Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/veXR694RpTaGLsFjW-zoEruhfho.roa
File: veXR694RpTaGLsFjW-zoEruhfho.roa (raw, json)
Hash identifier: DeMrb4CRODZBtoVn7hjTBzjJTYDJC7HuVnkbEtg4LUQ=
Subject key identifier: BD:E5:D1:EB:DE:11:A5:36:86:2E:C1:63:5B:EC:E8:12:BB:A1:7E:1A
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01930305083C956CA015064945F1FFF3C739
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/veXR694RpTaGLsFjW-zoEruhfho.roa
Signing time: Wed 06 Nov 2024 19:48:01 +0000
ROA not before: Wed 06 Nov 2024 19:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 185.177.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:05:08:3c:95:6c:a0:15:06:49:45:f1:ff:f3:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 6 19:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde5d1ebde11a536862ec1635bece812bba17e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:c7:47:30:62:b3:79:d6:d5:a0:50:bb:5f:
28:ec:c2:22:1e:f9:2a:ad:ee:c9:b8:ba:29:b8:6c:
3e:76:77:5b:90:d1:85:e8:a5:e0:12:8c:b4:d5:3d:
4d:3b:f7:95:d8:49:16:73:3a:e9:48:c9:82:b7:f0:
65:e6:3b:9b:4a:00:43:64:cb:1f:9f:2e:9d:82:19:
19:a4:9e:a8:8a:37:b6:5d:58:f5:3c:b8:61:e1:f7:
ba:14:56:61:1f:d5:59:1b:4a:0d:1a:4f:58:02:31:
5c:61:c0:a9:9d:5c:2b:31:ad:8e:ee:da:c1:2a:50:
73:a4:9e:f8:41:4b:cf:ba:51:ae:ff:3b:12:b9:8e:
0c:73:ee:5f:99:f3:d8:be:65:a5:f8:32:cb:fb:3e:
50:06:b8:a6:f0:9f:66:d9:a3:d7:59:99:bf:28:b0:
bc:01:65:95:69:a3:ce:f9:60:b9:8f:67:68:c4:51:
91:6d:76:cf:b7:e0:1d:1a:2c:6e:cd:be:7a:ca:4d:
56:69:e2:b9:53:4e:98:be:1a:b5:ae:16:17:a5:1a:
c6:9e:73:c0:27:e9:65:33:c7:9c:5d:da:1c:e2:1d:
2e:39:3e:c3:4c:b7:db:6a:bd:0b:c8:43:82:77:c5:
64:3c:d3:c8:a6:88:77:f4:08:08:63:4e:23:aa:70:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:D1:EB:DE:11:A5:36:86:2E:C1:63:5B:EC:E8:12:BB:A1:7E:1A
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/veXR694RpTaGLsFjW-zoEruhfho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:52:8e:81:9a:52:ac:58:5d:e9:11:df:47:cf:94:b3:f0:46:
71:ed:d4:ef:1f:8f:ef:6e:ee:e2:1b:38:35:d2:a4:76:61:a0:
8a:e8:eb:d8:61:bc:73:8f:67:a3:ce:36:fb:34:1b:21:a7:d4:
ac:47:3b:21:90:40:8e:d6:c7:ba:ae:e9:a9:8e:c9:6f:1a:11:
ac:ff:91:7b:3f:25:d5:c4:3a:f2:13:66:67:f9:1f:40:f2:b9:
b0:87:52:ba:4f:13:75:0e:fe:b3:1e:eb:2f:15:ff:98:38:fb:
20:b9:37:a6:7e:80:30:06:95:b6:97:ef:d8:e3:0f:56:11:5f:
5c:99:0a:ce:16:30:a4:bb:19:c1:8a:6a:75:d2:59:51:b1:d7:
18:ce:e9:b9:ac:f6:c6:0d:f1:43:54:ee:0d:08:a0:04:b8:1b:
4a:06:ea:46:d9:1b:54:64:aa:82:a9:5f:3d:f0:15:08:fc:46:
7f:63:ee:ff:fc:a5:96:57:3c:fc:67:d5:52:38:ef:23:56:3e:
27:bb:9f:d2:d9:9f:5b:55:81:b6:c7:60:18:f3:47:3a:b0:de:
6f:6d:a4:c7:61:1c:15:62:a9:92:4e:95:95:3a:c0:09:ec:27:
f3:7b:3d:6f:a1:c6:90:ae:5d:14:4b:ef:fe:cb:b3:6f:71:fa:
77:35:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:41 2024 by rpki-client on console-fra.rpki-client.org