:5b:2a:eb:d1:15:d4:c1:da:e4:c4:61:cc:bc:eb:25:
be:0c:9f:14:45:71:95:94:ce:8e:99:3c:0f:44:7f:eb:fa:2a:
f1:1c:99:e5:c4:4e:3a:b5:35:0e:e8:1d:ab:1a:91:71:25:4c:
7b:82:62:5d:bf:81:f3:00:29:8e:6c:3a:26:30:bc:da:c1:15:
b6:a9:50:e6:b4:6b:7c:ed:6b:b8:06:23:5a:bd:42:12:29:a3:
a5:f5:51:a1:74:c2:51:bd:c9:9c:2c:03:9d:7c:dc:d3:27:c2:
48:77:71:4c:f2:b7:e1:81:20:8b:2c:e6:0a:ca:22:c3:29:ff:
94:57:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:15 2024 by rpki-client on console-ams.rpki-client.org