Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/8NDcsGFKqiy9Kp-rBYyMfFbVAVE.roa
File: 8NDcsGFKqiy9Kp-rBYyMfFbVAVE.roa (raw, json)
Hash identifier: nkqdI5lHisS6ftdE3qxxIvIHAPzQFDEBajGZv33Tnfs=
Subject key identifier: F0:D0:DC:B0:61:4A:AA:2C:BD:2A:9F:AB:05:8C:8C:7C:56:D5:01:51
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 018CC26D7ED3FC0E08B7DBF95A47C735A451
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/8NDcsGFKqiy9Kp-rBYyMfFbVAVE.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 185.14.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7e:d3:fc:0e:08:b7:db:f9:5a:47:c7:35:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0d0dcb0614aaa2cbd2a9fab058c8c7c56d50151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:12:a1:1e:9a:b1:12:b6:69:8b:e5:5a:0e:
b8:2a:c2:9d:9b:95:e5:09:49:19:4d:1e:de:8b:d8:
3d:f0:0a:59:83:55:77:04:82:68:45:53:09:55:e1:
12:40:b1:de:c8:1f:88:72:c8:fb:31:42:42:df:5d:
9e:98:a3:78:f7:0d:65:64:94:fb:da:0c:d5:ca:87:
d2:06:36:81:5d:bd:3b:92:57:a9:8e:c0:35:a5:e4:
cd:4c:94:9d:da:fd:05:84:1b:2a:2f:5d:1b:df:99:
c4:fb:21:86:e6:d4:0c:6a:46:a2:6d:8d:20:92:99:
74:b7:30:65:c0:e8:79:05:26:6e:20:69:c2:fe:85:
2a:ec:e3:03:85:13:60:af:71:0e:c5:14:0b:10:27:
c5:a9:09:3a:bc:62:a7:bc:99:dd:c6:c9:75:c5:f4:
ac:1a:f9:8f:0f:26:ff:4c:4e:3e:77:2b:1f:62:4a:
39:b8:fc:b2:a3:f5:72:19:1a:e7:25:1a:fa:42:7e:
b1:25:a1:ba:1e:6c:e7:ef:cd:bc:ee:22:a0:dd:6f:
b8:ec:9e:6e:ed:94:76:c9:f9:b9:69:a3:53:3b:dd:
91:4b:ea:1b:df:04:e8:e8:5f:ec:49:8d:92:67:0d:
3f:21:51:c8:d3:84:dc:5e:8e:55:96:a3:69:19:c3:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:DC:B0:61:4A:AA:2C:BD:2A:9F:AB:05:8C:8C:7C:56:D5:01:51
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/8NDcsGFKqiy9Kp-rBYyMfFbVAVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7a:f5:c0:13:37:54:ea:f4:c7:91:af:f0:23:7e:f8:da:01:
ee:d9:8c:ec:71:e0:b7:ad:0a:31:f1:1e:e8:5d:f2:78:e6:78:
85:c0:3b:4c:69:38:1e:7e:e5:e8:40:31:f3:1e:ab:62:d4:35:
66:69:04:52:27:68:09:99:57:c6:eb:2b:f7:50:7d:ea:23:9a:
21:d6:70:17:56:65:8d:da:e3:70:77:15:93:13:4d:3b:10:bb:
6b:ed:77:5b:bc:77:4a:7a:bf:19:55:a3:8e:9e:6c:04:12:4a:
79:d0:76:94:cc:a8:14:76:fa:b2:3d:08:1d:9f:86:d5:cd:15:
97:b9:9e:34:01:67:1d:c9:78:b3:7b:80:45:7a:82:d5:ac:a4:
0d:12:9d:55:68:b7:af:ea:11:28:af:a7:1d:6a:a2:46:c3:fd:
94:e6:ca:e6:48:49:98:a2:7c:3d:a8:e6:24:93:e3:f1:4a:d0:
77:70:9c:09:e5:8c:1f:61:a7:38:17:fa:73:fe:b7:2c:71:a9:
8a:cd:34:75:fc:ee:a8:05:d2:ff:37:00:9b:d8:c2:17:dc:a3:
53:5a:e2:ef:56:91:44:1b:68:34:35:66:cb:e3:84:43:0e:57:
4d:8a:23:5b:db:00:77:58:3d:d8:74:3f:36:be:26:83:06:02:
4d:a7:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:16:33 2024 by rpki-client on console-ams.rpki-client.org