Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/d6L_ihjNz4NM2kz3CmFQMxNAS34.roa
File: d6L_ihjNz4NM2kz3CmFQMxNAS34.roa (raw, json)
Hash identifier: mCfrzjoAihHt7JHpBc+CFIarelhjg/AYImBDA3kl8G8=
Subject key identifier: 77:A2:FF:8A:18:CD:CF:83:4C:DA:4C:F7:0A:61:50:33:13:40:4B:7E
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956C980473B8CA9B1E004FC2E0BC45
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/d6L_ihjNz4NM2kz3CmFQMxNAS34.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206150
IP address blocks: 185.151.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6c:98:04:73:b8:ca:9b:1e:00:4f:c2:e0:bc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a2ff8a18cdcf834cda4cf70a61503313404b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:25:04:39:87:44:b7:55:6f:54:dd:81:9b:
9d:0d:de:20:57:7d:22:93:23:90:1d:51:ce:27:8b:
31:0d:73:f3:a3:22:19:34:5d:52:85:73:b4:d5:5c:
19:10:f1:3f:5b:f5:a1:e0:a8:53:a4:ae:df:e1:30:
cb:47:e3:a3:ec:f0:e9:3b:fa:31:1c:b1:8f:7a:a7:
03:34:61:56:e9:09:9e:93:84:cb:ad:2c:66:96:d2:
58:c5:a8:79:55:b9:5b:ce:76:2e:8b:f1:3e:c8:56:
bf:b9:a8:c9:49:69:16:c4:0a:3c:6e:fb:55:ae:eb:
4e:aa:a2:1d:45:17:42:aa:da:d6:50:15:50:08:5c:
e1:8c:37:66:08:ca:e4:82:00:39:34:6e:73:8b:d6:
2f:2c:2f:f3:9c:7a:b0:02:cf:f6:a6:d7:20:84:4d:
e2:98:82:9e:8c:b4:29:4f:98:83:f7:9c:97:11:c3:
a4:fb:c5:5f:1c:62:59:05:ae:be:26:a4:34:15:b5:
84:5e:d8:3b:ef:76:b3:25:48:66:90:55:bd:ee:25:
91:b2:dc:7d:e1:4f:71:68:23:6d:48:04:92:5c:8b:
95:f7:f2:4b:d2:c8:f4:34:52:1a:ee:32:fb:c0:f9:
61:c7:89:63:27:ef:29:f8:00:f7:21:6a:54:2d:15:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A2:FF:8A:18:CD:CF:83:4C:DA:4C:F7:0A:61:50:33:13:40:4B:7E
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/d6L_ihjNz4NM2kz3CmFQMxNAS34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.144.0/24
Signature Algorithm: sha256WithRSAEncryption
72:73:bd:01:17:b1:c2:a8:5f:fa:d3:bd:58:61:fd:2b:04:ce:
33:1e:39:b3:c2:51:65:2b:c5:1d:29:15:c1:e4:eb:85:0f:7d:
5f:73:16:92:85:e1:ec:c4:b6:cd:4f:09:15:a7:0e:0f:19:7d:
a8:7f:25:6c:b5:3a:55:21:77:c8:4f:c0:51:ed:a0:41:ed:7d:
93:21:d5:e2:0d:e3:de:d0:a0:f0:e1:86:d8:0f:20:56:6c:d6:
eb:10:31:ce:ed:06:10:26:5d:4c:f0:99:5b:b0:e8:2c:27:de:
f0:44:f3:8b:40:4a:7b:4c:92:b7:2c:70:cd:fc:1c:50:df:67:
8a:27:3f:88:b8:0d:28:b0:13:45:f5:65:e2:c0:6d:a6:bf:56:
93:3e:c6:d6:52:5b:1f:d3:55:a7:79:c6:2a:5c:01:13:6b:38:
b0:8d:1e:06:3f:ce:7d:8e:95:7b:3b:fc:62:38:a9:88:c6:93:
41:e1:42:98:12:d4:2d:aa:15:7f:63:64:13:bb:54:30:49:a4:
f9:e4:29:bd:8b:12:e0:e1:99:1e:77:4e:42:a0:09:17:32:b4:
0d:4e:bd:b0:5c:ee:b3:9c:9c:fd:eb:60:79:46:ef:aa:bd:b9:
12:d7:40:1e:ca:57:be:4c:92:14:83:6d:83:15:b5:02:0a:33:
d9:9f:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:36 2024 by rpki-client on console-ams.rpki-client.org