Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/02vMc21dPaykc1WVuH9FQYWFUUg.roa
File: 02vMc21dPaykc1WVuH9FQYWFUUg.roa (raw, json)
Hash identifier: rnh24wDGF5C/+sBUB6MWDQ4k2JvxDecmw+5DMz6O+zU=
Subject key identifier: D3:6B:CC:73:6D:5D:3D:AC:A4:73:55:95:B8:7F:45:41:85:85:51:48
Certificate issuer: /CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
Certificate serial: 018CCFA7F4EA6B590247972EB55E6169F183
Authority key identifier: D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/02vMc21dPaykc1WVuH9FQYWFUUg.roa
Signing time: Wed 03 Jan 2024 14:09:00 +0000
ROA not before: Wed 03 Jan 2024 14:09:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56485
IP address blocks: 185.168.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:a7:f4:ea:6b:59:02:47:97:2e:b5:5e:61:69:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
Validity
Not Before: Jan 3 14:09:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d36bcc736d5d3daca4735595b87f454185855148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:f5:ea:2b:6f:c5:6e:37:90:32:d3:5c:13:
5a:7d:b2:ca:6a:ee:04:e2:0d:79:4b:c9:88:9a:17:
68:df:66:67:7d:ff:1a:c3:53:50:60:24:dd:e6:08:
f6:56:73:cb:ec:df:05:a5:d3:25:9a:9d:8b:83:92:
3a:0b:64:8f:ce:13:6b:7c:8f:ce:9f:9d:a1:6b:04:
b4:c1:e5:dd:19:9c:22:51:cf:dc:f6:13:1a:f9:ac:
f8:b4:63:61:47:91:8d:e7:44:6a:a4:c0:93:83:e8:
78:b3:6e:3e:46:fc:90:e0:fc:c4:e5:86:7d:58:43:
83:10:6f:c4:25:52:5f:55:82:d4:48:9f:72:fd:16:
0d:4e:fc:94:cc:fa:08:24:f5:d6:de:61:51:23:b9:
15:c2:df:2f:22:e9:19:85:c6:ad:f5:ad:2d:e7:8b:
5e:3d:2b:c9:f7:a1:ae:9b:aa:50:cc:0a:6f:7c:8c:
36:f3:66:b5:bf:96:7d:e6:71:03:e1:36:e8:5b:d5:
a6:0d:67:11:d9:aa:fb:83:6a:72:7e:11:88:5f:90:
6a:95:5d:2e:b4:d6:a6:18:9c:18:ae:44:91:3e:49:
0e:97:40:c6:9d:0d:3f:2d:87:ef:f9:c0:d5:a3:1a:
7c:cb:9d:be:c5:c7:c5:96:73:20:b8:25:ec:39:8b:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:CC:73:6D:5D:3D:AC:A4:73:55:95:B8:7F:45:41:85:85:51:48
X509v3 Authority Key Identifier:
keyid:D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/02vMc21dPaykc1WVuH9FQYWFUUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3b:ec:18:aa:5c:01:88:67:b1:45:1e:f7:30:29:7a:a8:7f:
f3:bc:84:b0:83:3d:55:5b:3d:b0:21:ef:ea:f3:97:68:33:9b:
ff:5f:9f:69:ff:d4:e0:fe:4e:d5:cc:ae:4e:cc:e8:12:07:3d:
f1:7e:15:0f:5a:2c:80:93:36:05:ca:a6:3a:14:86:85:1e:1a:
88:77:24:9d:41:77:4b:db:af:46:84:f3:d2:4a:9f:8f:71:f0:
71:2f:71:3d:b2:4f:b3:40:ba:a1:a7:86:63:99:2f:c0:c6:8c:
92:ab:ed:6a:3c:31:86:5b:4f:8a:0d:01:81:6a:8a:50:77:6c:
0f:92:90:a4:16:b0:a1:df:94:0d:fa:bf:44:87:bd:03:77:a6:
14:7d:1e:81:43:85:78:ca:40:cb:4e:8c:e4:1d:3f:00:ce:ab:
15:7e:e5:82:32:21:f7:88:29:a0:ca:78:8b:d4:89:2d:1e:20:
47:ee:37:cf:f5:e3:8a:38:bc:e1:b1:32:bb:e1:b5:5b:a8:bb:
a9:6c:cc:ae:08:97:31:6c:b3:2b:c0:4c:29:ad:5e:b2:1b:70:
ec:26:dc:a2:0f:c1:7e:c7:51:48:70:35:6a:be:6b:c6:3d:07:
06:fb:34:be:99:4a:73:72:b8:92:49:fe:5c:39:b9:21:5d:10:
6f:be:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:38:00 2024 by rpki-client on console-ams.rpki-client.org