Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pVZ18YQEO99c1puSru4mrq-M-FA.roa
File: pVZ18YQEO99c1puSru4mrq-M-FA.roa (raw, json)
Hash identifier: 4DblTzO2Me7dd82x7JusaTIHGg1OY8ayyVPxfZNVkDU=
Subject key identifier: A5:56:75:F1:84:04:3B:DF:5C:D6:9B:92:AE:EE:26:AE:AF:8C:F8:50
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B65156DCBD7652138787BEF8A80A4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pVZ18YQEO99c1puSru4mrq-M-FA.roa
Signing time: Tue 02 Jan 2024 12:34:50 +0000
ROA not before: Tue 02 Jan 2024 12:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209669
IP address blocks: 185.251.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:65:15:6d:cb:d7:65:21:38:78:7b:ef:8a:80:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55675f184043bdf5cd69b92aeee26aeaf8cf850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:48:aa:0a:57:49:73:26:2d:34:f6:a5:f4:
1e:f4:ec:81:bb:9d:90:57:8d:4d:1f:f6:02:31:15:
00:59:f2:4f:2f:73:bc:d5:4b:11:74:dc:79:13:9c:
44:3e:da:5b:56:6a:cb:ef:c5:76:7d:d3:55:e6:39:
c3:ec:b8:33:de:41:b0:88:c5:a1:1f:a9:e5:57:1b:
b7:10:3f:dd:5b:d6:44:4f:22:20:48:77:12:8b:dd:
eb:54:2c:1b:27:53:63:a0:d0:b5:9d:06:f9:1f:36:
ab:95:0f:05:8b:23:5a:04:c3:48:74:d1:10:7c:0b:
ee:57:ee:5c:e2:04:fa:3c:c4:ef:d1:2a:64:30:0c:
f5:7e:7f:34:04:01:88:a5:09:fb:1a:e3:1b:4c:66:
87:a4:fe:0e:62:bd:04:71:e6:43:09:ff:31:e2:dc:
44:56:26:4a:df:20:f2:26:90:46:63:fb:d3:15:34:
18:38:92:e6:20:6d:c8:56:a5:d1:89:81:27:38:f8:
25:79:ac:ca:4d:c6:f8:5a:94:42:06:63:03:50:a7:
91:19:be:e8:57:a6:7d:c1:67:cc:2a:d6:bb:e2:0c:
15:23:a8:f9:8a:65:05:6a:42:bd:86:b8:54:2f:f8:
35:aa:de:25:bd:4a:35:14:30:22:d4:bd:39:59:23:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:75:F1:84:04:3B:DF:5C:D6:9B:92:AE:EE:26:AE:AF:8C:F8:50
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pVZ18YQEO99c1puSru4mrq-M-FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.232.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e1:f0:ef:71:26:ab:82:18:35:3c:25:e8:66:bb:c7:c9:ef:
b5:e2:00:38:d6:9c:ba:4b:8a:36:8e:56:d7:94:dc:87:e1:5f:
3b:32:f0:3c:e9:3b:51:cd:ed:d1:20:d0:61:b4:c6:a6:04:a9:
4d:1d:b1:43:b3:17:00:b2:fd:52:5f:95:7b:e9:9e:28:c5:2c:
fc:b6:2f:0f:44:0e:45:a0:7c:93:c4:51:16:60:2a:fe:97:18:
25:08:32:01:3e:bd:20:15:c2:7e:57:cf:df:f1:24:23:57:b9:
2e:8c:51:fb:4f:d5:96:61:dc:9b:50:41:39:56:db:43:1d:9a:
88:67:e0:24:a0:05:6c:9e:a8:b3:3d:83:8a:84:9c:fc:b4:34:
11:3c:d3:3e:c7:04:37:da:c8:c3:d5:51:e0:2e:24:81:7e:64:
87:e1:a4:56:cc:82:2d:0d:1d:16:9d:13:18:a1:d4:78:0d:d9:
03:10:5e:87:96:fe:6b:e3:6b:c9:48:76:af:60:1e:1a:44:8d:
ad:85:1d:40:56:c0:20:7d:a2:a5:02:d1:83:eb:ea:7a:b5:4e:
3a:d4:1a:eb:1b:92:d1:e5:f1:ad:14:6f:e5:0f:15:46:fa:cd:
21:12:e7:77:da:8a:86:06:4b:70:ab:a0:d9:9e:2c:4d:6c:e6:
31:d9:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:43:59 2024 by rpki-client on console-ams.rpki-client.org