Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/4fK9YMG4P6NddFG1dyElrA2M0oU.roa
File: 4fK9YMG4P6NddFG1dyElrA2M0oU.roa (raw, json)
Hash identifier: d0lhXfVClacq94jN43tiFWjZ3dJZd3pwL6HK9+LmHyI=
Subject key identifier: E1:F2:BD:60:C1:B8:3F:A3:5D:74:51:B5:77:21:25:AC:0D:8C:D2:85
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018CC794DFC2584FB96B116F8EA71827DC81
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/4fK9YMG4P6NddFG1dyElrA2M0oU.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.73.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:df:c2:58:4f:b9:6b:11:6f:8e:a7:18:27:dc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1f2bd60c1b83fa35d7451b5772125ac0d8cd285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:a9:36:f7:bc:8f:e3:ed:4d:ad:94:b6:8e:
0f:6d:94:e8:3e:e7:1e:4a:de:66:e3:de:4e:ba:c9:
a9:79:87:bc:ee:f9:55:63:d8:32:b9:34:ad:17:cf:
0d:2f:93:cc:66:4b:ac:cd:3d:04:59:5b:94:cb:c5:
af:e4:45:ab:8b:24:75:06:30:02:2a:e9:da:b0:2a:
65:65:e4:8e:43:65:86:5b:d4:f3:6c:07:16:67:38:
06:0f:42:e7:4c:8f:b2:52:02:1b:c6:52:22:ed:2f:
19:cb:ab:f8:13:1a:ea:69:e6:91:9a:7d:99:6d:1b:
4b:a7:8c:97:8c:65:f6:01:04:2c:ab:2a:f0:df:8a:
a8:1d:6c:67:c0:da:41:53:a4:da:3c:e6:39:95:d9:
bc:0a:39:65:e9:59:6b:0e:e9:b0:28:e9:b8:06:f7:
ff:50:84:71:3d:03:09:7c:9f:42:16:c5:56:75:20:
fc:90:93:22:9b:8c:12:49:7e:e0:7c:7c:ce:4c:8b:
fc:61:e1:89:ec:54:1b:1d:f3:4b:90:96:c9:89:da:
5f:9c:7f:50:27:e3:41:3a:55:aa:4d:8b:51:8b:ad:
df:2d:43:df:da:c4:65:4d:7b:9e:25:79:5c:3b:56:
24:ba:0d:64:46:04:2c:c0:1e:da:e0:07:42:3c:7c:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:BD:60:C1:B8:3F:A3:5D:74:51:B5:77:21:25:AC:0D:8C:D2:85
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/4fK9YMG4P6NddFG1dyElrA2M0oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:06:67:70:c2:29:58:26:87:62:dc:af:f8:07:4f:02:fb:d7:
fb:75:2d:94:a1:09:b0:c9:9f:2b:61:e4:cd:dc:79:b1:a7:99:
2c:66:bc:60:a0:04:79:c8:6d:e8:ef:59:61:c4:97:8c:62:0b:
f1:70:e0:0f:52:48:fc:7e:33:74:2b:41:ae:84:95:30:6a:a7:
da:94:56:b2:31:e5:bc:61:73:20:2c:af:d0:21:b3:33:6a:b7:
5b:db:87:31:fe:a5:82:7a:1e:27:0e:b4:2d:18:7d:19:25:66:
6c:ae:1a:1d:b7:5c:19:31:79:ad:3f:1c:2a:69:ee:ca:2a:05:
93:4f:e4:18:8a:96:50:69:7e:24:23:4c:7f:df:39:91:d3:7c:
e4:f6:32:27:6e:ac:cf:12:7c:de:bf:7b:41:1f:2c:5e:7c:7d:
57:e6:29:92:0e:a1:3c:16:26:2d:7d:fd:31:38:9a:f7:2d:fc:
43:83:71:94:0d:29:ee:99:a7:81:3d:c1:e9:fb:5c:33:f0:0a:
14:c4:82:55:60:46:02:1c:e3:1c:e3:62:6c:d8:33:aa:5c:b0:
c1:b8:97:77:89:3f:d3:a0:52:ce:d2:bc:11:63:11:ef:1b:92:
70:f3:68:96:28:f7:8e:41:40:b1:a1:d7:b7:26:0e:d0:ea:7e:
75:6f:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:03:52 2024 by rpki-client on console-fra.rpki-client.org