Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/az1l9HoFnQiYrbGRNSLV68l7ZWQ.roa
File: az1l9HoFnQiYrbGRNSLV68l7ZWQ.roa (raw, json)
Hash identifier: POpY33dzp+olOF5CwTkkDJIlpcWi1jkUQiboYh6RRvE=
Subject key identifier: 6B:3D:65:F4:7A:05:9D:08:98:AD:B1:91:35:22:D5:EB:C9:7B:65:64
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 0192335F7EE42D2F436DDA41218B98E56A9E
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/az1l9HoFnQiYrbGRNSLV68l7ZWQ.roa
Signing time: Fri 27 Sep 2024 12:05:49 +0000
ROA not before: Fri 27 Sep 2024 12:05:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6663
IP address blocks: 185.137.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:5f:7e:e4:2d:2f:43:6d:da:41:21:8b:98:e5:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Sep 27 12:05:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b3d65f47a059d0898adb1913522d5ebc97b6564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:0d:f7:e2:37:25:39:e6:44:32:33:9b:28:
2d:6b:b1:38:4d:52:19:e4:8e:04:65:a7:c5:37:c8:
f0:78:ad:1f:a7:cd:ee:e8:b2:d4:73:5c:de:dc:a9:
b8:39:26:ea:7b:49:55:bb:c0:71:21:7f:ef:63:69:
a3:a5:ea:ca:00:04:f0:35:84:c0:1a:eb:00:92:35:
86:4c:d8:ae:fb:8e:bb:9d:60:fb:8d:a5:b0:1d:1e:
12:ff:2a:6a:44:9b:8a:18:f0:99:30:df:4b:d5:b7:
68:91:a2:87:e1:e4:9c:4a:90:6e:11:c3:d0:ea:d4:
cd:b9:85:f2:be:fd:3e:fa:42:d4:04:54:14:77:bf:
7d:c7:50:47:3a:c2:af:0e:0d:6b:e5:cb:04:18:c9:
36:fc:75:90:04:ec:78:8d:77:3b:e8:05:13:6c:25:
b3:d5:d6:c8:74:ec:11:37:54:90:3c:6d:a5:8d:3e:
9e:03:8b:e8:ea:74:46:c5:7c:49:48:53:ac:a9:74:
0a:91:a7:33:fd:e7:55:2a:d2:f1:53:a8:a5:ce:e7:
1a:ce:e2:43:e1:68:64:f5:0e:52:01:e1:95:35:3c:
bd:06:85:f8:0e:fa:41:ba:1b:5d:84:db:5b:b6:ef:
94:16:22:9b:ff:69:69:79:26:cf:d6:32:1e:a6:f5:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:65:F4:7A:05:9D:08:98:AD:B1:91:35:22:D5:EB:C9:7B:65:64
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/az1l9HoFnQiYrbGRNSLV68l7ZWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:79:7d:c5:90:51:97:dc:21:98:01:d6:4f:88:79:68:cf:fe:
4c:6f:c4:94:8a:7d:70:be:01:48:a1:cd:38:81:fa:aa:7a:b2:
c6:36:ec:df:55:87:d1:e7:55:ef:f0:47:a3:4b:db:66:16:ac:
ff:37:d5:66:ed:a3:84:d0:20:dc:14:92:80:91:63:dc:a1:e2:
d8:44:00:6a:5e:cd:56:37:73:6f:73:ca:19:42:e5:fe:10:b6:
4a:e7:da:5d:29:18:89:e4:f7:78:d5:45:d9:2f:c1:ea:a3:d6:
32:bd:97:63:ad:c6:65:1c:1e:12:ff:5f:6b:cc:e8:93:a2:ba:
05:f5:67:e2:12:e7:69:48:c8:36:4c:fa:16:6a:79:2c:f5:d1:
4a:c5:bf:6e:cb:c7:ed:33:4f:a0:71:03:4a:64:c6:85:92:f6:
1a:d2:73:b0:5b:12:4d:c5:e9:0d:6e:f4:51:3b:84:99:19:a1:
e7:c5:5b:ba:47:6f:bd:65:d7:4f:2f:4d:84:e9:3d:77:76:9c:
b6:0e:1a:e4:7f:ab:ff:18:1e:5a:3b:e9:a2:ba:9a:a7:f6:17:
1e:53:b4:53:b3:17:87:52:75:5f:93:29:a9:ae:43:05:82:60:
4d:fc:42:ec:f7:90:3c:23:65:b5:c8:61:e8:f4:15:b9:9d:ee:
b4:03:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:40 2024 by rpki-client on console-fra.rpki-client.org