Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/cMq8Ff-JaahL_nsWsI3-w2dELlw.roa
File: cMq8Ff-JaahL_nsWsI3-w2dELlw.roa (raw, json)
Hash identifier: m4gkWIPtPSyMcOb1vWgDIvmzL1srIsZ7uOsKkeZL3Sw=
Subject key identifier: 70:CA:BC:15:FF:89:69:A8:4B:FE:7B:16:B0:8D:FE:C3:67:44:2E:5C
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 018CC425088E4FF780F3B0C5128D081B19DF
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/cMq8Ff-JaahL_nsWsI3-w2dELlw.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61148
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:08:8e:4f:f7:80:f3:b0:c5:12:8d:08:1b:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70cabc15ff8969a84bfe7b16b08dfec367442e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:69:29:43:35:c1:75:bd:7a:62:e6:0a:c1:
d2:5d:aa:cd:06:8f:80:7e:a7:0f:e2:d4:90:20:db:
5d:03:1b:f3:86:70:71:f0:66:66:28:03:da:8e:15:
93:e5:e4:67:51:aa:91:92:55:cb:e2:92:dd:9a:28:
df:d4:8c:78:7c:69:c7:77:cf:fe:60:40:b8:62:89:
e0:29:ca:37:63:60:6e:a3:74:71:27:ee:ab:10:f8:
7c:2c:e8:9a:73:5a:98:ba:b3:f0:6f:fd:06:2e:1f:
f0:f0:6e:68:22:15:f9:8a:6f:d9:d0:0b:b6:03:47:
1f:e9:0a:5a:0d:0b:80:7d:cf:28:ca:09:98:90:c6:
df:82:9f:67:68:bf:54:de:ff:15:87:95:c0:5e:5d:
5e:3d:08:4b:3c:d5:a5:fb:e9:30:d5:d1:6e:d2:b3:
d0:2e:70:74:ed:f9:ee:22:68:76:c1:e8:b9:9c:5f:
6d:84:0d:1a:9d:7f:cd:ec:3f:53:9d:f8:b5:77:91:
59:c3:52:27:8f:54:19:bc:7f:ec:26:90:78:f7:92:
26:08:10:11:db:a0:7a:5e:37:a2:81:d0:4e:c9:27:
13:ea:3a:56:49:d0:8c:cd:b6:ae:59:19:cd:cf:5b:
2c:67:80:32:4f:3d:eb:39:d0:83:6f:3a:1f:d6:2a:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:BC:15:FF:89:69:A8:4B:FE:7B:16:B0:8D:FE:C3:67:44:2E:5C
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/cMq8Ff-JaahL_nsWsI3-w2dELlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e3:4d:11:90:76:37:31:f3:c7:b8:d4:98:ad:41:09:73:6c:
b9:4f:f6:c5:71:0a:3b:c6:9e:81:1f:00:bd:dc:f0:07:46:b6:
85:19:16:53:1f:79:27:3e:92:d7:c7:14:c8:35:be:08:97:c9:
a0:11:fb:b2:5e:7b:2a:27:73:26:ba:d7:01:80:03:04:8e:24:
6b:d6:30:41:b3:05:fb:16:04:59:3f:42:11:64:20:22:54:2e:
c1:f7:03:59:76:34:f0:9d:b9:27:1a:13:b2:91:7d:44:c2:e8:
b9:60:a9:18:e9:0b:f8:0a:26:fe:98:c2:0d:50:c5:de:a9:4e:
a0:50:67:65:dc:af:e0:b4:f8:95:59:c8:70:38:15:10:81:31:
c2:9e:6d:36:a8:3b:fd:ef:f0:0b:96:0c:9d:78:5c:0e:b0:ae:
3e:ae:f9:2e:d8:ea:b6:ee:aa:c5:3f:7f:b5:9c:3e:31:aa:f5:
ba:40:66:89:7e:01:2f:72:90:e3:f7:5d:f0:7e:c3:73:a2:3c:
78:f8:40:a1:85:3c:88:10:3a:25:30:e5:60:93:2e:c8:eb:a6:
7e:d6:e4:da:9e:98:26:68:00:9a:7c:10:6b:71:e9:dd:d2:6a:
9a:60:06:5b:bd:4d:90:63:df:11:c7:c4:13:6f:2b:d3:c3:2d:
83:f5:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:07:45 2024 by rpki-client on console-ams.rpki-client.org