Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/D-pYB57HeRH0d2yTPhWpbcwng_w.roa
File: D-pYB57HeRH0d2yTPhWpbcwng_w.roa (raw, json)
Hash identifier: qzETCghLQevBtMx2Ko6gLNTbbfR3D+S444F2QWm76j0=
Subject key identifier: 0F:EA:58:07:9E:C7:79:11:F4:77:6C:93:3E:15:A9:6D:CC:27:83:FC
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 018CC4922EB7E2C9988CCB884910F3785D47
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/D-pYB57HeRH0d2yTPhWpbcwng_w.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207846
IP address blocks: 185.194.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2e:b7:e2:c9:98:8c:cb:88:49:10:f3:78:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fea58079ec77911f4776c933e15a96dcc2783fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:6f:29:b2:f3:da:0d:53:26:d5:b7:19:97:
9c:70:2a:7d:8e:24:32:fc:b1:1d:74:3f:60:ff:40:
ed:00:6b:e5:c5:33:8e:b6:f3:41:68:59:dc:b1:13:
7d:bc:a6:89:58:11:28:6d:6e:1d:a7:5b:0f:c3:2a:
9d:9f:0e:c3:53:d3:a2:8e:3f:2a:5f:6f:fc:c2:2b:
f3:57:6e:2d:c9:bb:04:ca:4b:38:e6:47:72:99:ca:
fc:e9:89:04:66:58:88:97:66:51:e6:df:7c:83:fd:
0a:98:7d:f5:7a:55:eb:78:5a:9f:7e:72:89:05:94:
f7:e6:19:d7:ae:70:8e:16:e4:0b:94:9a:22:1c:d3:
ee:e8:b9:94:ed:13:ee:01:e5:e5:b9:ea:76:8c:ac:
79:d9:29:01:1f:b6:5b:20:f5:5e:8d:66:67:14:2e:
fa:08:f4:d1:d3:10:15:71:9f:a0:6a:6b:41:de:7b:
33:f3:11:23:89:5f:ab:49:5a:e1:c2:7e:08:d4:75:
4f:ce:17:13:5b:72:d0:91:e8:6e:e2:ce:07:1a:d3:
9c:4e:bf:91:31:fe:6b:72:a6:51:c6:8d:a5:b4:0b:
76:b9:d4:9b:2d:a4:58:d1:53:53:2e:5d:bc:de:1f:
06:a6:9d:c3:4d:83:9d:30:3b:09:c3:9b:55:26:c0:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:58:07:9E:C7:79:11:F4:77:6C:93:3E:15:A9:6D:CC:27:83:FC
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/D-pYB57HeRH0d2yTPhWpbcwng_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
30:51:8d:3b:38:0e:f4:6b:a0:f6:ff:30:90:59:90:7a:ab:7e:
ea:47:0e:54:d5:cb:da:e9:40:b7:af:32:56:e4:34:a7:32:4d:
bf:12:b1:13:33:ac:c8:cb:96:6e:37:42:3c:22:3b:07:27:64:
05:18:ad:c6:ef:4d:e7:27:78:71:e3:ec:f4:d2:6e:a0:76:fe:
4b:81:1a:59:1e:0d:50:4f:59:3e:2b:17:57:96:15:3c:18:db:
8b:38:f8:4a:f7:25:79:14:6f:34:7c:1f:e4:e9:31:fe:c9:6b:
4d:df:9c:bc:1f:51:6b:5b:1e:38:6e:a6:80:d4:35:84:b9:5e:
82:56:17:f3:34:17:a2:92:7e:58:fc:b6:88:23:11:7a:bb:06:
cf:f8:ef:60:18:99:ac:6d:12:e4:aa:5e:fd:a3:0c:34:ef:be:
79:08:b2:2e:22:79:76:54:3a:1d:2b:06:5c:74:f8:ce:87:96:
a6:5b:25:d5:8c:57:4e:f6:b0:c8:77:cd:1d:f0:76:90:c3:1a:
62:23:d8:8c:da:72:cd:c9:a8:89:b4:e6:6c:87:9a:c3:da:6a:
00:0e:b2:12:58:58:d1:7d:c2:45:da:98:d9:1a:e0:77:78:dc:
53:d4:2f:86:49:e4:57:d1:8d:3d:2c:24:79:b7:c3:fc:f1:93:
2b:95:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:24:49 2024 by rpki-client on console-ams.rpki-client.org