Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/69OAoX-JeNZUOl-TnEPwTiCTmIk.roa
File: 69OAoX-JeNZUOl-TnEPwTiCTmIk.roa (raw, json)
Hash identifier: zLFVR6+zJdTf35GCMGa2PDyqfCk1z+xOyZXcoOt2tv8=
Subject key identifier: EB:D3:80:A1:7F:89:78:D6:54:3A:5F:93:9C:43:F0:4E:20:93:98:89
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0190737E80AB582CF99F45887BD514507F7A
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/69OAoX-JeNZUOl-TnEPwTiCTmIk.roa
Signing time: Tue 02 Jul 2024 12:49:48 +0000
ROA not before: Tue 02 Jul 2024 12:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215239
IP address blocks: 185.213.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:7e:80:ab:58:2c:f9:9f:45:88:7b:d5:14:50:7f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jul 2 12:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd380a17f8978d6543a5f939c43f04e20939889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:5b:0c:84:7f:0b:57:cf:ab:4f:90:56:d6:
d4:e3:b7:dd:a6:04:1e:01:0b:19:7b:f8:90:38:74:
c0:c3:db:31:14:76:96:05:96:64:c1:9c:31:08:82:
a9:10:bd:64:8c:99:5b:5d:1a:bd:88:86:94:8e:c8:
8f:ee:c8:cb:39:d6:89:af:ab:d5:b1:7e:3c:33:89:
f9:1d:62:bf:f8:2a:b3:81:44:3b:8f:b1:d3:62:de:
c9:76:60:7a:06:5e:48:5f:24:3c:0e:dd:1f:7a:54:
b9:36:40:6f:3c:f8:3d:0b:c2:ff:fa:0b:0f:85:a4:
cc:25:1c:c6:1d:d3:21:48:dd:26:a5:ef:ef:c9:a3:
6a:8c:35:b6:50:e3:35:fd:b9:63:52:48:12:6d:94:
51:9e:8d:56:b8:db:ce:22:82:8f:fb:d0:51:5b:a0:
54:3f:b4:ea:b7:bf:e1:ef:2d:7a:3e:98:e1:cd:cc:
1f:94:aa:10:6e:c8:27:70:d2:84:33:16:8f:90:60:
de:09:98:3f:6b:09:45:13:33:24:31:1b:8d:78:a7:
1c:cb:f7:f5:f0:e9:85:0b:70:22:e6:5f:2a:c9:ba:
3d:f6:12:46:fc:07:be:8f:bb:e8:44:33:be:89:96:
87:4a:d6:db:e1:49:9d:71:45:90:dc:83:8a:fc:b9:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:80:A1:7F:89:78:D6:54:3A:5F:93:9C:43:F0:4E:20:93:98:89
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/69OAoX-JeNZUOl-TnEPwTiCTmIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5b:61:96:1c:27:b8:20:72:5d:11:7f:45:e7:99:11:ed:46:
f0:8a:a9:c8:9e:5d:30:0f:86:2e:01:39:45:47:da:c4:6c:65:
09:14:18:e2:e7:e3:d4:c8:68:ba:b7:e4:4c:c3:c5:b3:0b:80:
70:d1:11:73:7d:12:86:ae:cd:97:7b:12:90:63:a9:3c:c7:c3:
53:e4:bc:2f:4f:45:df:c2:2f:0e:ab:0f:1b:5c:13:45:72:1f:
f6:e9:1a:02:61:af:39:c0:83:79:65:33:24:26:60:d7:22:7c:
91:fe:79:0a:12:62:15:66:70:a5:bc:ac:d0:f6:4b:3f:92:c1:
15:1c:b9:6f:73:0c:e5:46:92:e5:03:1d:61:53:0c:b0:b7:5b:
3a:9f:45:99:ea:ba:79:9a:96:a0:06:0c:2e:a6:50:c9:13:fa:
54:1f:37:f2:de:d8:d4:bf:a3:6a:25:02:1b:05:dd:3f:70:d4:
62:cf:a2:02:bc:79:ef:48:40:06:09:e5:2e:2f:79:49:e4:37:
9e:99:50:20:03:8f:df:19:8a:30:c6:89:ec:9c:ed:d5:e1:7f:
57:58:b0:2e:a6:d1:d0:50:6b:c6:3e:c3:a5:4a:b3:fb:f4:f3:
99:42:8d:1d:23:68:bf:34:b9:3e:a4:69:50:8b:ca:b0:31:73:
e4:c0:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:55:50 2024 by rpki-client on console-ams.rpki-client.org