Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/RH2NOS_PHaYBJxr2g-JqKydffZk.roa
File: RH2NOS_PHaYBJxr2g-JqKydffZk.roa (raw, json)
Hash identifier: JABffR3bh46QsCuiPBuSzF91asLi2zw3dkHbJq2GRSI=
Subject key identifier: 44:7D:8D:39:2F:CF:1D:A6:01:27:1A:F6:83:E2:6A:2B:27:5F:7D:99
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0192B50F054F02162D6B464291ECB03D0BB1
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/RH2NOS_PHaYBJxr2g-JqKydffZk.roa
Signing time: Tue 22 Oct 2024 16:28:33 +0000
ROA not before: Tue 22 Oct 2024 16:28:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 185.161.122.0/24 maxlen: 24
185.171.88.0/24 maxlen: 24
185.171.91.0/24 maxlen: 24
2a0c:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:0f:05:4f:02:16:2d:6b:46:42:91:ec:b0:3d:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Oct 22 16:28:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=447d8d392fcf1da601271af683e26a2b275f7d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:da:81:0d:93:43:af:e4:d1:ba:02:62:08:
37:57:ac:76:26:bf:02:1e:25:dc:8a:cd:0f:18:ad:
f9:f9:60:bf:5a:75:1c:2e:6a:0e:2d:f4:6a:83:61:
e5:c4:af:21:d2:1a:a5:21:8e:22:1b:14:90:82:3e:
ad:d8:37:57:be:57:49:47:60:15:47:58:f9:e9:2f:
60:5d:3f:e7:4a:58:ce:16:90:2e:84:2e:f0:37:4f:
7d:ff:3c:98:6e:b9:0b:a8:3b:80:15:1c:46:11:2e:
7d:ce:e3:e4:aa:11:00:af:2d:1a:87:78:f5:ec:3f:
ed:0c:1c:90:92:a3:8d:fb:25:3c:ba:88:56:e1:46:
5b:c1:54:ea:14:e8:9e:55:9e:c0:77:78:98:f7:bb:
e7:55:8a:31:09:83:cf:b9:72:90:1d:f9:05:5b:78:
84:2a:3d:90:7d:5b:dc:8f:5b:8b:78:66:5f:4a:91:
10:5b:8b:05:b1:35:f6:cd:53:7d:ef:d4:97:39:04:
d4:58:f8:72:df:6d:99:99:b7:ab:93:2d:d1:b1:77:
7e:40:8c:b4:27:cd:e2:57:ac:de:bb:10:8c:97:89:
c4:bc:f7:b3:f9:7f:68:ee:48:1d:48:c1:31:4d:1e:
95:ed:23:38:cb:a6:24:f4:fe:37:32:04:a6:bd:60:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:8D:39:2F:CF:1D:A6:01:27:1A:F6:83:E2:6A:2B:27:5F:7D:99
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/RH2NOS_PHaYBJxr2g-JqKydffZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
185.171.88.0/24
185.171.91.0/24
IPv6:
2a0c:f500::/29
Signature Algorithm: sha256WithRSAEncryption
98:d6:03:04:c6:dc:62:8a:6b:71:9d:8b:b4:f4:08:9f:6f:7d:
19:14:e3:cd:76:4d:ba:83:5d:1f:cf:3e:85:38:ea:74:c3:21:
52:57:85:01:fd:22:bf:b3:99:81:b2:4d:f3:52:16:c4:49:99:
96:a9:65:37:c9:eb:55:2d:a8:7e:bf:25:cd:30:a6:6f:b7:1c:
93:52:e3:43:0d:87:16:2d:0f:ae:b1:a4:8c:0c:0b:09:57:66:
a4:fb:a1:53:8a:4f:b3:8f:46:e6:5b:e9:7c:76:9f:3a:c4:26:
92:31:db:a7:47:1b:3d:51:48:11:4f:98:2b:8c:e6:de:7d:92:
d5:fc:dd:12:a6:f1:12:4d:2b:e6:1e:fd:3d:dc:8f:07:20:d6:
a1:f1:9b:50:4a:64:44:e8:d7:1d:d7:37:4c:76:62:98:c3:8c:
a3:26:f5:65:3a:a5:68:8a:f5:1a:02:fb:45:95:d7:08:fd:81:
c7:46:8e:af:93:c1:0a:14:0d:60:44:69:0f:87:91:45:d4:98:
9b:7c:2b:35:21:5e:7f:42:0f:45:4c:79:f5:fa:8b:bc:1e:f9:
67:5d:9b:da:f5:e0:ad:69:1e:b7:fb:0c:e6:f7:ed:b7:d8:5a:
fb:c2:7a:cc:1a:74:1e:a2:b9:1f:98:b9:22:ef:b2:7d:cf:dd:
c1:63:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:59 2024 by rpki-client on console-ams.rpki-client.org