Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8oyStj1QOJcNZLSGB0Yyv0nRwv4.roa
File: 8oyStj1QOJcNZLSGB0Yyv0nRwv4.roa (raw, json)
Hash identifier: E4iyjzGJCUf8RU1KIcX1yYRJGwB88HncUplNGs2cDfk=
Subject key identifier: F2:8C:92:B6:3D:50:38:97:0D:64:B4:86:07:46:32:BF:49:D1:C2:FE
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 018CC794B446DF3CBE7DBE6620431F53E821
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8oyStj1QOJcNZLSGB0Yyv0nRwv4.roa
Signing time: Tue 02 Jan 2024 00:31:00 +0000
ROA not before: Tue 02 Jan 2024 00:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49097
IP address blocks: 185.170.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b4:46:df:3c:be:7d:be:66:20:43:1f:53:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 2 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f28c92b63d5038970d64b486074632bf49d1c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:21:3a:1a:23:84:30:32:81:05:dd:32:e6:
50:12:4b:01:71:dc:f1:b8:c4:05:9f:ab:b6:4a:b8:
6b:7d:49:5c:ee:17:21:dd:67:22:f5:80:5f:2e:34:
64:8f:4b:49:7a:0e:89:f2:cb:c1:ab:c2:4b:24:aa:
72:c5:0b:f3:78:75:c0:2a:86:ad:16:b4:a2:8d:74:
59:1b:3d:e1:e2:54:97:82:ae:73:3d:21:c8:83:60:
e8:28:87:ef:ec:5d:6b:3d:1a:86:17:4c:c3:4a:6e:
e2:3b:71:ef:cb:9a:88:76:11:32:32:72:6e:ce:65:
14:d3:a2:5a:14:0f:6c:3b:8e:9b:a8:03:e9:be:87:
cb:9e:a1:81:85:5f:4f:44:9a:a8:47:1c:90:8c:35:
d9:f7:79:75:07:66:40:f3:3e:84:38:22:91:a2:95:
33:b0:56:61:68:ed:4d:30:30:c9:76:3c:e2:de:65:
59:70:17:90:52:b6:2e:7b:3d:04:61:bb:05:7f:ec:
11:03:b2:a5:97:85:0e:65:99:c9:2b:e7:fd:6b:fb:
d8:71:35:b8:1b:dc:29:fc:57:5f:24:98:d2:5d:be:
64:2f:6a:73:40:04:e8:3a:4c:ee:8c:2b:13:55:ef:
e9:d6:01:5d:fd:4f:f7:50:0c:69:d8:08:f6:4b:aa:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:92:B6:3D:50:38:97:0D:64:B4:86:07:46:32:BF:49:D1:C2:FE
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8oyStj1QOJcNZLSGB0Yyv0nRwv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7e:16:11:3f:84:c4:73:9f:44:db:a0:1a:1e:69:e9:d9:f9:
70:59:3b:fa:d1:52:98:2a:a3:9f:9b:ee:7a:d8:06:c7:d9:7a:
69:67:fa:b8:93:2e:6f:39:8c:ed:61:d6:5a:e3:b0:24:2c:05:
47:c3:3e:2e:3a:5e:58:cb:ba:e6:2d:1f:a5:35:cb:c1:d3:ae:
42:3c:72:0c:01:ff:75:44:c6:b9:a6:42:66:a3:71:3d:99:67:
26:da:80:09:d3:07:c8:92:d6:0c:99:46:fe:f9:93:9b:45:e3:
2a:4d:ed:33:dc:70:ae:44:cf:8b:74:b5:61:eb:18:fd:6b:d0:
88:fe:ac:0d:30:5b:41:b7:13:86:09:40:1a:51:b3:bd:fc:cc:
ec:73:0f:70:c9:ff:4b:a1:1a:1c:be:85:b0:eb:e3:25:81:de:
5d:6e:5b:9f:93:28:f6:79:d9:74:16:13:66:2b:77:59:cb:5f:
29:b8:3e:b6:69:1b:d7:fe:b9:e7:72:9d:72:3d:a5:01:0f:4e:
e0:25:a8:b3:da:e3:26:3f:a3:bf:e6:b2:6e:2a:03:df:f3:4e:
cd:0c:da:1c:74:c4:f8:b3:87:60:ef:55:d7:ae:07:4b:a3:94:
8b:ce:45:10:40:03:b7:26:da:d8:11:33:c8:df:38:64:5e:2d:
c0:25:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:59 2024 by rpki-client on console-ams.rpki-client.org