Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/1oP30-n66JAbxzfbXjfsKSUCjwk.roa
File: 1oP30-n66JAbxzfbXjfsKSUCjwk.roa (raw, json)
Hash identifier: J35V7dlD3NbF5YwG6Gx4HPlOLJULXuBlS4ow9BNPLdY=
Subject key identifier: D6:83:F7:D3:E9:FA:E8:90:1B:C7:37:DB:5E:37:EC:29:25:02:8F:09
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 018EF52461EFDA0FF47200066C3DAE093156
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/1oP30-n66JAbxzfbXjfsKSUCjwk.roa
Signing time: Fri 19 Apr 2024 06:56:25 +0000
ROA not before: Fri 19 Apr 2024 06:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202710
IP address blocks: 185.9.139.0/24 maxlen: 24
2a0c:b600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:24:61:ef:da:0f:f4:72:00:06:6c:3d:ae:09:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Apr 19 06:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d683f7d3e9fae8901bc737db5e37ec2925028f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:a5:10:53:ac:65:ec:7d:7b:74:83:bb:8a:
01:40:15:9a:41:c0:5b:88:cd:e7:55:b4:97:f6:94:
a9:7a:36:14:2a:71:15:ee:c0:d5:4f:d4:88:a3:8a:
a2:32:e3:dd:3a:c2:e8:00:7d:e8:0c:2a:62:8e:26:
2b:2f:fd:9f:52:57:be:59:17:84:2e:69:1c:2b:cd:
db:cc:cd:13:77:92:46:a2:48:20:e8:a0:28:33:d2:
7a:e3:dc:ec:96:67:6b:9a:67:f7:3a:23:f1:4f:84:
4b:ca:eb:86:6a:af:c3:29:85:c3:dd:b2:bf:1b:18:
c0:12:94:05:6a:72:4d:ce:cf:77:20:8c:15:75:34:
eb:d1:7f:4d:17:ea:8d:80:d8:63:a7:c2:e5:42:af:
9d:97:6d:e9:2f:df:6b:ec:78:ad:98:5f:ab:1b:a9:
32:cd:06:0f:0b:f7:10:96:84:54:b2:35:f5:0e:6b:
b6:0d:a5:69:da:a8:ce:f9:3d:ac:e8:bc:e0:bd:1f:
bd:c1:b0:e8:2e:76:74:74:e9:07:b6:3e:1d:1c:75:
9f:41:98:35:58:51:ed:d5:58:b7:e8:76:8a:c8:7b:
46:1c:f2:34:ac:e0:5a:10:31:86:99:2d:74:32:b9:
f9:44:2b:b8:52:8e:27:82:b3:b1:6d:01:b0:aa:23:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:F7:D3:E9:FA:E8:90:1B:C7:37:DB:5E:37:EC:29:25:02:8F:09
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/1oP30-n66JAbxzfbXjfsKSUCjwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.139.0/24
IPv6:
2a0c:b600::/29
Signature Algorithm: sha256WithRSAEncryption
99:51:45:ca:f5:e1:d3:f7:51:12:c1:6b:d7:d8:af:13:cb:18:
5c:35:1f:97:e1:a8:47:4f:e5:18:26:6f:f1:63:35:44:a7:fc:
dc:d8:e5:fe:f9:91:1d:0a:3d:ba:55:8a:e2:99:4c:2a:64:23:
b9:ea:8f:8f:89:85:cc:be:98:63:fd:b2:45:47:ba:5b:6d:0f:
61:2c:47:2d:2c:21:c6:63:3a:7f:74:4a:da:dd:14:82:d9:5e:
a4:02:b2:6c:56:5f:cd:79:d0:a5:37:73:55:21:a0:9e:76:8e:
5c:24:5d:79:8e:51:55:cd:2b:ac:1b:81:a5:18:bd:d7:13:d9:
35:19:4a:ab:cf:a9:4d:7b:4f:ec:a8:d1:0e:e4:81:39:b7:e8:
fb:fe:bd:d1:e7:7c:45:45:c9:7e:a1:bd:09:fa:3d:76:68:38:
b2:2c:dc:95:14:e6:a0:df:9a:58:b9:f6:6e:c8:e6:44:05:34:
43:9a:77:86:1a:da:9d:58:7a:33:d9:d0:4b:78:67:c3:0b:01:
f8:42:8b:ae:3f:56:ed:16:b1:58:2c:e3:b1:01:30:0a:6f:6f:
f8:24:3f:38:bd:c7:45:06:31:75:e1:ad:87:90:49:fd:4a:f4:
9e:42:e2:2b:1c:42:b3:83:43:d8:36:39:cf:10:4c:fe:b5:68:
30:2d:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:07 2024 by rpki-client on console-ams.rpki-client.org