Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/nVlby3mHYkAQ6aSHXyNWpeJaKMQ.roa
File: nVlby3mHYkAQ6aSHXyNWpeJaKMQ.roa (raw, json)
Hash identifier: 4YoAKVOr354PNcrAEVwTrxpW+gZhIQDVO7K+jh21bWQ=
Subject key identifier: 9D:59:5B:CB:79:87:62:40:10:E9:A4:87:5F:23:56:A5:E2:5A:28:C4
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 018CC649AB3850B4F9B0801B09C651FE71E9
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/nVlby3mHYkAQ6aSHXyNWpeJaKMQ.roa
Signing time: Mon 01 Jan 2024 18:29:25 +0000
ROA not before: Mon 01 Jan 2024 18:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212122
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ab:38:50:b4:f9:b0:80:1b:09:c6:51:fe:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 1 18:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d595bcb7987624010e9a4875f2356a5e25a28c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:5b:50:0b:96:86:26:09:9b:b4:b8:6e:c0:
e5:53:91:e3:bc:30:d3:5c:06:68:d4:7f:fa:56:36:
74:81:dd:26:d8:09:9f:ef:20:8f:e9:b1:cb:cc:df:
05:39:2f:67:48:fc:a2:a2:31:7e:14:3d:75:53:20:
9a:dc:e5:20:c0:dc:71:70:31:7e:4f:72:55:0a:3f:
98:e6:55:aa:b0:ef:2a:82:82:7e:eb:91:67:b9:2c:
04:62:8f:3f:a7:6c:b9:42:1b:3a:d6:3e:f8:fc:d5:
53:b7:2a:7f:27:98:4c:56:3d:ff:b7:d1:a0:26:8a:
44:f7:2b:79:45:cb:c1:f4:87:38:cf:f5:3a:4d:49:
6e:dc:42:ca:00:a4:fd:e5:e0:d0:03:b7:73:66:24:
cf:6b:41:f9:45:ea:6c:a0:31:db:a5:ed:e4:8f:e8:
b9:e0:3b:09:96:b2:25:67:56:f8:68:d0:67:f1:4c:
22:c7:be:db:58:73:22:b3:12:e9:99:e1:2f:97:cf:
91:f8:51:44:ea:37:2f:30:39:8f:58:1b:f9:23:86:
4b:6b:89:90:fb:42:bd:47:8d:cf:d3:6d:c7:85:b3:
9a:ad:40:c7:ec:32:43:26:6b:b5:b0:2c:34:b6:1c:
a3:ec:58:8e:f5:cb:fd:20:91:4f:b3:aa:12:1b:ff:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:59:5B:CB:79:87:62:40:10:E9:A4:87:5F:23:56:A5:E2:5A:28:C4
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/nVlby3mHYkAQ6aSHXyNWpeJaKMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9f:b6:aa:67:34:af:95:0a:e6:73:31:37:d0:19:63:48:00:
0e:49:86:d4:b4:4b:aa:41:5c:ab:b6:80:3f:75:06:22:b7:55:
74:6d:84:5b:41:db:ad:fa:df:e4:62:be:6e:4c:b3:41:2a:1e:
f0:d3:af:74:f3:1d:e8:e9:9c:c9:36:f3:7a:bc:4c:bb:d0:c5:
9b:b1:bc:0d:59:dd:91:d2:7a:4e:2f:93:ca:42:6b:a4:5a:94:
10:cf:5a:30:39:ef:1b:5d:90:6d:54:89:15:aa:39:05:ff:b5:
e0:30:55:11:d7:0a:52:af:3f:3d:1f:41:91:d8:c3:49:a7:6a:
8f:f8:d7:6a:ea:11:db:a0:fe:db:5d:19:fe:e9:29:7e:bb:93:
98:e0:88:2b:b8:2f:73:6c:f2:ae:d1:d0:d4:2b:9b:56:2c:99:
0a:36:0f:10:6d:b3:3f:36:80:ca:e1:32:f8:09:33:56:07:84:
70:26:01:4e:25:4b:b1:41:66:12:cb:52:dc:7c:d4:8c:c9:a6:
b8:0d:2a:31:5b:6d:6c:11:90:5c:7b:a8:05:de:ce:ba:b4:94:
f4:b3:0c:77:04:7c:41:f1:3c:b9:79:1f:c9:34:02:76:d1:b0:
d2:b1:10:3b:e2:8e:89:6d:3e:1f:e2:a3:f1:b7:95:e4:a7:69:
8b:3b:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:34:01 2024 by rpki-client on console-fra.rpki-client.org