Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IaBdWwvF5xslEn0czzILGG38XRY.roa
File: IaBdWwvF5xslEn0czzILGG38XRY.roa (raw, json)
Hash identifier: /W+hh46e/5H0BczGnOKpKb7eAz7D50zs/ffZ7ecbupA=
Subject key identifier: 21:A0:5D:5B:0B:C5:E7:1B:25:12:7D:1C:CF:32:0B:18:6D:FC:5D:16
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0191B36FEF1815E5436F38DB0C42BA2914D1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IaBdWwvF5xslEn0czzILGG38XRY.roa
Signing time: Mon 02 Sep 2024 15:52:22 +0000
ROA not before: Mon 02 Sep 2024 15:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:6f:ef:18:15:e5:43:6f:38:db:0c:42:ba:29:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 15:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a05d5b0bc5e71b25127d1ccf320b186dfc5d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:ae:5d:3a:bc:83:e4:19:26:f1:f1:2b:eb:
0c:19:e5:bc:8f:66:4c:12:57:53:25:1f:d6:c1:08:
4b:32:d1:c5:a7:88:a2:c1:7c:96:5d:af:22:a0:23:
20:87:82:8f:d5:17:e2:1c:56:38:60:8e:9c:56:46:
89:b5:d3:c8:77:6a:ac:0b:3e:09:50:3e:b8:f7:38:
a0:76:9b:22:4b:e0:69:49:cc:63:a1:d4:a3:47:c3:
31:53:a2:45:91:d7:93:04:5e:bc:cd:90:46:9f:75:
f3:7e:1d:9e:de:a7:83:7f:88:09:64:f9:47:71:53:
28:5d:85:e0:59:8c:78:8d:bb:57:79:06:82:b2:4d:
d6:db:d7:28:03:9d:6a:74:c6:7f:ea:ff:3a:25:33:
9b:2c:35:87:3a:53:95:54:f5:f4:f5:07:be:85:04:
77:07:9d:2e:4f:36:52:55:e6:cc:f1:4a:e1:c6:fd:
c0:27:87:99:8c:42:7e:da:fe:51:c0:7f:07:8f:02:
6f:f8:49:3c:8e:fd:96:e9:6f:03:0f:09:8a:ae:a6:
07:7c:82:23:ae:6b:bb:17:80:b3:31:56:67:54:16:
40:a7:61:51:65:8f:03:7d:f1:c6:e2:55:45:6e:2e:
06:eb:b5:80:bb:c5:bf:7c:6f:56:65:f0:16:17:e6:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:5D:5B:0B:C5:E7:1B:25:12:7D:1C:CF:32:0B:18:6D:FC:5D:16
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IaBdWwvF5xslEn0czzILGG38XRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:47:05:44:bb:67:b9:cd:61:61:73:40:d5:93:30:e6:80:7e:
ac:fc:19:de:23:6e:41:d2:ac:34:b9:5d:24:f3:3a:90:28:62:
7e:f2:0b:93:13:b8:4e:4f:43:e8:4a:fc:10:d8:37:fd:1f:6f:
3b:58:2b:c3:ae:1b:81:ab:3d:32:47:24:fb:60:87:20:a5:4c:
53:98:99:91:3a:a5:ca:3f:3c:7b:f2:ae:43:0b:a7:b4:4f:c7:
0f:55:cf:eb:5c:f6:1b:f8:34:a8:0d:1a:d5:61:19:30:5c:86:
79:46:1b:c9:ac:b0:e2:30:ca:a1:09:ff:6a:a7:d9:26:10:c5:
72:9e:d7:c4:a4:94:7e:7e:b6:a2:0d:d6:b0:b9:03:4f:78:e4:
08:a1:a7:cc:e8:f5:55:94:4d:02:c9:a9:4a:1c:35:fb:c9:fe:
10:d3:66:57:57:ac:0e:e4:c9:59:b3:e6:52:64:27:fc:0e:c6:
00:d9:ab:c9:eb:b1:5a:bc:90:d0:a9:36:e0:90:11:4d:3e:35:
a8:cb:71:1a:07:41:9e:91:c7:1f:25:d9:73:fa:f0:6e:f0:1c:
47:e0:d0:43:e7:9e:e3:73:16:d5:34:b0:23:93:7b:f9:e0:77:
72:fa:23:b1:e5:dd:39:4c:a5:52:6d:88:64:ea:17:ed:62:48:
16:e3:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:30 2024 by rpki-client on console-ams.rpki-client.org