Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/tmkODae6UIbFrBjQk3DVQj19U9c.roa
File: tmkODae6UIbFrBjQk3DVQj19U9c.roa (raw, json)
Hash identifier: E11+BKy20V/omYQHdY+/kq6mJPPt6LIEuJqInLudq74=
Subject key identifier: B6:69:0E:0D:A7:BA:50:86:C5:AC:18:D0:93:70:D5:42:3D:7D:53:D7
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 018CC7953CDA7CCBB251730159A06751ED87
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/tmkODae6UIbFrBjQk3DVQj19U9c.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.57.0/24 maxlen: 24
185.248.58.0/24 maxlen: 24
185.248.56.0/24 maxlen: 24
2a0d:2bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3c:da:7c:cb:b2:51:73:01:59:a0:67:51:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6690e0da7ba5086c5ac18d09370d5423d7d53d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:50:7a:23:87:1b:d0:32:3b:cc:88:53:1b:
d7:eb:a6:60:4f:59:74:6b:23:b0:8f:a4:d4:4f:aa:
cf:bf:92:b8:16:e2:2d:8e:45:6a:7d:a2:b7:48:2c:
97:92:38:fe:b7:a4:40:bd:05:dd:aa:30:73:d0:09:
5e:4f:69:7f:6b:23:09:b5:52:0c:40:74:f2:b5:3d:
dc:19:76:c3:ee:6b:1a:d3:22:4f:4e:6e:11:c4:20:
23:ec:3b:ed:6c:89:78:a6:2b:dc:71:00:a8:0e:aa:
02:0b:f0:89:c6:e8:b3:d3:77:d4:67:5d:96:94:c0:
49:3d:d4:0e:ec:1f:cc:c3:ce:1f:ab:ad:66:f3:0d:
1a:32:75:92:07:93:54:d6:d8:e8:b6:d3:08:a0:7e:
89:d1:c6:ca:d9:b9:ca:e7:e0:04:8d:0b:1a:16:1e:
70:1c:20:12:88:e2:87:af:00:eb:c3:a6:2e:97:e4:
8c:d6:7e:4e:d3:a8:40:d8:fc:da:ba:f0:21:fb:e4:
a6:a5:30:79:e8:e3:e9:16:f6:60:01:53:8e:8c:eb:
9f:ee:16:f1:67:b8:a0:73:4d:6d:48:51:8a:dd:f9:
99:41:ac:4f:1c:1a:73:cd:63:ca:a4:02:87:5d:2c:
da:e4:cc:7a:27:94:43:aa:00:e5:42:f1:49:0e:79:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:0E:0D:A7:BA:50:86:C5:AC:18:D0:93:70:D5:42:3D:7D:53:D7
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/tmkODae6UIbFrBjQk3DVQj19U9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0-185.248.58.255
IPv6:
2a0d:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
30:f1:fd:f6:69:7c:6c:76:ef:3c:67:b9:49:58:4b:ef:d4:13:
6e:b6:2b:d5:f9:24:a3:f8:96:08:e0:c3:1b:f8:ca:d6:86:9b:
73:ee:0a:05:51:21:d3:fb:21:63:13:66:1e:cc:2a:4e:98:b7:
ea:e1:ef:3b:f8:f0:74:6e:31:8f:7c:3d:d5:d9:dc:89:b1:42:
1a:e1:58:7e:b4:7b:a1:4f:5f:f4:c3:d2:83:67:5a:7e:29:d9:
ec:18:d6:a2:5c:f5:dc:e3:14:17:5e:15:12:d8:1a:a3:b4:57:
57:eb:46:d4:85:2d:55:73:2c:15:8b:86:09:20:b6:99:4a:36:
47:25:95:8f:8a:70:08:f5:4e:8b:38:63:9b:8d:05:a0:4c:d4:
56:bd:66:ad:d8:f7:99:b9:69:ed:f2:f1:e4:ef:e1:e4:79:f2:
ed:4b:cf:05:ac:61:3e:14:c5:0d:92:4f:07:0d:80:72:99:df:
0d:4c:3f:cd:a7:cb:c3:5a:9d:a2:79:00:35:f1:6e:fa:0f:e4:
2e:c2:07:58:21:97:c1:35:f4:80:fb:a4:2d:50:a3:89:7a:5a:
0e:d6:88:2d:88:c7:a3:ef:be:fe:9f:07:ac:c5:d6:9b:01:62:
22:30:11:d6:d6:5b:84:d4:7d:05:ff:c2:44:f2:4f:85:fa:ec:
6a:ad:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:19:05 2024 by rpki-client on console-ams.rpki-client.org