Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/6Da85dMqvHvmy8lCuuxg93OOhP8.roa
File: 6Da85dMqvHvmy8lCuuxg93OOhP8.roa (raw, json)
Hash identifier: imvmw8nDuzA/4Irg5m5mjSnZ7jyp+1C9pmmQWgNvVdU=
Subject key identifier: E8:36:BC:E5:D3:2A:BC:7B:E6:CB:C9:42:BA:EC:60:F7:73:8E:84:FF
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01928B7B629A824FE6336033E0F71023F7B4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/6Da85dMqvHvmy8lCuuxg93OOhP8.roa
Signing time: Mon 14 Oct 2024 14:42:52 +0000
ROA not before: Mon 14 Oct 2024 14:42:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20853
IP address blocks: 168.199.247.0/24 maxlen: 24
185.226.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:7b:62:9a:82:4f:e6:33:60:33:e0:f7:10:23:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 14 14:42:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e836bce5d32abc7be6cbc942baec60f7738e84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:ac:eb:c3:7c:66:57:7f:24:9e:bc:95:f7:
21:c2:73:7b:fb:d7:c6:e0:a2:48:ff:da:20:5b:6a:
cb:dd:94:f9:ca:80:30:de:09:ee:e7:db:da:83:59:
a7:15:7d:e4:89:94:61:dd:13:76:d6:05:44:89:69:
70:15:98:ac:ca:27:c1:82:bf:58:34:ef:13:e6:67:
c5:55:80:52:b4:6c:ad:a5:ed:b7:51:43:bc:27:b4:
4b:88:12:e5:80:6f:4b:98:2f:13:9c:8c:5f:27:91:
04:a1:67:90:5a:f9:15:f9:2e:20:21:87:ee:0e:f9:
4d:90:36:1a:ec:06:e4:a8:96:c9:fa:90:98:03:2f:
5a:49:9b:55:32:a9:0a:61:99:dc:48:8a:84:42:5e:
3a:63:db:69:80:9c:f3:20:86:d3:14:e4:e5:dd:98:
79:af:3e:4b:c5:af:5e:ab:ac:ac:d5:87:ce:4e:c7:
34:73:7b:a5:c6:19:5d:91:a5:97:0c:91:58:5e:13:
b1:05:c3:c1:11:8b:bb:e5:8d:a2:bf:cf:e0:f4:04:
cb:90:0e:c5:06:7a:db:93:d0:6b:e2:e8:f3:4b:e1:
da:7d:ea:77:cc:23:9f:b6:23:fb:fc:d2:70:2a:27:
98:80:c2:c3:73:15:a5:1b:f2:fc:f2:28:e7:4c:99:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:36:BC:E5:D3:2A:BC:7B:E6:CB:C9:42:BA:EC:60:F7:73:8E:84:FF
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/6Da85dMqvHvmy8lCuuxg93OOhP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.247.0/24
185.226.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:09:db:e0:bf:11:4b:ab:f6:bf:0f:97:33:f7:47:b0:0e:16:
cf:ba:47:da:41:1f:f6:81:f2:6e:13:bf:5c:77:01:c5:c6:4d:
10:f2:de:2f:6e:5d:71:8e:2b:c3:3b:37:16:ff:e3:97:a8:74:
d0:06:fb:84:08:70:b9:14:ac:fe:8b:ae:6f:de:e2:3b:ba:36:
98:b1:4e:a9:fa:53:13:53:6e:b4:cd:7b:b9:91:cb:b9:cf:20:
53:f1:9b:ab:e8:c5:12:93:f9:0e:96:cc:e2:2e:8d:6f:a6:8b:
a1:f0:7b:ad:b2:50:f2:fd:0d:43:5b:54:cd:cf:dc:ac:4b:be:
13:e5:c5:e9:eb:c4:bf:f1:df:2b:c9:58:23:28:51:4d:ae:d7:
94:eb:86:00:05:ad:d4:ee:bc:7a:84:b8:03:98:af:f5:bb:37:
cc:1d:86:cd:4b:aa:bc:ca:31:43:14:dd:46:12:58:c6:1e:0a:
00:db:46:c8:18:9d:80:f9:7b:1c:e5:72:49:fb:46:69:c1:c2:
29:a3:ef:76:0a:4e:c3:ec:6c:47:fd:7a:ec:3f:fe:78:bc:0f:
fd:d8:96:08:9a:f8:6f:43:f3:ac:bc:97:3c:29:f0:25:15:8f:
2f:c8:19:47:d2:a7:8d:bf:37:8b:3f:85:ec:c9:e5:b8:26:9c:
b6:60:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:56:59 2024 by rpki-client on console-fra.rpki-client.org