Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/gojNHpj46uDqsEnrNt_pEMKRTYQ.roa
File: gojNHpj46uDqsEnrNt_pEMKRTYQ.roa (raw, json)
Hash identifier: cNBsHoI0ZaBUjB+vbHIDSFg/HyQmBSbW2GFsYbv2rUg=
Subject key identifier: 82:88:CD:1E:98:F8:EA:E0:EA:B0:49:EB:36:DF:E9:10:C2:91:4D:84
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 018CC725C26A38E4652DC2D2E73715C61762
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/gojNHpj46uDqsEnrNt_pEMKRTYQ.roa
Signing time: Mon 01 Jan 2024 22:29:49 +0000
ROA not before: Mon 01 Jan 2024 22:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 185.213.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:c2:6a:38:e4:65:2d:c2:d2:e7:37:15:c6:17:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jan 1 22:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8288cd1e98f8eae0eab049eb36dfe910c2914d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:87:34:f3:73:10:d3:79:8b:ad:93:db:b6:
13:51:cd:8b:e9:07:61:5f:15:8c:79:bc:9c:f2:25:
36:a7:6b:0e:1b:4b:5c:56:62:38:d3:95:c3:70:39:
f9:25:15:d7:f3:65:ad:c6:40:5a:3a:25:6b:74:72:
3e:52:83:7e:d3:6e:0f:bf:4a:70:63:70:a8:89:06:
2e:5f:6f:b7:09:11:37:56:5e:d4:95:4a:96:d6:7d:
1e:ca:ab:01:7c:e7:76:ea:ee:10:29:7d:48:3e:f4:
30:dc:ff:a8:c0:93:cf:42:12:f0:bd:e3:dc:96:4a:
0e:f5:8a:f8:90:62:12:53:52:00:6e:9b:3f:bb:06:
c5:7b:90:cc:c0:0e:ec:a2:d9:fb:c0:40:eb:c0:f6:
1b:84:b3:71:de:bb:92:71:c2:3e:48:22:44:50:e9:
7d:5d:ef:17:64:ed:f0:25:ec:ea:7f:f1:25:ff:39:
25:d2:d9:50:1e:9a:f6:99:ed:51:80:68:0a:bc:db:
b0:42:88:e5:07:62:61:1d:8f:01:ee:2b:ce:ce:ff:
1b:94:46:50:24:1f:72:0c:0a:41:f0:27:53:58:2f:
85:a5:86:1c:95:4b:97:27:42:e2:09:d9:48:4a:19:
35:f3:38:00:13:01:74:47:6e:18:75:ff:8f:97:b6:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:CD:1E:98:F8:EA:E0:EA:B0:49:EB:36:DF:E9:10:C2:91:4D:84
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/gojNHpj46uDqsEnrNt_pEMKRTYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5e:53:15:cd:87:98:ae:c2:56:4a:0c:37:98:4b:f6:fb:58:
99:0e:94:f3:ef:ce:4d:5e:1e:78:9c:d0:8c:a4:d8:d3:35:2f:
99:70:31:a8:6c:4d:bc:89:3b:0c:d1:d7:2b:13:ce:a0:04:e5:
b8:bd:de:85:cd:3f:2f:24:9e:be:40:b0:c2:87:d7:29:5c:ce:
c1:aa:c5:72:f9:7a:78:7e:cf:91:8b:c7:07:63:d7:eb:88:93:
da:f0:58:66:1f:5a:24:dc:d9:43:bd:64:c4:72:a0:6b:d2:cf:
34:4c:45:11:6a:96:d4:60:01:e8:13:c9:4e:57:2b:de:8f:6d:
0a:d6:47:a9:49:7f:07:ab:72:ce:a3:a4:01:a5:0c:b7:c2:3c:
36:d7:1d:bc:62:14:99:83:b8:63:ef:47:56:c7:09:42:2d:e2:
85:c4:2a:bf:70:74:cc:7d:15:e9:c0:f8:e5:c8:c8:64:de:13:
c7:5a:69:4e:33:84:62:30:3c:24:48:86:7f:58:c4:e7:23:de:
11:4c:97:dd:ed:04:3a:91:ce:a4:d4:9d:9c:0c:70:b3:58:65:
2c:89:f9:c3:5f:40:99:7a:6b:22:bf:59:1e:06:20:2a:ee:9d:
aa:0e:42:4a:3c:65:71:2d:d3:2b:1b:3a:37:cc:6f:bf:ee:2c:
21:9e:bb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:31 2024 by rpki-client on console-ams.rpki-client.org