Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/81MLV2nKZb1a29pz0Vx66TE4Yvo.roa
File: 81MLV2nKZb1a29pz0Vx66TE4Yvo.roa (raw, json)
Hash identifier: 83OVzQIQn4VUNLjFKHoB+ksGVxDW5jNoAa1y9cqpCR4=
Subject key identifier: F3:53:0B:57:69:CA:65:BD:5A:DB:DA:73:D1:5C:7A:E9:31:38:62:FA
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 018CC86F00ABE94BF8E7FD6D78F83D0C5861
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/81MLV2nKZb1a29pz0Vx66TE4Yvo.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 27647
IP address blocks: 185.148.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:00:ab:e9:4b:f8:e7:fd:6d:78:f8:3d:0c:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3530b5769ca65bd5adbda73d15c7ae9313862fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:59:85:28:e6:e1:19:bb:e9:73:33:4d:c1:
88:96:94:ae:32:7a:6e:b8:8a:46:50:06:a0:0c:23:
40:e5:41:7a:7e:69:b1:34:35:0d:44:fe:52:38:e4:
40:f0:22:fe:00:2e:07:57:40:d3:1f:1f:bf:cf:ef:
76:42:63:78:5c:e4:bf:20:03:7d:b2:05:10:34:1a:
f6:b1:09:bf:1d:1b:d1:da:ad:20:a9:5a:f1:42:3f:
97:cd:61:67:52:09:65:a1:f7:0f:d4:31:6e:3c:ae:
20:72:2a:89:3c:9e:78:b8:78:dc:06:f8:63:5d:dc:
f6:3d:96:53:fb:c8:a0:61:3e:76:41:e8:c9:8b:2c:
d9:56:ec:dd:a0:d4:66:0b:eb:cf:8f:f5:7b:32:51:
26:f8:c3:f1:4c:ed:60:94:41:96:b2:71:43:b3:e2:
42:4d:56:33:a7:37:05:8b:8c:62:f7:05:b6:3b:a1:
55:f7:15:d7:99:ba:36:a3:89:61:c7:46:ee:17:53:
c6:0c:3b:d0:33:4f:f2:62:81:2b:d8:04:25:6b:0e:
0d:6a:18:c4:bf:7b:c6:fd:bb:ef:1b:94:78:74:a6:
01:06:af:03:14:08:c3:5e:b3:e3:21:95:b9:8d:7b:
e4:3f:41:74:ed:24:84:06:9e:15:46:2f:e9:9f:23:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:0B:57:69:CA:65:BD:5A:DB:DA:73:D1:5C:7A:E9:31:38:62:FA
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/81MLV2nKZb1a29pz0Vx66TE4Yvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.180.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d6:c0:09:1a:aa:ec:35:a4:38:87:ed:1d:85:58:02:4b:90:
87:dc:9a:f4:e6:98:ad:66:e4:fc:86:d2:4f:b3:fb:62:a1:2a:
f3:59:15:9a:ef:dd:49:35:39:c7:1a:75:9f:39:93:4d:64:a9:
00:b9:2a:cb:00:be:24:e3:91:c7:4d:b1:e7:25:00:d1:e8:0f:
f6:92:30:6b:4d:6f:9e:06:b2:0b:67:be:af:0b:f7:6f:9e:26:
4d:7e:62:cc:14:d4:45:f5:0f:24:ac:f9:50:7e:de:fb:b5:6a:
ca:a3:90:43:49:ec:4a:ee:92:65:62:18:07:99:87:0e:25:98:
e4:0b:b8:9c:9d:2b:dc:28:2b:80:1a:78:98:a5:9e:ad:df:50:
d4:25:8b:29:72:bd:a1:2a:48:f1:92:63:be:98:57:04:cf:9f:
a8:cd:58:be:d5:e3:53:1d:16:fe:f1:5e:81:e5:86:1d:3d:38:
9c:e1:49:e5:84:b8:c4:8b:90:74:85:36:e7:d5:98:b4:af:22:
5b:f2:84:65:3c:62:41:c9:48:f3:ce:e4:83:72:6f:f2:9b:55:
32:80:da:44:b8:04:20:e0:c4:dd:fa:43:fd:4f:13:c7:7a:c8:
c1:6c:9a:6a:35:bf:2f:d5:8d:75:b1:51:b9:12:02:d7:de:9d:
c2:51:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:25 2024 by rpki-client on console-ams.rpki-client.org