Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9ZAzlOY_MQxKBmBmYHKNYXRBb0.roa
File: A9ZAzlOY_MQxKBmBmYHKNYXRBb0.roa (raw, json)
Hash identifier: 9qYIeX9JE270sjcCuEuxn0dN9AJ1ns3KjkqyZgnA490=
Subject key identifier: 03:D6:40:CE:53:98:FC:C4:31:28:19:81:99:81:CA:35:85:D1:05:BD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9E02E30C3CFCB21364880784D993
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9ZAzlOY_MQxKBmBmYHKNYXRBb0.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56975
IP address blocks: 185.212.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9e:02:e3:0c:3c:fc:b2:13:64:88:07:84:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d640ce5398fcc4312819819981ca3585d105bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:e8:ed:21:e7:f6:65:f9:80:24:57:3a:71:
bc:3f:7b:e8:84:15:80:6f:8d:de:e5:42:4e:4f:4e:
b9:67:97:65:87:d6:ea:3f:13:99:4d:d4:6a:09:cd:
59:89:3b:80:61:91:b0:92:35:95:d3:7f:58:3a:49:
2b:6e:67:f8:23:0f:c9:ed:09:64:61:e4:04:0d:9e:
f7:a0:07:c7:c1:41:b5:73:90:8f:61:c5:6e:b3:b3:
f1:4f:6f:af:3f:72:58:ab:29:f2:3f:dd:c2:0a:a2:
99:5c:dd:8c:15:25:9b:b9:18:54:cd:a4:dc:d0:67:
65:50:91:c4:35:9b:c6:25:2a:23:cd:c3:2f:e8:4a:
32:da:8b:b4:af:f6:09:55:74:76:22:de:46:fb:87:
2e:a0:40:bf:06:21:35:f9:1e:1d:db:64:96:3a:3d:
05:84:49:51:da:e5:ca:b7:4d:5f:7e:83:2b:fa:79:
48:81:9d:6c:ec:c1:f5:e5:42:65:2f:a1:de:cd:b2:
da:53:28:b1:b8:aa:4b:7b:fc:f4:ad:90:b2:43:18:
c0:ed:02:39:68:34:24:a1:72:39:b2:cc:a1:ce:6f:
f7:a6:db:eb:b9:60:1b:a0:93:93:aa:8e:89:30:43:
5e:16:96:fa:86:16:43:b2:6d:f6:fe:6f:ba:b7:a9:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:40:CE:53:98:FC:C4:31:28:19:81:99:81:CA:35:85:D1:05:BD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9ZAzlOY_MQxKBmBmYHKNYXRBb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.151.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9e:1b:e7:57:7a:b5:15:0e:3e:56:a6:20:0a:f3:f2:5a:9d:
69:1b:2f:99:43:df:11:9f:31:d0:ba:69:69:ba:db:9f:09:1f:
c4:cd:b3:1f:e7:e2:e1:48:ca:3a:9d:29:95:c0:11:bd:dd:04:
5d:e7:4e:c1:10:13:cc:95:8b:06:23:87:6f:d2:fb:00:40:82:
2e:41:11:c5:79:95:01:9e:23:e4:a6:2b:01:2a:43:ad:ae:af:
f4:42:44:e4:8e:f8:38:8b:f1:57:a9:bc:e4:4d:5c:1f:2c:4e:
48:1c:12:18:ab:95:4c:85:a9:94:97:e3:8b:b0:36:91:20:18:
17:d1:46:7d:1f:3e:93:e9:c9:7d:a0:9b:ab:45:21:2e:df:02:
18:de:f9:54:98:3c:94:28:08:e6:1d:c8:d9:4b:4f:c6:eb:6f:
f5:31:65:6f:b3:f1:7b:13:e4:c7:d2:8b:36:ac:c7:71:4e:e6:
38:aa:3f:95:98:40:40:83:e2:a1:4e:3d:27:c2:96:01:48:19:
09:a3:2d:4c:95:1f:4d:61:64:c2:f8:36:b5:9d:c6:e8:a8:da:
7a:1f:27:e1:5d:7a:b0:68:9f:56:4f:62:96:d4:ed:99:39:a9:
13:7f:30:75:c2:85:10:c1:2a:ec:95:28:e1:3f:c9:f4:5e:8a:
dc:c8:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:58 2024 by rpki-client on console-ams.rpki-client.org