Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/1fC1USIc3nMhxjIrBCzxEw1RVUA.roa
File: 1fC1USIc3nMhxjIrBCzxEw1RVUA.roa (raw, json)
Hash identifier: Hn3dW0MLUwSc2faNJ+3wTZvi8fg5spn1zeuuu6PlbEs=
Subject key identifier: D5:F0:B5:51:22:1C:DE:73:21:C6:32:2B:04:2C:F1:13:0D:51:55:40
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 01926D219DA38D4B8F6A6BBA76FBBFC7C044
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/1fC1USIc3nMhxjIrBCzxEw1RVUA.roa
Signing time: Tue 08 Oct 2024 17:16:12 +0000
ROA not before: Tue 08 Oct 2024 17:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206737
IP address blocks: 185.109.50.0/24 maxlen: 24
185.177.212.0/22 maxlen: 24
2a0a:4680::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:21:9d:a3:8d:4b:8f:6a:6b:ba:76:fb:bf:c7:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Oct 8 17:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5f0b551221cde7321c6322b042cf1130d515540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:88:e8:e7:47:53:87:b9:b7:a5:40:f0:3c:
3c:55:05:63:1c:fe:49:33:22:80:22:c3:4a:d8:97:
36:77:b8:a1:c5:58:ff:29:41:b4:13:e0:ca:20:21:
90:2a:ac:23:62:c4:e5:e8:b0:38:09:96:a0:2d:1e:
a5:72:a4:5e:16:09:00:82:98:e2:62:93:48:6d:45:
c0:e3:a1:c6:4b:90:c4:45:0f:55:3a:0d:ff:d1:5e:
a9:fc:ab:96:4e:76:96:2b:4b:34:97:40:b0:0d:c6:
cd:dc:68:6f:af:5d:9f:3d:5e:1e:e9:98:ee:40:f0:
81:dd:2c:c8:f2:4f:b9:60:8c:1a:db:9a:58:34:2f:
79:f9:42:2a:6b:25:67:31:5b:51:5f:3b:f1:e0:1d:
57:13:84:af:a6:15:2d:d7:68:1a:3a:7d:f8:98:ed:
30:33:89:67:a4:94:6b:28:16:77:d8:cc:89:ca:a9:
9a:72:c4:3b:3f:90:49:07:c3:92:41:aa:6e:4a:2d:
9c:06:d1:d2:4d:48:ec:0c:df:8a:36:53:fe:dd:dc:
e3:fe:1e:f9:f2:a8:21:fe:ed:8d:d0:dd:57:56:de:
52:16:6a:cc:cf:d2:b6:29:bd:56:b3:81:3d:4b:8d:
20:77:2d:ba:fd:79:63:f4:1d:47:3e:21:f2:46:0f:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:B5:51:22:1C:DE:73:21:C6:32:2B:04:2C:F1:13:0D:51:55:40
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/1fC1USIc3nMhxjIrBCzxEw1RVUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.50.0/24
185.177.212.0/22
IPv6:
2a0a:4680::/29
Signature Algorithm: sha256WithRSAEncryption
47:70:87:86:cb:6c:45:99:a7:d1:a1:eb:de:b5:af:84:aa:e8:
04:5a:b4:79:31:00:4d:8e:0f:d8:64:3e:2e:b1:4f:57:c8:30:
63:34:95:4f:f3:22:5e:a3:d4:7d:62:ea:da:ec:5c:c8:40:63:
8f:9d:a1:de:2e:68:01:b9:9d:83:69:f1:23:ee:4f:78:a7:93:
96:77:e2:c7:4d:8a:e2:5c:54:80:25:c9:8e:91:74:79:92:01:
43:ea:4f:8e:20:23:19:55:72:aa:d6:72:91:14:2d:f5:3c:3c:
81:14:5b:47:4a:9e:57:0a:3f:5b:85:49:36:b5:71:03:3c:1d:
62:5c:8e:c9:5a:43:9a:57:c4:2b:be:e1:58:e9:80:28:6f:5d:
e1:5e:b8:6e:55:86:7e:43:6d:db:99:34:73:f7:1c:64:72:01:
08:99:43:88:cb:90:0b:00:d6:d1:c4:fe:0b:d7:65:93:91:5f:
6f:cb:f4:b9:7d:bb:5a:81:7e:7c:97:3a:82:73:f6:d1:8b:1d:
4d:20:6a:93:8a:e6:39:da:07:af:87:c2:b3:77:6d:01:9f:f4:
9b:10:5a:30:bd:3f:7e:df:11:ce:15:2e:a2:62:2f:00:9d:45:
a0:96:73:b1:54:06:ac:99:2b:a9:af:3f:81:ff:8a:c2:33:5b:
42:1a:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:08 2024 by rpki-client on console-fra.rpki-client.org