Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/g192qNm6xfZaY6ifiFbRQ6StVhU.roa
File: g192qNm6xfZaY6ifiFbRQ6StVhU.roa (raw, json)
Hash identifier: OgNIwWR4CKg1EfxJ83w0qpGGvkx2ymA3Ba9SkqFZlPo=
Subject key identifier: 83:5F:76:A8:D9:BA:C5:F6:5A:63:A8:9F:88:56:D1:43:A4:AD:56:15
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 018CCA2AE878482CF05FA4C350D379BE474D
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/g192qNm6xfZaY6ifiFbRQ6StVhU.roa
Signing time: Tue 02 Jan 2024 12:34:18 +0000
ROA not before: Tue 02 Jan 2024 12:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51172
IP address blocks: 185.150.40.0/24 maxlen: 24
195.8.218.0/23 maxlen: 23
2a07:ab40::/48 maxlen: 48
2001:67c:218::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:e8:78:48:2c:f0:5f:a4:c3:50:d3:79:be:47:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Jan 2 12:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=835f76a8d9bac5f65a63a89f8856d143a4ad5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:60:3a:46:48:3d:fb:3f:47:0d:43:a8:c6:
3e:da:32:6f:01:be:2e:a3:d8:03:9e:2c:0b:ea:83:
06:d0:a2:66:f3:80:58:6f:f0:f1:a9:66:31:84:1e:
e5:06:79:6c:33:84:6a:f8:11:ad:06:68:01:8f:45:
f8:3a:0d:64:94:41:cc:e1:9e:68:4e:41:f7:2d:44:
33:42:a1:5c:ac:7b:f6:60:fc:6a:f2:ad:b6:37:ce:
59:33:64:ab:ac:0c:7b:88:98:fb:3a:4b:bb:aa:9a:
05:cd:33:a7:60:a6:55:2e:b7:a1:cc:97:8e:f9:10:
f5:5d:06:98:f8:b8:d8:f0:f0:48:65:b1:15:71:a6:
31:06:d4:7a:6d:6a:38:63:f8:8e:86:de:6c:d6:49:
4d:10:04:d6:9a:c6:ec:65:6c:24:06:70:1d:8c:b9:
bf:1d:16:99:fb:21:31:ac:49:34:d0:e2:e1:50:1d:
73:a2:de:6c:3c:a0:94:b6:0f:7f:dd:92:ee:b5:4b:
16:91:c3:3d:74:05:94:f0:b8:0c:0c:c2:52:ff:bf:
11:61:75:b6:a0:f8:09:33:72:30:a7:90:1e:77:da:
91:38:2a:3d:13:76:32:57:77:15:89:65:7c:b3:29:
62:45:7f:77:27:ef:20:ed:02:98:c8:19:ae:b8:18:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:76:A8:D9:BA:C5:F6:5A:63:A8:9F:88:56:D1:43:A4:AD:56:15
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/g192qNm6xfZaY6ifiFbRQ6StVhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.40.0/24
195.8.218.0/23
IPv6:
2001:67c:218::/48
2a07:ab40::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b6:a4:c4:f5:53:31:87:95:e6:f4:69:b0:40:1b:59:ab:43:
2c:4e:85:07:cf:5a:46:d8:0f:a2:ab:82:7c:cd:9d:43:91:2a:
24:83:f7:da:c4:22:35:3a:af:b1:c2:23:2b:ca:95:06:bd:fc:
c3:7d:67:b9:b2:a9:11:72:da:c5:e9:74:f5:ad:09:c4:ca:78:
3d:5d:ff:50:52:77:70:f2:28:0b:cd:dd:31:89:58:55:62:cb:
a2:c5:0d:8f:2c:dd:06:93:84:c2:ed:b8:e8:e5:92:26:38:c3:
83:1c:72:b2:08:16:19:0f:21:65:76:08:2d:53:27:36:b0:b8:
8b:ea:1e:a1:98:c9:d3:c3:2b:34:3b:29:f8:c4:96:99:04:8a:
25:58:eb:77:92:74:7e:81:ce:d1:9b:49:c9:2c:da:4c:8e:e8:
b4:58:64:0e:9e:6f:dd:f2:54:98:39:3e:7d:1e:41:15:d5:d7:
2f:46:e4:76:49:af:f8:85:2c:0d:e7:d7:a2:2f:20:f8:02:03:
57:9e:3e:7b:67:0c:09:c7:57:b7:fe:e8:db:19:df:8d:37:d6:
fa:3f:27:81:3d:e9:5f:78:b1:69:07:17:75:70:b3:41:39:fb:
71:09:25:0b:d6:f2:72:23:27:da:6b:99:d3:86:8d:0d:9f:a9:
53:73:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:50 2024 by rpki-client on console-ams.rpki-client.org