Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/c_or9aGupC_dgqEhY6nv2dp35cY.roa
File: c_or9aGupC_dgqEhY6nv2dp35cY.roa (raw, json)
Hash identifier: kvju3VJ5GnvyDoYv+e4yYS4ZLy3JnzP+ayWHjVgBpFI=
Subject key identifier: 73:FA:2B:F5:A1:AE:A4:2F:DD:82:A1:21:63:A9:EF:D9:DA:77:E5:C6
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 018CC9BC0E36F19A5E80735C1CDDC4D7908F
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/c_or9aGupC_dgqEhY6nv2dp35cY.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3302
IP address blocks: 185.169.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0e:36:f1:9a:5e:80:73:5c:1c:dd:c4:d7:90:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73fa2bf5a1aea42fdd82a12163a9efd9da77e5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:91:61:68:67:a9:01:f3:3b:cf:41:82:a7:
e0:75:0e:ac:fa:fe:e5:c5:1b:e9:43:f0:5e:97:2b:
ca:99:db:8e:85:61:fe:e2:86:2e:a7:a0:fe:8b:04:
49:30:3b:24:9f:b8:11:7e:da:99:f4:fc:87:18:b6:
81:2e:6d:3f:34:e6:67:d5:c7:cd:9b:84:66:15:11:
57:e4:35:3b:11:30:8e:4b:c6:f3:b6:65:b0:40:fc:
3b:ac:be:7a:a9:2c:ed:0f:03:77:f9:5f:41:71:fe:
6b:35:bf:f7:77:84:7e:40:f7:41:30:fc:11:cb:e7:
29:09:bc:8c:30:7c:dd:ae:2a:f5:be:42:a8:cb:78:
e0:4a:f3:c6:07:05:57:d5:ae:8f:2e:e0:08:c9:29:
1b:4f:f1:7b:bf:52:87:7f:b1:66:d4:62:75:a2:75:
0f:af:6f:ea:7d:48:36:0f:cf:92:c5:b4:e2:ca:00:
5c:ca:84:93:9c:ab:c6:b7:25:a8:a0:62:6c:16:0d:
3b:13:39:aa:3d:e2:ec:b3:b9:19:ab:83:ce:b8:fc:
23:24:41:64:0b:7a:a6:1b:9c:63:a1:ac:12:4f:55:
23:a2:b2:dc:84:56:12:91:2c:7f:fb:9e:ea:c5:d0:
36:b8:01:e7:ce:92:45:c9:5c:08:a8:1b:d0:17:e6:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:2B:F5:A1:AE:A4:2F:DD:82:A1:21:63:A9:EF:D9:DA:77:E5:C6
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/c_or9aGupC_dgqEhY6nv2dp35cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:8b:70:28:a5:a5:f4:03:df:ff:db:ef:a5:18:f0:39:75:ad:
04:0b:a0:cd:57:18:ea:3e:2a:a1:bf:a5:bf:ad:af:28:38:82:
52:77:b6:6a:5f:10:15:ea:8d:84:4f:50:9d:33:c8:03:9a:06:
21:14:ba:6e:69:65:5d:43:4c:f5:af:31:f8:f5:f7:ca:7a:56:
dd:ff:8a:85:dd:64:d7:e9:f0:e1:68:71:8a:35:9e:fe:47:84:
da:bb:d9:a6:3b:04:45:e2:b2:77:5e:e3:67:4e:09:90:c5:c1:
3a:0c:f3:15:d9:43:1c:4b:5a:b6:19:dc:25:cd:7a:4e:12:b9:
93:69:a9:41:04:a6:56:28:d6:3f:3d:97:b1:bb:7f:10:68:2a:
f0:de:a0:8b:e0:ba:ce:e3:c7:b5:a5:10:04:6b:b4:b2:4f:f9:
b1:a5:cc:32:d1:24:f3:04:94:ec:53:61:8e:90:7a:c4:11:36:
d0:31:37:fe:3a:7a:6e:88:6d:c9:b5:52:8e:99:4a:41:f5:fc:
5d:0b:08:eb:a8:06:41:ce:43:76:98:97:55:39:14:95:c5:ca:
60:90:5d:94:01:bf:4d:f0:30:fd:f6:0e:9d:3f:87:de:02:57:
b0:e4:71:57:53:a3:aa:e1:f9:c4:89:cd:db:89:6d:0b:4c:4d:
d9:b0:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:26:03 2024 by rpki-client on console-ams.rpki-client.org