Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cWz3AwryQSCnBhoqKeNBT6zbhiI.roa
File: cWz3AwryQSCnBhoqKeNBT6zbhiI.roa (raw, json)
Hash identifier: ow8h1LzY4J5LKDjFPGsmOsRHgniIqsIZESgBSMj2z0E=
Subject key identifier: 71:6C:F7:03:0A:F2:41:20:A7:06:1A:2A:29:E3:41:4F:AC:DB:86:22
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01914D8EF3078EDB899A6DEBD9B915939053
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cWz3AwryQSCnBhoqKeNBT6zbhiI.roa
Signing time: Tue 13 Aug 2024 21:04:59 +0000
ROA not before: Tue 13 Aug 2024 21:04:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
185.231.174.0/24 maxlen: 24
185.231.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:8e:f3:07:8e:db:89:9a:6d:eb:d9:b9:15:93:90:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 13 21:04:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716cf7030af24120a7061a2a29e3414facdb8622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:14:ea:df:58:dd:a4:ea:b9:ba:17:e8:c8:
93:73:5e:66:c9:87:1f:d0:d7:14:c4:d8:f6:cd:c3:
c7:80:62:2b:b4:34:0c:7d:42:cd:67:5e:53:b1:ae:
a5:51:15:99:36:2a:d3:3e:a8:8d:39:57:9c:0a:f7:
b7:f0:50:75:61:73:bf:f6:70:1b:d6:a6:d6:b5:93:
e1:6c:97:e7:6e:fc:e7:e0:db:a1:fd:2b:9f:f7:0e:
99:f8:af:da:52:0a:dd:4d:a8:31:90:c9:5c:7f:dd:
1f:b1:2c:ca:da:08:a7:ba:1e:46:bd:70:39:e3:0e:
8c:49:57:f7:27:2b:91:85:c7:fc:25:75:77:21:7b:
6d:33:60:8d:85:ae:f0:5f:44:5a:43:38:5a:22:99:
c0:05:9b:56:14:8c:26:ce:59:f5:0d:b4:f3:d7:12:
fb:a1:f4:22:7e:b6:2b:3e:5e:a0:3f:11:38:9e:3d:
b9:97:91:2c:80:05:ec:b8:56:18:a4:42:e3:36:ad:
8c:9d:c8:50:c4:b3:63:0b:7d:b2:05:20:14:af:fc:
ca:b3:83:5e:76:d6:12:82:76:42:01:8b:3d:49:1d:
87:6e:c3:b0:fc:78:b1:e3:81:40:79:69:ba:cc:23:
c9:2d:28:b8:96:94:77:73:41:8e:ae:a3:6f:41:25:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6C:F7:03:0A:F2:41:20:A7:06:1A:2A:29:E3:41:4F:AC:DB:86:22
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cWz3AwryQSCnBhoqKeNBT6zbhiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d7:3b:36:01:bb:9a:76:07:cd:e8:47:98:61:d3:a1:da:d9:
8c:87:1f:bc:5b:e1:a0:e6:02:d3:a6:e4:da:0a:13:71:67:ce:
d8:c2:91:a8:42:ed:50:77:77:c8:37:33:c6:78:de:b7:96:15:
1f:2a:91:93:dd:d7:51:32:d9:c4:f7:cc:63:9b:ed:d1:0f:32:
b7:1e:27:c2:7f:ba:17:51:58:3e:60:1b:b2:9b:28:c2:9b:04:
a3:8c:15:c6:43:32:da:69:b5:61:76:0e:31:96:0b:bc:1a:8a:
63:d6:0c:e0:27:d3:15:07:7f:64:34:23:02:3a:bb:3a:66:59:
52:e6:00:14:85:c8:fb:e5:f1:75:e4:07:e3:b6:90:24:20:f4:
08:96:46:b3:d8:92:51:c0:28:62:49:43:2a:81:eb:3c:f0:94:
03:cf:65:94:37:6c:5d:bd:5d:7c:e5:a4:28:1c:6c:f1:74:9d:
3a:9c:54:d7:63:d8:08:62:09:ec:32:60:45:21:5a:3a:05:5f:
b8:16:58:75:76:3b:29:64:86:c8:fe:a1:88:5e:57:30:77:8d:
14:96:e6:08:d8:29:47:8d:e7:c8:d7:12:f7:3b:a0:cc:16:b2:
bb:c7:c2:fb:15:3b:60:b7:75:32:0c:4a:38:2e:99:cd:dd:45:
06:f7:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:41:45 2024 by rpki-client on console-fra.rpki-client.org