Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/oqIOPeEL72RgFbkOgqCLKUIE9no.roa
File: oqIOPeEL72RgFbkOgqCLKUIE9no.roa (raw, json)
Hash identifier: WNw7Z0WwWhkNKxPwMrbf/UnhhApuzJ+bvtPKuLbOu7E=
Subject key identifier: A2:A2:0E:3D:E1:0B:EF:64:60:15:B9:0E:82:A0:8B:29:42:04:F6:7A
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 018CC9BBB78417B5EF6CECC5976B0EAD1069
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/oqIOPeEL72RgFbkOgqCLKUIE9no.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.25.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b7:84:17:b5:ef:6c:ec:c5:97:6b:0e:ad:10:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2a20e3de10bef646015b90e82a08b294204f67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:dc:35:2e:d4:73:dd:32:b5:5b:84:cf:a8:
bd:89:fa:89:30:be:c6:36:02:fd:33:d1:da:1f:56:
52:a6:ef:5a:19:ca:90:d3:84:7b:85:80:19:4e:5e:
85:3d:18:26:5a:9b:40:05:06:d6:ea:98:eb:d9:7c:
1d:35:b0:9e:85:09:4d:de:e1:68:b9:0c:f4:79:30:
68:69:d8:7b:0d:6c:ab:30:82:a5:29:ef:9a:4d:e9:
1d:80:13:bd:6b:09:77:4b:c6:47:00:bc:da:b0:d0:
26:1e:cb:5e:fb:b8:c5:dd:6c:47:36:27:46:a7:6e:
47:8c:d4:ca:a4:f8:fc:de:4a:8a:f7:cf:a6:87:a2:
0b:70:3e:26:3e:40:c3:7a:30:61:84:63:1d:c6:a1:
d5:b9:78:1b:c0:db:16:bd:b9:fe:b6:35:95:99:d8:
8d:ac:d3:57:b7:bc:b5:4d:81:bb:15:1c:50:53:cc:
d3:42:ec:7c:b6:7c:71:2a:f2:7b:b2:55:0c:b7:ff:
3f:0a:db:16:b0:28:fe:9d:f5:08:d8:1f:aa:c0:7f:
f6:65:42:1d:81:d3:1e:1a:c8:7d:00:06:4f:a3:9e:
50:88:18:1e:b8:70:81:23:55:74:d4:ee:83:92:17:
01:a1:8b:a0:aa:ab:04:96:4f:6c:7c:8a:26:60:70:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A2:0E:3D:E1:0B:EF:64:60:15:B9:0E:82:A0:8B:29:42:04:F6:7A
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/oqIOPeEL72RgFbkOgqCLKUIE9no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.114.0/24
Signature Algorithm: sha256WithRSAEncryption
24:70:d9:e4:dc:fa:ae:c0:8b:ec:56:ca:7a:99:ce:bb:31:da:
da:8f:03:dd:f1:bb:1b:12:9a:c7:87:c5:d5:b4:50:2b:c9:88:
bf:ff:9c:81:3e:e0:04:73:94:f3:23:a9:cb:75:8a:1d:a4:0d:
fe:9e:c9:0e:a4:e5:ff:b5:b0:bb:63:19:d5:f7:5a:ea:b6:9d:
aa:99:bd:ab:c1:6d:62:a6:24:f0:75:65:8e:59:f8:ab:4d:cc:
89:3c:b9:07:10:8f:04:75:35:36:5e:91:b6:c8:32:00:d9:f9:
ab:89:72:96:f5:db:b4:1b:ac:1a:f9:9b:88:00:22:f4:da:c5:
8c:1f:2b:cf:7d:41:d4:66:49:14:78:c4:64:58:e8:93:77:59:
19:2e:6c:88:d5:be:c4:ac:eb:be:ea:90:1d:1f:44:9c:d7:27:
7a:7c:13:7a:19:64:ef:be:4f:87:b6:cf:13:fa:d4:01:d7:9c:
4d:e1:f0:11:e1:58:56:d0:66:84:96:1f:a8:ec:dc:99:29:75:
21:a3:86:0a:43:15:b4:32:83:2c:f8:fe:6a:e4:e3:b5:c5:fc:
7d:8d:fb:a1:67:de:a8:fb:d1:49:40:b6:83:ba:4a:f0:35:0b:
a7:ad:84:1d:0f:da:e8:c5:82:cc:25:fb:11:4b:12:36:2e:72:
65:95:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:51 2024 by rpki-client on console-ams.rpki-client.org