Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/y8mg0mleh4jTW5LJnMsZXOGLyNs.roa
File: y8mg0mleh4jTW5LJnMsZXOGLyNs.roa (raw, json)
Hash identifier: s/sE2RZ5yT3DAgN23R/uVsZskNncJZLTx98jWMuz4Ls=
Subject key identifier: CB:C9:A0:D2:69:5E:87:88:D3:5B:92:C9:9C:CB:19:5C:E1:8B:C8:DB
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01915167243A72A25988BE0174EEF7C33CF4
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/y8mg0mleh4jTW5LJnMsZXOGLyNs.roa
Signing time: Wed 14 Aug 2024 14:59:59 +0000
ROA not before: Wed 14 Aug 2024 14:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53835
IP address blocks: 206.245.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:67:24:3a:72:a2:59:88:be:01:74:ee:f7:c3:3c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Aug 14 14:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbc9a0d2695e8788d35b92c99ccb195ce18bc8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:25:80:dd:ca:0c:de:d5:80:f8:a5:40:d7:
79:42:16:60:a7:e8:48:bd:f9:df:38:fd:be:88:be:
df:01:df:5b:f8:5d:a2:1b:6b:27:6e:00:d2:36:dc:
7f:7b:a1:5e:f3:81:d9:68:8d:29:e4:30:4b:b5:72:
74:07:da:ce:e1:e5:e0:fc:45:1e:fb:5b:cb:64:06:
19:19:1c:42:c2:de:ab:e4:eb:32:82:d2:62:9d:89:
17:df:81:12:a7:18:10:5b:81:2a:3b:ee:c5:2e:4d:
e9:c8:ef:ae:c4:1e:d6:07:7e:07:70:2c:45:44:88:
b9:1c:43:36:e5:cc:9e:14:56:e2:ca:5a:f1:9f:c1:
38:7d:38:1a:59:72:71:5a:a6:ef:60:e4:29:85:f4:
55:a2:a7:86:81:56:82:71:d2:b4:e9:a3:cd:93:fe:
c4:d3:c7:fb:7b:a6:1b:ef:98:f7:46:f5:48:5d:49:
f6:c1:c9:85:ec:86:08:f8:35:59:0a:be:b8:ae:5b:
45:8b:38:69:ed:1c:5f:fc:b0:6c:b8:8c:17:ee:6f:
9f:20:fa:52:ea:79:bb:d8:ae:e8:ef:6b:67:b8:dc:
d1:54:d2:1c:f5:20:e9:e9:7b:c0:13:2e:5f:7f:a3:
91:a8:78:d9:f0:6b:37:55:9b:1e:1c:98:1d:99:d2:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:A0:D2:69:5E:87:88:D3:5B:92:C9:9C:CB:19:5C:E1:8B:C8:DB
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/y8mg0mleh4jTW5LJnMsZXOGLyNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:72:93:fe:f7:1a:bb:aa:51:4d:24:d5:67:5a:51:23:81:76:
e6:ed:95:c4:bc:06:d2:d5:88:55:43:8c:a5:b0:e7:f7:bc:c0:
8d:0e:59:d7:e3:5d:ad:87:ab:69:26:a1:dc:f7:e3:52:de:dd:
d3:3d:44:41:4e:57:9d:d7:9f:d9:b7:e0:1e:2b:65:32:51:92:
6f:3f:e5:a5:48:9e:da:55:12:29:a0:05:1b:42:1b:c6:e5:8b:
79:a2:77:b3:b7:46:03:2b:3d:c9:4e:b6:67:13:fe:08:94:6d:
98:d3:f7:97:25:ed:33:ee:5f:32:61:44:ca:6c:73:aa:40:f8:
89:7f:0a:68:14:45:f8:15:9b:35:c2:9a:d7:00:a3:0c:bd:5c:
7c:1d:8e:21:70:24:5e:04:3e:b5:52:a3:32:94:b3:62:5d:fe:
bc:21:d5:10:83:17:6f:0c:40:56:d7:30:61:9b:58:2f:5c:df:
91:ff:5f:d3:4b:2f:22:18:62:b8:d5:b7:46:a6:88:b8:bf:a2:
dc:8e:fd:4d:3b:0a:2c:15:a6:09:35:cd:a0:f3:31:1e:58:5f:
7d:cc:8b:05:a4:57:84:3e:7f:b7:d8:61:b4:af:e7:df:b0:75:
80:e1:d5:40:76:10:49:ae:7e:a6:39:e4:29:10:13:05:75:69:
47:33:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:59 2024 by rpki-client on console-ams.rpki-client.org