Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/Y9UI8bdO6oxQNCJ58vrOvaxuo68.roa
File: Y9UI8bdO6oxQNCJ58vrOvaxuo68.roa (raw, json)
Hash identifier: yKFw8Xrkiaidr0yFpeMfaAFrSZDnz6bJdAsCo756Wdo=
Subject key identifier: 63:D5:08:F1:B7:4E:EA:8C:50:34:22:79:F2:FA:CE:BD:AC:6E:A3:AF
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0192662BA2EF856798FD04F00AA974D538C7
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/Y9UI8bdO6oxQNCJ58vrOvaxuo68.roa
Signing time: Mon 07 Oct 2024 08:49:48 +0000
ROA not before: Mon 07 Oct 2024 08:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:2b:a2:ef:85:67:98:fd:04:f0:0a:a9:74:d5:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Oct 7 08:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63d508f1b74eea8c50342279f2facebdac6ea3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:d3:5a:7e:99:04:93:06:6c:5b:a7:3f:f3:
c0:a6:3b:f6:5e:06:66:ae:29:af:16:2a:6b:3c:c3:
ce:35:20:d9:5a:cf:7e:78:e2:0f:a9:24:21:20:96:
43:e0:09:3c:5d:31:1e:69:0a:e7:23:de:65:be:ed:
9d:0f:4b:93:09:47:be:21:cc:bc:f8:4a:7d:03:46:
2b:5a:91:39:65:27:56:83:11:b8:d7:46:5c:dd:06:
c7:15:8e:b3:39:28:2f:8b:74:e6:db:01:2a:b1:b9:
05:5a:54:cd:58:22:47:d2:71:1b:69:fa:17:57:86:
08:14:d3:2c:7a:98:b6:d3:0b:5f:38:ae:1c:2a:b4:
cd:06:81:c8:9e:25:e0:27:76:3c:29:4e:06:4b:64:
22:c5:b4:44:21:02:33:40:1c:bf:13:c7:61:49:11:
0b:cd:ab:de:ae:01:05:4a:49:72:1c:45:12:29:03:
be:5f:49:23:06:1d:d8:fe:6e:73:34:7f:27:66:bf:
a4:71:c6:44:82:60:2d:54:37:b4:c3:fb:77:0b:ec:
ba:77:a1:97:da:d9:51:a7:de:44:fc:ed:19:36:e3:
2a:ef:f0:3a:0a:14:0b:06:e0:50:0a:ba:ad:4d:28:
04:0e:b7:35:03:c0:9f:0f:d9:07:71:af:bf:9a:15:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:08:F1:B7:4E:EA:8C:50:34:22:79:F2:FA:CE:BD:AC:6E:A3:AF
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/Y9UI8bdO6oxQNCJ58vrOvaxuo68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.50.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a7:69:02:c4:f6:39:80:72:a2:15:28:50:5e:fb:53:18:ff:
bc:29:68:bd:3d:6f:b7:6c:68:6b:0c:a9:fc:e3:5f:6b:af:c1:
18:37:20:02:f8:37:45:c6:d1:91:99:54:dc:34:1c:23:ed:6e:
fb:b9:ef:08:fe:d7:07:03:fe:9b:fe:c7:3f:33:2a:5a:6f:32:
31:54:2b:d1:78:ec:eb:08:91:98:05:e5:c5:32:de:19:af:74:
8f:2d:18:cf:45:6c:b7:8d:4e:db:de:b9:b0:f2:73:09:4c:ec:
c2:3a:99:7c:9e:af:c2:69:f2:77:86:20:5d:c3:20:30:b3:c6:
91:e4:cf:46:ec:de:8a:eb:4f:8f:ca:1c:2f:cb:2e:05:d1:3c:
1b:ee:88:90:fe:25:88:86:7b:7a:92:bc:1d:48:25:27:83:ea:
7c:a3:c8:64:a0:92:73:6e:05:13:f1:ec:10:32:86:2e:39:21:
d7:16:ef:97:89:ce:71:39:32:91:e1:31:b0:cd:2f:07:22:91:
41:fa:57:ab:21:69:ad:9c:c7:f3:a7:8a:88:d6:6f:f5:2a:2b:
4f:33:a9:52:df:58:99:f6:6c:a2:6a:b7:5e:e7:83:4f:bd:fa:
20:5c:81:a1:3e:09:d5:98:ae:f8:83:a8:27:9d:ae:3d:41:98:
72:57:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:16 2024 by rpki-client on console-ams.rpki-client.org