Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-VlHkkesMzFxw23b_o2uUWK5iBA.roa
File: 1-VlHkkesMzFxw23b_o2uUWK5iBA.roa (raw, json)
Hash identifier: G4CFImzVUzMjyAhgD5lqjNhyNS/rznNFDzqmcBpwNAk=
Subject key identifier: F9:59:47:92:47:AC:33:31:71:C3:6D:DB:FE:8D:AE:51:62:B9:88:10
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0191366AF48192A467672A6408DF88C6EBF8
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-VlHkkesMzFxw23b_o2uUWK5iBA.roa
Signing time: Fri 09 Aug 2024 09:14:24 +0000
ROA not before: Fri 09 Aug 2024 09:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138985
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:6a:f4:81:92:a4:67:67:2a:64:08:df:88:c6:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Aug 9 09:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f959479247ac333171c36ddbfe8dae5162b98810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:f7:73:94:ba:a2:a6:a5:35:e6:b2:8b:0a:
68:39:31:51:e0:df:72:28:01:a7:ca:bb:66:1a:4b:
62:30:ce:2e:de:0d:f7:5f:f2:bd:99:64:af:89:03:
20:24:77:c8:2f:b9:90:0e:46:45:c1:28:5d:d9:08:
cd:a3:0a:1d:8c:93:5e:c1:2f:ee:b1:d0:ca:a1:92:
6c:95:65:78:c4:62:f8:25:d9:09:6e:8f:1c:a5:3a:
94:d5:a9:d0:22:7c:21:ae:f1:63:bb:5f:a1:5f:49:
cb:9f:28:89:8e:b1:05:0b:2b:35:8b:20:39:74:cd:
b0:97:30:ce:38:98:be:c7:a9:40:ad:16:f0:d3:67:
b2:ea:8b:f7:25:d5:d2:e3:3a:13:d1:14:c6:b3:ad:
aa:be:04:68:ad:f9:f0:a1:72:33:12:e7:88:38:61:
ff:42:d5:64:46:92:c1:cd:a1:2c:ed:cf:0e:0f:f3:
18:9a:05:b2:f5:46:11:3d:43:7f:fb:03:06:1a:01:
79:5e:30:74:1c:6b:28:f6:cb:ea:77:32:3e:9d:ef:
54:64:33:5f:07:a7:c5:81:bb:7c:a7:6b:fc:4e:d6:
aa:b0:46:cf:df:8e:23:b9:3b:cb:1c:47:2e:e2:0a:
4f:47:14:60:3e:e2:e0:9b:a2:2c:61:24:57:d0:c3:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:47:92:47:AC:33:31:71:C3:6D:DB:FE:8D:AE:51:62:B9:88:10
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/1-VlHkkesMzFxw23b_o2uUWK5iBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:50:c4:32:e3:c1:30:b9:bd:24:eb:3c:28:63:2d:32:af:46:
7a:65:4e:38:dd:52:7a:e5:fe:2e:0b:0e:7b:46:c3:f9:50:cf:
2c:7d:93:07:a6:27:15:f2:1e:24:d9:f8:8c:25:bc:8e:ef:7f:
8f:ef:23:ed:f3:18:4d:da:95:15:d3:be:a0:7c:ff:e3:7f:37:
5d:66:c2:ed:24:e1:25:b5:a9:6f:b0:0b:30:23:3d:ab:78:95:
98:6e:92:fb:a4:ca:e0:f1:5e:6b:d3:67:06:b2:fa:f3:86:25:
da:0a:04:05:b9:f7:13:72:d3:ce:b9:60:05:6a:cb:25:6c:19:
d2:af:64:71:a9:e9:8d:3b:bf:b2:ff:ab:bd:f6:97:2e:e2:a0:
44:ea:66:16:a6:ed:d8:74:f2:ba:55:8b:68:50:cb:dd:2f:d8:
b1:09:11:46:80:ef:b5:bd:c7:d4:b2:ee:74:cf:89:72:ac:72:
cf:ca:ac:5d:6a:7f:87:bb:9c:ae:7e:46:c8:03:d1:65:29:13:
02:ba:17:d2:f1:0c:55:16:30:cd:02:16:71:ff:94:0c:57:54:
39:53:2b:49:8c:92:13:d1:c6:51:7b:6c:f0:8e:2f:4e:fb:d3:
61:f1:9b:e2:1c:b4:2f:6e:ea:11:fc:25:d6:78:2d:49:22:42:
42:81:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:14 2024 by rpki-client on console-ams.rpki-client.org