Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1jdP8IDlmdIAcEv1RBTOVscQJWg.roa
File: 1jdP8IDlmdIAcEv1RBTOVscQJWg.roa (raw, json)
Hash identifier: 4Eed6XwHmrSl95YkeBINcJpjNoRAPoqNOQ/bz1nAOJU=
Subject key identifier: D6:37:4F:F0:80:E5:99:D2:00:70:4B:F5:44:14:CE:56:C7:10:25:68
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0191BEAAB03E5B73E07AA92149F5BB76C8E0
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1jdP8IDlmdIAcEv1RBTOVscQJWg.roa
Signing time: Wed 04 Sep 2024 20:12:22 +0000
ROA not before: Wed 04 Sep 2024 20:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214284
IP address blocks: 185.235.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:aa:b0:3e:5b:73:e0:7a:a9:21:49:f5:bb:76:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Sep 4 20:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6374ff080e599d200704bf54414ce56c7102568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:27:8a:dc:63:63:ad:71:e4:f0:51:04:c4:
67:31:d0:73:e9:a3:1e:d9:16:e1:5e:f2:d2:61:a2:
62:d6:8b:01:20:39:63:8a:5a:35:6e:50:a7:ce:ad:
c4:55:e5:d2:48:85:40:00:92:5b:ba:26:1d:2d:37:
26:9f:c2:1d:10:83:6c:27:8e:7d:a1:1a:15:2c:b3:
e7:33:c6:ff:54:53:76:b5:26:fe:75:b5:d2:0c:d2:
1f:ef:dc:04:55:4d:c1:a8:9a:7f:b2:15:86:5e:20:
1a:2d:4f:4f:21:56:90:00:86:22:63:8b:0d:26:07:
e2:5b:b4:c0:db:82:70:c2:96:39:ba:0f:66:9e:2e:
97:86:13:58:70:f0:fa:70:22:8b:38:ab:02:af:40:
aa:0c:c8:e8:d6:47:cb:e3:47:91:f0:0e:e1:03:a7:
5f:0e:ac:30:99:f0:42:ac:22:42:0e:46:31:87:40:
f6:f5:42:b6:e8:39:67:0c:d3:10:8d:59:2e:d0:d0:
d1:b9:17:45:a6:35:d7:db:1a:23:07:e1:6c:67:e6:
be:97:a1:8a:ae:cd:6a:9c:63:0d:db:ed:e0:b9:57:
e0:96:08:63:09:03:9b:f4:87:a1:38:9b:27:a1:47:
03:12:f5:fa:a2:f6:b9:2e:9e:e4:04:fc:04:61:85:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:4F:F0:80:E5:99:D2:00:70:4B:F5:44:14:CE:56:C7:10:25:68
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1jdP8IDlmdIAcEv1RBTOVscQJWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.216.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fb:85:4b:6c:ea:33:25:5d:95:6a:02:9b:bf:1b:dc:ed:da:
b2:8f:86:ec:71:44:c7:7f:75:ae:5a:f1:f0:f6:83:fb:e6:5b:
3a:1f:04:52:74:ec:44:e4:25:48:52:71:e4:1f:6c:58:2b:58:
d1:0e:ab:0e:91:9c:62:75:b2:0e:8c:32:94:00:bf:b6:e2:6e:
8e:48:b6:92:06:91:91:f8:d6:31:43:ba:0b:23:4d:bb:16:77:
9d:95:58:cf:fc:ef:2a:5e:74:df:c6:9a:54:7b:40:5d:8f:c0:
52:8f:1a:6d:fa:83:9c:60:3a:f2:ae:6b:48:16:59:03:d4:5a:
c1:e5:5d:15:16:19:fd:1a:af:9a:a5:10:a6:cd:ec:07:93:1e:
21:db:7f:a7:4a:52:aa:27:80:f9:4f:88:8d:bd:6b:36:72:6a:
96:55:cd:79:09:52:c6:cb:94:8e:75:d1:0c:ef:3c:4e:df:bf:
8f:4e:01:3d:6f:7b:c3:80:25:ff:52:96:20:5a:4e:c9:10:55:
77:48:ac:26:9b:11:ed:08:9c:b8:5b:77:dd:65:af:90:9a:55:
59:8a:ac:b0:6e:e3:e6:9d:7d:88:f8:79:12:ce:14:fc:80:77:
cb:b3:84:6b:19:c9:6a:7e:31:6c:e4:a8:a7:20:5c:58:18:4a:
5a:5d:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:43:28 2024 by rpki-client on console-ams.rpki-client.org