Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/yNMmkUsagY6qy_hn0RqB85at1go.roa
File: yNMmkUsagY6qy_hn0RqB85at1go.roa (raw, json)
Hash identifier: IDoMeIduMOTb6cp5d+P8lEgyGO6Oh4AHSmSfsVic8nw=
Subject key identifier: C8:D3:26:91:4B:1A:81:8E:AA:CB:F8:67:D1:1A:81:F3:96:AD:D6:0A
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 018F6209BE0F89661F598C37EC2D75F5D2C6
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/yNMmkUsagY6qy_hn0RqB85at1go.roa
Signing time: Fri 10 May 2024 10:25:56 +0000
ROA not before: Fri 10 May 2024 10:25:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205113
IP address blocks: 185.248.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:09:be:0f:89:66:1f:59:8c:37:ec:2d:75:f5:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: May 10 10:25:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d326914b1a818eaacbf867d11a81f396add60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:c3:fc:cf:84:ab:02:22:87:85:be:26:af:
73:87:a1:99:30:b6:96:95:c0:f8:db:bd:de:d0:c0:
3e:b2:4d:35:6e:b2:bd:a3:80:b4:65:69:f2:cd:08:
59:71:dc:b7:bd:3c:a3:70:fe:db:1f:8c:d4:32:d5:
b0:77:31:58:ac:04:75:8b:0d:4a:58:f6:63:c8:db:
f2:6c:67:9c:e3:74:5e:42:52:da:5c:ea:60:3c:ce:
42:41:9b:49:46:e0:0b:9c:b3:23:2b:c5:cf:17:89:
6c:f1:5f:a3:a4:7b:0d:ed:19:59:2b:04:74:b9:0b:
19:a2:cf:47:53:7e:0e:4a:67:db:98:c3:58:4f:a9:
66:44:5c:36:fc:e9:f7:74:de:ad:07:1f:9b:8a:cc:
d3:6c:71:b7:81:88:6d:ec:36:cf:fe:eb:7d:5d:7d:
72:02:4b:3e:80:93:17:b8:fe:ac:9c:ba:ca:f3:87:
11:18:f9:81:a8:44:d4:fc:93:b9:16:ac:49:f3:76:
12:af:b9:69:8a:05:8a:32:fc:92:9b:58:72:74:c6:
92:5b:17:ee:ff:f8:c9:85:ec:27:fb:b6:76:46:f0:
dd:e8:c4:9a:07:0e:da:7a:27:07:82:b7:b1:d9:4a:
f6:74:b2:eb:8c:a3:56:e3:fa:c3:b8:bf:e7:3f:ba:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:26:91:4B:1A:81:8E:AA:CB:F8:67:D1:1A:81:F3:96:AD:D6:0A
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/yNMmkUsagY6qy_hn0RqB85at1go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d2:a3:29:c4:37:03:90:7b:10:03:73:af:25:ac:68:d0:7c:
d5:e5:0a:ab:94:fe:30:bb:29:99:2f:cc:b3:b9:e2:ec:cc:e3:
15:fa:09:e5:50:ae:35:ac:3f:00:ed:65:20:11:00:23:02:d0:
38:7b:98:02:f9:34:a8:7a:ca:56:18:8e:1b:37:f4:a0:bf:87:
e6:2e:d7:d7:7f:33:8a:de:41:89:09:fa:b7:48:0b:6a:1c:2a:
07:20:e4:df:c4:6f:02:3e:e0:e8:85:e9:ff:8c:41:51:f2:6c:
70:3d:2d:7e:06:0b:88:fa:87:d5:c9:c0:1c:c7:d7:de:ea:9b:
44:0b:ca:e2:16:32:36:c2:a2:03:78:eb:88:3c:21:c8:e5:1b:
7b:eb:7e:b2:29:b4:d7:45:49:9e:bc:e2:e5:c6:c3:d6:d8:b0:
3c:55:3a:06:40:77:d9:e3:f4:cd:26:fb:11:73:70:7d:ec:57:
03:60:fa:6e:56:6d:ae:ab:bd:d0:bc:17:59:56:52:be:4d:67:
30:c7:9d:bb:89:47:8d:76:35:35:8b:f4:03:0c:b0:13:a8:f0:
07:07:b6:b4:0f:2c:c4:f3:a9:60:e3:c7:1d:20:fe:6a:8e:9b:
f4:c9:3c:81:9c:fc:fa:db:a0:8d:dc:e2:c9:d1:86:3a:49:54:
6e:01:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:58:07 2024 by rpki-client on console-ams.rpki-client.org