Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/0mUrGIl_SuVvOsX5QzyB5M_3LAc.roa
File: 0mUrGIl_SuVvOsX5QzyB5M_3LAc.roa (raw, json)
Hash identifier: JmspW6877/u1uW9Ksmq8hEobPZONwmvHytSP0wRbHsM=
Subject key identifier: D2:65:2B:18:89:7F:4A:E5:6F:3A:C5:F9:43:3C:81:E4:CF:F7:2C:07
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 018F59A8A965E0EC7B116E8C519F1E523496
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/0mUrGIl_SuVvOsX5QzyB5M_3LAc.roa
Signing time: Wed 08 May 2024 19:22:56 +0000
ROA not before: Wed 08 May 2024 19:22:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 185.135.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:a8:a9:65:e0:ec:7b:11:6e:8c:51:9f:1e:52:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: May 8 19:22:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2652b18897f4ae56f3ac5f9433c81e4cff72c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:89:ae:e8:84:e7:69:52:3f:17:94:60:14:
19:56:a9:91:42:7e:10:c0:7a:2e:e1:61:e1:00:91:
66:2d:18:34:78:25:a5:03:f5:9c:ba:46:b5:96:74:
6f:ef:36:43:b9:07:e0:94:2e:3e:0c:c5:0e:36:cb:
70:d8:ca:0e:dd:a5:70:e3:87:f7:4b:6b:60:13:e8:
de:75:a8:1e:ba:4c:47:16:43:49:e0:9a:d4:c3:5b:
ff:7e:e2:59:d4:fa:85:bc:ba:d4:1b:13:89:85:8e:
87:a8:54:f9:79:d7:3a:15:7c:82:1d:3f:f7:dc:6d:
72:d8:ca:98:4c:3e:82:21:03:7e:eb:b6:e6:da:b4:
75:80:16:97:6f:a1:95:dc:1f:35:73:07:3d:0d:b6:
a9:55:b9:b9:10:d3:9b:10:c6:68:76:c5:0e:e9:30:
31:10:24:17:49:a8:d5:56:54:0b:24:f0:0c:45:a1:
43:e7:94:f1:8d:74:dd:7f:92:79:a6:72:ee:7b:81:
57:63:eb:90:cc:72:78:cf:2e:6a:be:ef:5b:79:5e:
05:c6:2b:d6:f3:ba:48:cd:63:84:5b:00:bd:1f:a2:
6a:dc:31:d0:1f:e3:8a:00:da:88:16:e6:d2:bb:79:
04:d0:20:80:48:bc:43:41:45:83:b9:16:a4:d2:98:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:2B:18:89:7F:4A:E5:6F:3A:C5:F9:43:3C:81:E4:CF:F7:2C:07
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/0mUrGIl_SuVvOsX5QzyB5M_3LAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3f:b8:df:20:9e:52:69:8a:f9:2d:c1:6e:36:f5:7a:6c:e1:
f1:d9:51:7b:8f:a5:64:de:92:cc:d3:4c:6a:24:c2:a5:bc:a1:
cd:1b:7e:28:31:26:e7:41:f8:ad:d2:81:8a:15:fb:8e:88:cf:
ce:8e:60:51:fa:63:2f:de:ed:35:a4:3f:13:2a:06:f2:8e:e2:
55:e3:85:ff:c1:16:4e:65:ac:96:cd:39:60:f2:7b:40:f6:4f:
c0:b2:83:0d:00:dc:2e:0a:ba:97:4c:dd:78:39:fe:ed:cb:40:
ea:72:a5:4b:1e:31:1d:15:f2:c1:a8:f9:0d:2c:42:b0:8a:bb:
1e:cf:a1:ed:80:db:72:9e:90:33:13:e5:79:f3:85:93:fb:28:
07:2b:42:ba:fa:99:86:80:3d:a8:7c:ff:97:3d:65:96:41:f8:
3f:f7:ac:ed:76:1e:1a:13:c1:a6:01:5a:f7:58:9c:20:1b:cd:
f1:04:04:9f:e0:30:cd:d9:76:39:8d:65:7d:ea:d8:6c:b3:7b:
a1:ba:4b:3f:2d:97:bd:2b:58:50:60:a8:69:dd:69:d8:1c:8b:
94:d9:f1:1c:bc:a0:99:45:33:84:76:f9:57:22:ee:33:60:ce:
59:e9:ae:f0:3a:d0:3c:f1:94:7f:fb:c0:32:0f:21:15:3d:47:
77:9b:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:47 2024 by rpki-client on console-fra.rpki-client.org