Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/8Om7LW9peAvROE-NO89ECaDNMqg.roa
File: 8Om7LW9peAvROE-NO89ECaDNMqg.roa (raw, json)
Hash identifier: 26gbKnh32VYQVVYbskxCT4aIBspQyAdv6UsQHCYpqvo=
Subject key identifier: F0:E9:BB:2D:6F:69:78:0B:D1:38:4F:8D:3B:CF:44:09:A0:CD:32:A8
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019193C05B5963B4693D915EBA552050517F
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/8Om7LW9peAvROE-NO89ECaDNMqg.roa
Signing time: Tue 27 Aug 2024 12:12:22 +0000
ROA not before: Tue 27 Aug 2024 12:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 185.118.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:c0:5b:59:63:b4:69:3d:91:5e:ba:55:20:50:51:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 27 12:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0e9bb2d6f69780bd1384f8d3bcf4409a0cd32a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:77:67:b5:bc:06:08:02:b3:b3:1f:a4:b9:
d7:c8:61:69:a2:96:80:cc:57:62:3a:45:0e:20:74:
3f:d6:15:eb:40:c3:1c:1f:9c:9a:c1:9c:6e:d3:5d:
cd:a1:dc:c5:77:bd:18:d0:6c:8f:d9:63:9e:d3:21:
7e:9c:fd:22:c8:64:87:75:e3:cb:6c:f2:77:36:e4:
85:f9:35:f3:1d:53:04:da:cd:f0:24:37:1c:a8:cc:
59:af:43:f6:d7:8c:9c:22:69:d6:8b:fa:75:cf:08:
02:3d:70:ac:1f:6f:a4:a3:de:9d:5f:99:89:46:40:
f2:b8:04:2f:a9:2c:aa:e9:21:e5:af:bd:fa:f4:3c:
59:b5:27:b5:27:cd:32:6b:2c:4b:f9:11:d4:e0:32:
55:fd:45:86:9e:b1:45:0c:e2:8c:d4:8e:6c:2a:31:
4b:f2:e1:9c:a5:b2:8e:31:09:b2:80:94:23:47:30:
e4:22:27:e9:97:9c:e2:67:c3:6c:9e:82:f6:eb:18:
2c:3e:b4:5b:ab:c6:d3:0e:01:1f:3f:00:09:46:bb:
32:43:f6:42:97:67:10:38:83:ab:ff:b1:db:b2:bb:
24:f7:ce:02:65:c0:12:0f:a2:1e:17:86:ad:e3:d0:
d3:ad:af:2f:90:76:43:ae:2a:ad:62:4c:d7:62:5c:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:BB:2D:6F:69:78:0B:D1:38:4F:8D:3B:CF:44:09:A0:CD:32:A8
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/8Om7LW9peAvROE-NO89ECaDNMqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
75:55:e2:a6:4b:14:71:92:76:bd:fd:3d:c7:46:be:38:b2:3f:
ff:bf:19:64:72:f9:d4:67:81:ef:14:f5:2a:43:95:1c:b5:4a:
26:fe:45:15:64:e7:73:d4:63:12:90:e2:f5:e5:8b:dd:12:17:
50:33:5e:ad:6c:c7:11:e4:7a:07:52:77:56:cd:17:e1:4c:e0:
19:9e:c4:0d:89:62:7b:21:50:a5:19:49:93:7c:d3:8b:83:86:
b0:c6:b6:3c:03:ca:f3:4d:c7:2d:9f:a0:c7:8c:8e:b6:d2:d7:
ff:64:11:a6:dd:ae:1e:78:31:e5:57:2d:d9:be:3e:03:f2:87:
11:90:ef:92:fd:5c:c0:43:97:87:b2:12:60:c7:fc:e8:c4:c8:
c2:36:6c:df:58:f1:6f:30:47:ca:dd:bd:83:4f:58:30:33:5f:
c6:de:31:dd:5d:a4:18:6b:de:74:a9:ba:2c:5e:9d:7a:e4:82:
7d:8f:26:12:61:f0:54:6b:7a:fa:88:a2:38:a6:07:d8:67:0f:
3d:3e:63:f4:d8:52:dc:2b:9e:3e:0f:0c:4a:c6:0c:55:53:f7:
a5:57:3d:da:08:e2:20:b7:64:e6:8c:ca:86:42:69:8c:6c:99:
71:8e:ef:bc:f1:7b:f5:d9:5d:ee:24:89:57:e1:63:d0:27:0a:
00:c1:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:47 2024 by rpki-client on console-ams.rpki-client.org