Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/7WmgXZpAKxveAgv_DDcoZ-M7Mrg.roa
File: 7WmgXZpAKxveAgv_DDcoZ-M7Mrg.roa (raw, json)
Hash identifier: QmFuuAe99xIyxMMTpuTkvSeUUALZP8+W3W7IH7OuQGY=
Subject key identifier: ED:69:A0:5D:9A:40:2B:1B:DE:02:0B:FF:0C:37:28:67:E3:3B:32:B8
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 01904947675BBE6F1E5423287E7AE82414E9
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/7WmgXZpAKxveAgv_DDcoZ-M7Mrg.roa
Signing time: Mon 24 Jun 2024 08:05:34 +0000
ROA not before: Mon 24 Jun 2024 08:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 185.158.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:47:67:5b:be:6f:1e:54:23:28:7e:7a:e8:24:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jun 24 08:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed69a05d9a402b1bde020bff0c372867e33b32b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:be:c3:af:0b:fe:c4:ec:2d:5e:24:4b:8e:
c5:42:47:86:d8:8d:e8:de:24:cd:b2:06:fc:80:c3:
06:10:fe:8e:14:6e:d2:8f:c0:8f:43:84:83:5d:9e:
63:5d:b5:b5:1f:72:b4:c6:21:69:da:9d:a4:11:52:
62:f9:58:24:21:1f:cc:4f:1f:b1:10:07:e3:d7:e9:
f2:1d:8b:18:fe:d7:a0:ce:19:69:b6:e5:b9:af:c3:
00:d3:b0:d8:49:69:a2:49:8c:9c:e2:1f:ab:e0:c5:
0e:7d:43:1d:81:38:a4:7e:e7:b1:5e:00:ca:32:f9:
c3:73:48:08:5f:32:73:34:41:ee:e1:52:ca:16:2c:
d4:c3:dc:dc:95:92:a0:22:3c:a9:e2:c2:84:7d:bd:
66:f0:63:b6:62:42:e5:f9:8a:5b:af:fa:c7:ad:0b:
35:08:8f:cf:24:ab:38:24:54:27:4e:93:5a:8c:7d:
36:24:3e:00:c6:f4:1d:20:13:63:76:e2:55:0c:57:
21:50:94:2b:25:34:44:12:df:63:b9:37:49:de:4b:
ba:c5:c5:2e:4e:df:47:82:a0:05:18:97:e9:73:83:
5f:f5:2d:96:2d:45:ce:5b:87:58:a2:d1:85:3b:f7:
d3:6a:df:45:d5:38:c3:07:a0:f0:32:37:15:04:3b:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:69:A0:5D:9A:40:2B:1B:DE:02:0B:FF:0C:37:28:67:E3:3B:32:B8
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/7WmgXZpAKxveAgv_DDcoZ-M7Mrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:68:24:81:6b:e0:61:17:1b:54:18:37:07:a3:5f:fa:96:2a:
e7:bb:11:b6:78:54:60:84:38:43:08:1e:c7:60:0b:3d:8e:01:
4b:cf:99:f3:25:be:bd:3c:e8:27:d0:53:f3:d8:40:11:e9:fa:
89:12:15:9d:7c:d7:17:a0:e0:43:db:0f:7c:63:5c:a8:ac:c7:
61:56:ef:48:28:46:26:5a:08:ef:fc:5c:d9:cc:e7:bd:21:e3:
17:f2:8e:c8:28:df:f8:63:cb:80:6d:22:de:c8:62:ed:03:e6:
2e:cd:a5:8b:42:46:80:21:cc:66:0c:74:99:cf:51:34:41:85:
39:d6:58:5e:fb:9c:0f:ca:bc:d1:4f:1a:6b:f3:76:93:83:bb:
ad:97:4e:1d:ed:fb:35:37:ad:53:01:55:f2:3e:47:61:65:71:
cd:a3:75:ea:fa:de:09:19:02:69:6e:0a:f0:d8:d9:5b:3d:9e:
70:28:cb:fa:c6:66:49:e3:77:eb:bc:c1:85:80:0f:9d:b2:78:
ff:18:ca:b9:a1:a5:01:c8:22:ff:7e:7c:db:f9:a6:86:28:8c:
38:f4:b1:e8:b9:b8:d8:31:72:fd:90:e5:2e:a7:46:5a:f7:2e:
8c:b7:c5:e2:e6:fb:7c:4e:22:cc:9d:c8:90:dd:6b:f4:26:d7:
78:3a:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:05:29 2024 by rpki-client on console-ams.rpki-client.org