Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/uD8wVPvtAG-eveV4AaRGXmCZUoA.roa
File: uD8wVPvtAG-eveV4AaRGXmCZUoA.roa (raw, json)
Hash identifier: gZuAmzY/VSaon7oGmg5rE+4Ba4gDdu2i7EBAqLVBC8Q=
Subject key identifier: B8:3F:30:54:FB:ED:00:6F:9E:BD:E5:78:01:A4:46:5E:60:99:52:80
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018CC4931E1F84D1C5DA200C22EE12B217CE
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/uD8wVPvtAG-eveV4AaRGXmCZUoA.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205833
IP address blocks: 188.0.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1e:1f:84:d1:c5:da:20:0c:22:ee:12:b2:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b83f3054fbed006f9ebde57801a4465e60995280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:72:2d:e1:40:65:eb:9d:e6:e5:34:fa:66:
94:5a:1f:13:b1:b0:dc:af:d9:1f:34:fe:0c:34:bd:
0f:a1:b8:d6:07:5d:98:42:23:07:e8:33:46:53:f0:
7e:54:ae:8d:00:3c:8e:d8:a8:d9:ba:2a:05:7d:c0:
0d:f8:92:65:9e:88:4d:1f:30:ef:8d:ec:70:5e:8b:
f9:71:0c:f0:03:6c:d4:79:b4:95:d2:5e:47:77:5b:
61:eb:c2:1f:0e:e1:57:df:83:87:c9:41:50:dd:63:
be:81:c6:13:d8:b1:e6:43:e7:b7:5b:fc:a3:62:ea:
9f:98:13:91:60:8d:60:11:b0:af:d8:cb:1c:c0:a5:
93:eb:1d:3d:78:2c:33:fd:41:88:df:b1:be:fe:47:
85:1d:cf:da:c5:fd:8a:db:f6:7b:54:a9:b5:c5:71:
0a:62:db:ca:12:57:15:16:2c:07:c6:11:58:c2:fc:
5f:b6:5e:8c:10:77:1b:63:32:80:99:48:e2:fe:f3:
82:70:e1:c3:b3:aa:ff:4f:cf:8a:1e:c3:fb:02:77:
7d:0b:00:3e:4f:38:28:ab:79:56:e7:4c:84:b8:26:
dc:0c:e9:d1:33:a4:f0:47:ac:7a:02:8e:18:52:30:
42:f2:95:f4:ed:09:38:65:f2:65:59:32:a1:15:54:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:30:54:FB:ED:00:6F:9E:BD:E5:78:01:A4:46:5E:60:99:52:80
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/uD8wVPvtAG-eveV4AaRGXmCZUoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.245.0/24
Signature Algorithm: sha256WithRSAEncryption
77:40:e0:c7:7a:04:a4:27:98:3f:ec:e2:e4:a9:ed:1d:13:2f:
3f:3b:11:4c:7a:c5:a6:67:e0:42:33:3f:ad:9b:41:9f:54:0e:
13:39:93:27:bd:42:79:89:d8:10:b5:6a:0a:8b:4b:e5:7b:84:
65:bf:dc:fa:b8:92:79:cf:47:7b:b5:19:c9:8b:98:e1:07:d0:
df:0a:a3:68:8d:a1:a8:c2:68:a5:1c:9c:fb:4f:86:37:e9:1d:
fe:a2:dd:8a:6e:52:e5:06:a2:33:bc:23:92:65:17:f8:01:46:
c9:44:9c:89:b2:75:56:a0:06:62:de:5b:6e:ea:21:64:a6:be:
ba:99:80:cc:ab:82:2f:a8:74:60:3f:c9:f3:65:f4:12:c8:7e:
91:6f:e5:01:53:a7:1a:7c:cd:a0:91:a3:88:ae:ac:44:58:cc:
70:a5:05:34:83:32:77:98:93:fd:93:7d:bb:99:7d:e2:94:6b:
28:e0:92:ab:3d:0e:35:60:5a:e1:a2:5d:f6:13:4a:7f:8f:57:
ed:c3:ad:b3:64:80:9e:d7:a6:f2:31:9e:a0:22:bd:ef:ae:a1:
d3:b2:68:f4:fa:a5:19:a8:49:4f:76:dc:b4:6b:69:2f:11:69:
3b:f4:61:4d:30:ee:38:24:3b:66:4f:4b:21:5d:10:e9:a5:22:
f6:65:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:18:56 2024 by rpki-client on console-ams.rpki-client.org