Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/tRz-k6bZaQu4ryvv1CWEm9c9yAI.roa
File: tRz-k6bZaQu4ryvv1CWEm9c9yAI.roa (raw, json)
Hash identifier: GRcO1x17toEBp4ed8cQUWN/o6u5F6TmZT6z9WwphONI=
Subject key identifier: B5:1C:FE:93:A6:D9:69:0B:B8:AF:2B:EF:D4:25:84:9B:D7:3D:C8:02
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01929ADC880E887DA5FDA4263208DF204191
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/tRz-k6bZaQu4ryvv1CWEm9c9yAI.roa
Signing time: Thu 17 Oct 2024 14:23:16 +0000
ROA not before: Thu 17 Oct 2024 14:23:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6797
IP address blocks: 185.175.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:dc:88:0e:88:7d:a5:fd:a4:26:32:08:df:20:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Oct 17 14:23:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b51cfe93a6d9690bb8af2befd425849bd73dc802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:1e:c6:ae:a5:d0:06:be:8c:02:2b:81:f6:
f1:54:aa:76:27:c6:c8:3f:4c:fc:cc:0b:41:16:51:
34:1a:ac:3b:3c:1e:bd:a0:28:85:5b:59:67:12:2b:
5d:9c:23:90:04:12:85:fb:6d:95:02:57:a0:6d:b3:
6f:1d:3c:69:d7:e8:7f:0b:aa:e5:0a:93:f3:93:91:
97:04:99:65:ae:a5:d5:43:9d:b1:5d:81:9d:50:3d:
f3:4e:8d:65:b9:a3:d3:a7:ab:4b:4f:1f:f0:2c:14:
d1:25:95:78:fc:40:d8:ee:67:4a:3b:a5:3a:82:55:
4b:58:cd:2b:ea:4f:c7:40:e4:73:ac:34:5f:7e:d8:
fc:9d:61:36:02:12:dc:2f:81:23:35:36:a7:62:af:
aa:86:fb:a4:ee:5a:61:4c:53:81:74:ed:f4:d8:88:
f1:db:6b:e4:7d:bc:06:72:70:da:86:55:8b:b2:f1:
43:68:64:e3:e7:33:e5:ed:5b:24:03:a4:40:b1:6d:
8a:de:a0:65:f4:46:69:f5:f0:25:b5:a3:55:6e:d9:
77:35:82:45:0b:49:cc:b2:02:be:c3:6b:74:ce:84:
2e:a7:30:ff:c0:cf:2e:10:8c:82:b3:f8:57:b4:0d:
9d:ff:0b:ca:ad:29:30:db:3a:8d:5b:e5:a8:ac:b7:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:FE:93:A6:D9:69:0B:B8:AF:2B:EF:D4:25:84:9B:D7:3D:C8:02
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/tRz-k6bZaQu4ryvv1CWEm9c9yAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.132.0/22
Signature Algorithm: sha256WithRSAEncryption
27:7e:8e:20:04:d5:f7:81:f5:da:f7:5e:2b:31:33:db:5c:6f:
f7:3d:19:64:ee:9d:85:a0:b1:b3:59:28:de:d8:db:23:84:0c:
6b:23:43:12:7c:87:ee:eb:80:89:8a:24:9e:0b:a8:b6:f1:12:
39:a5:e9:e8:37:b7:94:4c:d6:fb:00:a8:90:77:b8:b4:39:a2:
5e:af:32:27:ac:4a:d6:15:a4:ab:9e:7e:53:df:f8:04:ea:9a:
03:81:18:a6:c8:71:8a:67:04:db:86:8e:fb:df:d6:43:76:05:
d9:4a:2e:11:94:83:73:7e:e6:d7:73:97:b5:a7:68:4b:37:1f:
3b:0c:85:d7:18:17:33:e2:5c:fe:b1:98:e2:3b:bf:2c:ea:2d:
81:bb:2a:a0:bd:98:30:82:cf:8e:80:5a:36:c1:21:36:19:ab:
4d:b6:ce:6b:e8:40:43:82:dc:e2:da:16:15:3d:36:15:c8:d4:
81:07:07:0a:9f:13:b7:89:5d:bc:d9:7a:12:1f:0a:0a:c5:7d:
7e:eb:67:76:b8:b0:a6:93:70:93:ab:1b:43:7e:d1:60:34:6b:
54:28:bd:22:89:1d:a0:94:d2:51:47:88:94:5e:1a:4a:6e:89:
03:f9:9c:54:67:8d:6e:0a:a6:a7:ff:e2:15:03:18:f9:2d:dc:
96:fe:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:49:03 2024 by rpki-client on console-ams.rpki-client.org