Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/bZ0StKlDkY6Ak2ujWUmCpx3JnCk.roa
File: bZ0StKlDkY6Ak2ujWUmCpx3JnCk.roa (raw, json)
Hash identifier: PV60ogp1+F07ogm8RhAQNtQBKdrBP/rSF/IU0GQkJFY=
Subject key identifier: 6D:9D:12:B4:A9:43:91:8E:80:93:6B:A3:59:49:82:A7:1D:C9:9C:29
Certificate issuer: /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial: 0192E2FAD3170F73196231E8DF9AA2B51C71
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/bZ0StKlDkY6Ak2ujWUmCpx3JnCk.roa
Signing time: Thu 31 Oct 2024 14:29:01 +0000
ROA not before: Thu 31 Oct 2024 14:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:fa:d3:17:0f:73:19:62:31:e8:df:9a:a2:b5:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Validity
Not Before: Oct 31 14:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d9d12b4a943918e80936ba3594982a71dc99c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:d8:d5:0e:76:58:9e:86:42:98:61:07:b3:
81:07:c1:3a:f9:64:2d:d2:13:6f:f7:e4:7a:a2:2e:
4a:c6:1d:5f:7f:56:ba:58:b0:58:3b:a0:a3:e5:06:
5c:a8:88:6c:07:6f:2e:01:0c:c7:2f:6f:4c:82:a2:
ed:aa:53:65:0b:ea:c2:d3:81:34:9e:44:1b:3c:95:
29:47:50:b9:0e:05:27:2e:b8:02:2b:40:ac:7a:ec:
73:b9:76:22:0a:61:33:30:5f:86:72:d1:80:e2:e3:
48:ed:fd:f6:e8:35:72:13:7f:f5:96:53:01:c0:36:
cc:39:4c:6e:8a:fb:ea:08:0e:b2:7d:c3:0f:f0:62:
cd:65:96:c7:4d:10:40:c8:ae:0b:e5:e1:6a:31:7b:
62:c3:79:6e:07:87:fd:fd:c0:41:1f:78:a6:32:e0:
3f:01:bd:28:cb:fb:9b:8d:f7:70:b6:1a:c6:de:9e:
18:32:dc:c5:cc:5e:45:7e:e5:d3:af:f7:aa:58:f2:
06:e9:2b:79:d3:51:de:d2:34:7b:f3:dd:19:f6:49:
b5:cc:4e:c2:f0:9c:82:6b:e1:cf:07:6c:2c:4f:48:
ae:51:ab:62:84:ad:e4:04:33:2a:6a:ec:73:68:21:
49:d4:0e:19:71:e7:db:32:b3:0c:93:3b:d0:71:f4:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:12:B4:A9:43:91:8E:80:93:6B:A3:59:49:82:A7:1D:C9:9C:29
X509v3 Authority Key Identifier:
keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/bZ0StKlDkY6Ak2ujWUmCpx3JnCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:be:a0:18:54:1f:4f:d6:7c:22:0e:7f:a0:1e:b4:2f:60:38:
83:2c:4c:70:4c:85:d7:fd:4d:19:0c:03:68:70:7d:c9:a0:f4:
54:1e:7a:04:66:11:23:5d:b2:f5:a0:79:bf:2f:4a:70:44:67:
0a:86:ca:a4:9b:1e:55:ae:b9:77:b0:c7:fd:1c:d5:29:a2:0b:
53:96:04:1f:25:7c:c4:d2:d8:da:7c:15:ef:40:53:00:5f:05:
8e:79:32:46:22:30:34:74:cb:3c:33:b9:c8:32:ac:f6:12:6c:
bd:91:2d:99:f9:3f:2f:2c:52:fb:78:f4:fa:d0:70:db:5a:70:
26:1d:68:4c:b2:f5:57:a4:71:5c:1b:a1:9c:52:e5:b2:cc:50:
2c:6a:a0:08:c4:d5:77:de:57:77:fb:ac:83:a4:b5:be:c2:7a:
0f:30:bb:9f:52:07:c0:bc:a8:92:e3:a6:02:54:b0:20:a4:0c:
5c:84:fa:b5:7e:ac:e4:5b:fe:d0:f5:8b:9a:04:d3:59:80:a3:
12:70:40:ee:31:88:94:ae:09:0e:45:95:cd:00:5c:9b:96:99:
d2:40:52:4b:36:23:af:6b:04:3b:1c:47:f3:e9:0f:2b:87:c0:
29:8c:29:75:43:0c:2f:eb:7d:a3:e4:0c:40:f3:a3:1a:7e:78:
2f:46:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:24 2024 by rpki-client on console-fra.rpki-client.org