Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/iiXkTHH672_iwaLMkx4mLwNwCx8.roa
File: iiXkTHH672_iwaLMkx4mLwNwCx8.roa (raw, json)
Hash identifier: rbSQGcLGE1qCZ+Ym0BLI0Lrtl87rGKQBnHMItyPjGk8=
Subject key identifier: 8A:25:E4:4C:71:FA:EF:6F:E2:C1:A2:CC:93:1E:26:2F:03:70:0B:1F
Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial: 0192DD5F45BAA1B5B13BFEFFAD4FB309B7AA
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/iiXkTHH672_iwaLMkx4mLwNwCx8.roa
Signing time: Wed 30 Oct 2024 12:21:01 +0000
ROA not before: Wed 30 Oct 2024 12:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201473
IP address blocks: 185.218.206.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:5f:45:ba:a1:b5:b1:3b:fe:ff:ad:4f:b3:09:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
Validity
Not Before: Oct 30 12:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a25e44c71faef6fe2c1a2cc931e262f03700b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:ac:c1:5b:d1:5f:5d:a4:69:c1:e9:6e:f5:
18:69:71:66:ca:98:56:13:05:b6:c3:bf:e8:52:4e:
3c:51:9b:ed:b9:12:b7:ea:f6:1d:cb:e3:c6:48:d9:
19:0a:39:bc:79:ab:4a:e5:20:d1:38:20:62:a5:73:
a9:5f:5e:57:0f:d1:ef:94:ed:b3:b8:ed:34:67:67:
c3:62:9b:7e:4a:d1:c3:03:d4:d7:30:4d:49:20:56:
bf:2d:7c:1c:37:b4:62:d0:6b:00:a1:31:f1:7d:f8:
ae:6a:d0:21:f8:86:b2:ae:9d:42:ef:73:38:81:39:
06:df:e8:2a:78:d6:31:49:78:64:31:ab:f9:b6:5b:
e3:c8:9f:b3:19:31:d2:8d:0d:05:c7:a9:d6:ac:38:
f3:a2:2f:7f:07:31:0a:1f:fc:04:31:29:4b:bd:88:
c6:6a:72:50:8e:53:39:b8:1d:ef:3e:69:4f:5d:2a:
2a:93:ad:d9:f3:1c:0f:e7:ba:84:ba:07:ec:9f:85:
fd:8c:cb:6a:01:f8:7c:b0:05:a9:12:21:51:46:32:
5f:12:a3:ac:15:7d:cb:3d:28:fb:12:ff:8d:02:a0:
3b:c6:e7:c0:48:33:a5:1e:ac:29:6a:d6:21:3f:ef:
cb:c4:e6:3b:68:0c:51:08:7b:d6:8a:0b:39:d3:a1:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:E4:4C:71:FA:EF:6F:E2:C1:A2:CC:93:1E:26:2F:03:70:0B:1F
X509v3 Authority Key Identifier:
keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/iiXkTHH672_iwaLMkx4mLwNwCx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2c:ed:2a:8c:92:99:a7:8e:bd:a7:7b:55:52:f9:19:02:ff:
54:4b:bb:41:44:d0:73:96:31:c0:c8:ec:ab:27:2d:9e:56:6b:
54:e0:c1:99:d6:25:01:ab:39:2d:61:93:42:ae:79:d6:de:e3:
d0:62:2d:b3:95:33:f2:0f:fc:4f:ea:8e:12:be:53:6e:eb:f7:
3e:04:96:c0:8c:fa:6f:b4:e2:3c:3d:44:b4:83:b9:cd:1e:e0:
4f:51:90:8d:d6:d1:f6:84:41:d4:d3:57:a8:8a:e0:9e:21:d1:
3b:99:a5:fc:e9:3c:21:2f:e8:7c:c9:e1:d0:c9:07:2d:29:8f:
f1:4c:4e:ca:99:ac:5a:16:93:b3:7a:2a:8b:b4:88:01:e7:db:
2c:61:8d:9a:dd:58:f0:72:45:97:5c:fb:84:a1:06:32:c6:1d:
24:fc:ac:8f:dd:99:99:a5:81:d1:a2:8a:ee:a3:5f:14:93:ba:
fc:36:de:fc:44:f5:9a:22:fa:f5:a4:aa:f9:22:ea:41:a4:90:
ad:e5:02:22:07:c4:ab:a7:7d:93:3d:d4:2d:a8:db:db:14:05:
a5:a2:28:50:0b:59:89:58:ce:fd:96:d6:56:87:c3:9b:49:59:
05:8e:2b:14:46:98:ff:c9:ea:3f:84:12:61:2c:f8:4e:59:cb:
48:88:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:28 2024 by rpki-client on console-ams.rpki-client.org