Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/ao-QzmQYU-1VbSDTn0O-Ggizhmw.roa
File: ao-QzmQYU-1VbSDTn0O-Ggizhmw.roa (raw, json)
Hash identifier: jGXBaC9Rl7EN8LpOWQYhAtWzHocQGT5Ve6occ3Dz67s=
Subject key identifier: 6A:8F:90:CE:64:18:53:ED:55:6D:20:D3:9F:43:BE:1A:08:B3:86:6C
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 018CC5DCA6276E783F7BA901A90E3EF71AB2
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/ao-QzmQYU-1VbSDTn0O-Ggizhmw.roa
Signing time: Mon 01 Jan 2024 16:30:21 +0000
ROA not before: Mon 01 Jan 2024 16:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 185.211.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a6:27:6e:78:3f:7b:a9:01:a9:0e:3e:f7:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Jan 1 16:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8f90ce641853ed556d20d39f43be1a08b3866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:e3:10:a9:19:e1:bf:ae:15:32:fe:0e:dc:
f3:fd:b3:e6:3b:e2:4c:66:63:f3:9e:b4:4e:0b:1a:
63:12:37:86:56:e0:34:32:d3:01:f0:0c:1d:41:ba:
82:35:14:4c:28:f9:25:24:10:a8:9f:63:f3:51:e8:
c4:16:b8:27:16:73:2c:84:82:0e:e2:3b:ed:98:3d:
5d:42:1a:61:47:68:c1:aa:ea:ce:8d:f9:c4:5c:a2:
2a:73:ff:90:43:b6:37:d5:e1:ab:92:22:a7:87:9f:
05:9f:b8:61:45:75:f7:13:65:61:71:65:8f:05:6f:
b3:48:aa:fd:8c:ed:7d:d9:1e:eb:c4:13:9d:96:81:
02:e6:51:5a:d2:f1:d7:96:21:20:f0:cc:b4:24:79:
ad:f4:5e:e7:da:18:5b:72:4a:d3:79:9d:cc:39:e3:
7f:ac:57:59:00:73:95:99:e5:c1:7f:3f:80:fe:54:
84:87:7e:1a:17:3e:fc:e5:bf:9d:35:a7:a6:87:60:
34:44:8e:7e:c3:82:a6:ec:8d:4e:4f:9b:e0:b6:54:
87:3f:c1:15:6c:9b:df:80:1a:5d:30:a6:6c:bb:64:
61:3f:48:eb:67:89:7a:bb:89:b8:7b:9f:30:90:59:
6b:cc:9c:6d:58:ad:c7:86:ea:15:68:06:a6:4c:c0:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:90:CE:64:18:53:ED:55:6D:20:D3:9F:43:BE:1A:08:B3:86:6C
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/ao-QzmQYU-1VbSDTn0O-Ggizhmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:32:b8:97:e8:67:8d:41:61:d8:8c:24:84:c8:e2:8a:2a:d5:
81:04:39:36:39:3c:92:1a:e3:df:00:1c:ed:f5:a5:a9:e9:9d:
4c:a9:f3:a1:43:c5:8f:25:7a:49:df:20:f7:fa:9c:d0:dd:76:
b4:c2:8a:f1:36:9c:a9:b5:50:d0:25:92:8c:25:a0:62:41:be:
ad:a7:6c:21:0e:2e:f9:88:c4:48:88:11:bf:cc:f8:10:4a:a8:
d6:44:f4:e7:72:78:1f:bf:99:07:a4:01:c1:55:63:b9:bd:47:
93:b0:60:e3:19:55:f9:5e:9b:d1:ec:89:65:4c:d2:c7:e4:0a:
1f:28:f5:93:15:2e:07:e3:d3:04:56:a9:98:47:c7:23:76:b6:
4b:d0:a7:b9:de:7a:d0:19:b0:f2:82:cb:37:03:cc:9c:10:49:
d5:9c:d0:4b:e4:d8:0a:ff:8f:18:4a:60:fb:a1:67:b9:98:61:
fe:5e:3f:0f:6d:98:38:10:c9:c6:ac:7d:91:57:1d:7f:3c:d3:
6a:7a:bb:0e:3d:38:b5:e5:67:e4:8f:30:b9:af:83:0f:22:85:
45:7c:b0:6c:2b:c5:5e:7c:63:85:99:0c:b5:cc:12:b1:50:12:
e4:c4:a8:86:72:9f:80:e5:b0:56:37:c8:ca:93:5c:54:66:47:
73:8b:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:04:18 2024 by rpki-client on console-ams.rpki-client.org