Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa
File: 69HawLzQbexBxUZppKfj7rlKQXo.roa (raw, json)
Hash identifier: 47HUDGj5/pHytV4qq1cWq9+0iurr6scSwj12BU1YNj4=
Subject key identifier: EB:D1:DA:C0:BC:D0:6D:EC:41:C5:46:69:A4:A7:E3:EE:B9:4A:41:7A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5BEF4B6EAB4B18F1F1DA3FFCCC35
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62468
IP address blocks: 185.223.165.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5b:ef:4b:6e:ab:4b:18:f1:f1:da:3f:fc:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd1dac0bcd06dec41c54669a4a7e3eeb94a417a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:19:82:2c:96:57:86:91:eb:83:c4:e8:b9:
f0:7a:33:81:b8:b2:54:17:87:07:2f:c7:93:99:81:
51:5e:89:ec:6d:97:57:99:af:a7:f2:6d:6d:7a:20:
ea:14:87:19:db:83:a0:84:51:35:7d:a2:60:a3:cd:
32:99:12:20:55:54:5b:13:6c:5d:5b:e7:54:f4:25:
22:d7:76:aa:14:45:21:ff:81:97:88:cc:16:f3:88:
85:e1:9d:8f:de:75:f3:de:21:ad:31:26:22:c3:c4:
24:e1:b1:75:22:62:ec:b4:d6:1c:15:97:8d:79:f2:
49:30:39:91:aa:03:78:e4:96:cc:3f:be:c1:ce:41:
5a:f5:4e:5b:2e:a8:9b:46:f6:42:63:ec:e4:6e:24:
f7:69:ad:84:34:1d:b9:9b:a3:ca:62:5a:67:29:4a:
9d:69:56:db:ba:1f:78:73:4e:7f:8c:6e:79:da:ee:
89:52:87:b9:fa:20:dc:0e:a8:7e:9c:fa:5f:41:5a:
00:6d:de:fd:74:5f:a3:91:43:8f:85:cc:81:cf:da:
90:89:18:08:7f:ba:73:84:b6:c3:ea:25:b5:96:f7:
20:a9:f0:7e:e0:b4:f3:9f:80:3a:23:51:86:69:8c:
62:7f:c2:73:75:af:75:f8:a0:b8:06:97:5a:61:d6:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:DA:C0:BC:D0:6D:EC:41:C5:46:69:A4:A7:E3:EE:B9:4A:41:7A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.165.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9a:82:57:2c:ed:f9:a8:73:a8:82:9f:3d:29:5c:3c:8d:82:
f6:ad:89:c0:b2:ad:39:46:88:c1:87:ab:07:31:85:06:0d:15:
15:72:87:53:40:9f:15:ed:44:79:1e:2a:b0:1b:b8:9c:7c:1c:
d1:5f:51:62:12:74:66:34:19:29:44:7b:a6:b1:67:1d:09:35:
8c:5d:ee:f6:95:f9:cd:9c:ab:41:be:ac:84:6f:cd:dc:76:fa:
73:b2:4c:f9:af:67:fa:24:04:d1:35:25:39:1a:34:02:e6:17:
8f:27:3b:83:ae:07:61:0b:b5:53:35:18:96:ca:5f:49:2e:86:
f0:ee:76:e3:81:48:32:12:11:7f:18:86:88:91:7f:a9:7e:05:
79:cf:1a:f3:ce:c5:88:e0:64:1b:38:33:de:7d:d1:41:88:04:
31:a9:a2:a4:d3:f1:de:9c:64:28:2c:0a:e4:18:bc:ff:88:e5:
ed:57:44:48:dc:be:2e:3d:99:7a:db:98:94:1b:5c:36:2e:d8:
c2:d2:d7:75:1f:ad:41:91:b8:72:0d:0c:09:3c:0b:08:6a:83:
2e:d1:8a:b4:f4:43:1d:05:72:3e:14:08:93:13:fc:60:e9:eb:
ff:26:d7:0e:f0:87:5b:c3:9c:8d:c5:db:c9:46:9e:69:1a:0c:
f4:27:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:32:29 2024 by rpki-client on console-fra.rpki-client.org