Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/_gladvQH26u_aWOsArjyYeT4a2M.roa
File: _gladvQH26u_aWOsArjyYeT4a2M.roa (raw, json)
Hash identifier: /uqTSs/GvkKSj03NV15apsfZMe2zBNkMwNsyXQLNtoE=
Subject key identifier: FE:09:5A:76:F4:07:DB:AB:BF:69:63:AC:02:B8:F2:61:E4:F8:6B:63
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 018CC8DE9B0DA2568A725067A91FB95B9E75
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/_gladvQH26u_aWOsArjyYeT4a2M.roa
Signing time: Tue 02 Jan 2024 06:31:21 +0000
ROA not before: Tue 02 Jan 2024 06:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137488
IP address blocks: 185.119.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:9b:0d:a2:56:8a:72:50:67:a9:1f:b9:5b:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jan 2 06:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe095a76f407dbabbf6963ac02b8f261e4f86b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:f7:31:a9:23:c7:57:b5:da:29:e1:56:43:
a5:bc:0a:04:5f:39:64:f0:fe:3c:be:91:2c:83:ab:
e8:e4:51:4c:89:99:68:11:9b:8b:da:d2:46:0a:3e:
a5:84:e4:cd:38:5c:c8:0c:9f:0c:e9:f6:8d:28:b6:
9d:25:f0:f5:41:bc:55:5e:27:ba:2e:3a:fc:37:cf:
31:5d:9c:2a:63:f1:b8:e9:de:6b:77:bb:fe:1b:11:
72:d2:a3:ad:36:ad:84:3f:a0:8a:57:a2:0a:09:cc:
d5:04:72:9d:81:43:37:10:66:3a:7f:98:62:6a:ee:
c4:09:1a:52:36:49:9b:88:53:56:93:f9:fc:d7:5c:
25:ba:e6:e7:e6:02:a5:77:36:05:3b:1b:50:21:a3:
2d:10:be:51:38:fc:de:05:a7:a7:7e:63:77:7d:f2:
e8:99:96:fb:55:f6:bf:c2:19:2c:06:a1:10:45:c3:
1d:ee:b2:9c:0c:41:fa:1a:dd:3d:7e:39:02:94:94:
26:a8:a1:9a:ed:a2:b8:cf:7a:3d:e5:80:62:99:bc:
d1:95:f1:cf:07:4c:f6:20:73:ca:8c:90:a7:fb:55:
2a:86:71:8d:44:aa:ce:c5:5e:9c:c6:c2:e6:a8:a1:
bb:66:34:4e:d7:08:a7:13:95:38:09:fd:a5:67:90:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:5A:76:F4:07:DB:AB:BF:69:63:AC:02:B8:F2:61:E4:F8:6B:63
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/_gladvQH26u_aWOsArjyYeT4a2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d9:09:d9:8c:64:0b:91:d5:c3:9d:cc:29:82:f0:8d:26:9b:
c1:56:6c:23:00:09:60:ca:61:30:0a:3f:9f:bc:9d:34:44:18:
87:96:c2:ca:63:4c:42:cc:f0:70:af:6a:51:d6:90:9d:26:6c:
00:c1:9e:92:cb:ac:78:e7:9e:f8:03:20:e5:bd:d3:03:7b:6a:
fa:bc:2f:a7:b4:cf:0f:1f:c5:5c:04:d7:45:a0:29:36:08:db:
96:ab:96:8a:01:89:af:6f:b2:cf:ee:a2:43:ee:93:96:c9:f5:
a1:7c:3f:bb:ef:31:69:37:f8:bf:57:63:aa:6b:da:82:07:bf:
90:de:fb:c3:d3:f4:86:4a:f0:46:10:e2:f5:b8:3b:98:e3:81:
36:6a:17:f5:09:75:44:23:95:b6:8a:05:6a:f9:f4:ff:9e:59:
c6:45:fe:61:f6:21:08:dc:54:c8:3b:2f:b3:1c:a9:76:80:0d:
cb:54:7a:d3:9b:6d:48:74:43:68:f9:8e:1f:0d:cb:8c:23:0c:
81:16:c9:1b:e1:1f:5b:dc:e3:30:63:1c:5d:4b:41:69:b2:0d:
a6:7b:f6:cb:9b:3f:a0:59:d6:92:a0:af:43:73:62:de:32:33:
d6:f8:c1:a1:49:46:9b:f4:f8:c4:5b:21:36:f7:ad:62:ad:26:
a2:70:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:47 2024 by rpki-client on console-ams.rpki-client.org