Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/C9TGRnnvSDh_0Pi6aTVprk4pmBQ.roa
File: C9TGRnnvSDh_0Pi6aTVprk4pmBQ.roa (raw, json)
Hash identifier: upDK1gMSAAVdv2JYoqSRa8xfQxtGhGIuUSOSOhjuDFI=
Subject key identifier: 0B:D4:C6:46:79:EF:48:38:7F:D0:F8:BA:69:35:69:AE:4E:29:98:14
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 018CC5011CD50EA9B6BEB862A57CE3029A4C
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/C9TGRnnvSDh_0Pi6aTVprk4pmBQ.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208596
IP address blocks: 185.191.250.0/23 maxlen: 23
185.191.248.0/22 maxlen: 22
185.191.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1c:d5:0e:a9:b6:be:b8:62:a5:7c:e3:02:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bd4c64679ef48387fd0f8ba693569ae4e299814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:ad:c9:74:4c:fd:aa:47:7d:95:de:09:bd:
9a:81:d8:c9:6e:d8:24:85:fb:ec:45:c3:27:62:ae:
46:e6:b8:0a:70:b1:4b:d9:ed:ff:ac:5c:aa:dd:45:
49:e5:37:62:96:b4:68:24:3a:8b:3c:e1:7f:aa:47:
00:69:88:08:00:20:f2:bb:01:88:e3:b1:b5:a3:b2:
ca:66:a9:a0:77:b3:64:2f:8f:c6:eb:64:1a:a8:b6:
a7:17:ab:71:68:ab:5b:07:9a:25:10:f9:0c:79:84:
a8:04:a6:31:57:5f:bd:0d:8b:73:fc:ae:f8:86:f3:
99:e4:f5:c1:2c:8d:06:ac:74:a9:d5:a9:a0:ee:dc:
d9:0b:ac:69:8d:a3:a3:00:e2:c1:14:51:77:01:e6:
c9:ca:35:a9:1a:0d:8a:05:02:61:9c:39:e7:b0:7b:
34:d3:93:de:9f:a8:9c:8b:5e:de:29:6c:92:9b:b4:
43:4e:b1:6d:b3:f4:1c:1c:a9:c7:f6:88:34:1d:fd:
a2:dc:28:3e:cb:6e:0e:f7:34:c8:2d:94:f7:35:32:
82:ec:26:2f:02:79:7d:af:5f:89:fe:a8:76:aa:89:
54:6e:c3:9a:74:cd:c2:1a:7c:3d:d2:ee:12:23:0b:
c8:55:56:ad:19:d7:2f:8f:a0:df:5c:4b:0a:56:34:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:C6:46:79:EF:48:38:7F:D0:F8:BA:69:35:69:AE:4E:29:98:14
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/C9TGRnnvSDh_0Pi6aTVprk4pmBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.248.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ac:db:c2:8c:1a:0b:d5:48:ed:97:2f:c3:7e:4d:48:b8:14:
1f:6e:1b:95:7e:ac:2b:45:f7:05:ac:d1:c6:3b:5c:6a:a3:bf:
c3:1d:98:2c:61:35:b1:85:45:24:d8:0f:5f:39:a6:0e:f2:f6:
e7:35:42:47:38:8f:48:1e:3f:19:bd:3c:2c:13:95:86:b2:1c:
dc:6f:31:37:52:a2:90:c8:e5:3a:c8:75:20:3f:07:aa:99:26:
65:fc:d3:c3:ca:0b:59:4d:ba:d2:c8:74:12:4a:e2:3a:05:72:
29:e0:54:9d:ba:01:f0:bd:ea:6d:97:49:5a:c6:bc:57:dd:05:
d9:9f:12:e7:b0:d8:f0:6f:af:cc:17:f1:f8:ea:62:8a:87:8d:
42:3b:f3:33:4e:47:5e:fa:76:88:e2:f8:2b:96:d5:8c:ff:0d:
75:8b:a9:81:1f:be:a9:66:f4:4f:2c:78:5e:b6:88:19:b7:79:
40:52:b3:be:59:89:d5:1a:7d:6f:14:2a:32:07:5c:9d:ba:31:
99:1d:76:8c:3b:69:8b:a2:ab:d1:ee:00:7c:3d:5e:9a:64:19:
4f:08:29:ad:ec:79:5d:ad:4d:11:ba:69:4f:40:76:6d:6b:46:
b3:b7:b8:4e:4e:b2:5d:8f:88:60:e0:f0:38:dd:b0:ec:01:70:
1b:bf:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 06:37:28 2024 by rpki-client on console-ams.rpki-client.org