Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/u1f4J7NJnFCdQ4r6LbDoAlj7z-o.roa
File: u1f4J7NJnFCdQ4r6LbDoAlj7z-o.roa (raw, json)
Hash identifier: +z8o/dRnWSIGY0JR7k0yo3XmqC62vex3Ox5EaIqVDeA=
Subject key identifier: BB:57:F8:27:B3:49:9C:50:9D:43:8A:FA:2D:B0:E8:02:58:FB:CF:EA
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 018CC6B81E80A8E539411EF67EBB028F674C
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/u1f4J7NJnFCdQ4r6LbDoAlj7z-o.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42764
IP address blocks: 185.43.16.0/23 maxlen: 23
185.43.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1e:80:a8:e5:39:41:1e:f6:7e:bb:02:8f:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb57f827b3499c509d438afa2db0e80258fbcfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:de:bf:ee:05:37:85:88:70:fe:9d:e5:b4:
c4:27:5c:24:93:60:4a:0a:07:f6:6c:dc:be:d7:c9:
63:02:fd:22:a9:70:2a:28:cb:91:3e:cb:87:c0:cb:
f4:86:f9:6b:c2:3e:44:d3:7a:aa:e7:39:90:fd:d9:
4e:26:bf:d5:60:f7:d7:23:2d:74:21:5d:a5:99:71:
ef:ec:7a:08:6c:df:72:91:70:f5:3e:48:3d:91:07:
2c:9c:e9:ec:ee:fe:fc:e9:cd:db:29:af:95:80:c9:
1b:4f:90:b0:e5:0d:68:92:83:b3:4d:e6:ea:24:2e:
84:92:e9:75:e7:65:1e:95:d3:ab:42:89:63:39:b5:
2a:45:2a:0a:73:26:f6:e0:e2:f0:81:84:88:11:17:
ea:23:68:dd:4f:cc:3e:ae:f9:65:d4:0c:86:2a:cb:
29:ea:c1:11:66:af:5b:e0:8f:3d:de:ad:e8:76:55:
94:ca:6b:a8:bc:af:4c:c4:b1:37:17:fe:47:ee:a7:
56:fc:1f:d2:49:2a:89:3c:fc:93:01:51:8d:ff:c9:
60:53:3a:6e:bb:88:b0:56:46:4e:02:8b:a6:df:79:
3a:d8:0f:92:fa:c3:93:cc:d1:d9:08:2e:3a:c3:a3:
67:50:c6:4d:52:ce:7c:cc:83:5e:ac:2e:41:d2:d3:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:F8:27:B3:49:9C:50:9D:43:8A:FA:2D:B0:E8:02:58:FB:CF:EA
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/u1f4J7NJnFCdQ4r6LbDoAlj7z-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.16.0-185.43.18.255
Signature Algorithm: sha256WithRSAEncryption
81:a2:5a:80:c5:39:9d:26:e0:ef:94:2b:0c:f2:78:17:35:20:
95:31:f7:30:b7:8a:a6:1f:83:4d:77:7e:ed:2e:1e:74:a5:04:
e4:ab:e9:f0:49:ec:37:94:fb:d3:de:85:9d:c4:b5:a1:d2:da:
9c:ee:15:30:0f:8e:1d:2b:75:e9:10:ef:8d:4d:28:3b:92:7b:
a2:d5:e2:19:2d:e7:77:41:92:af:f2:79:a9:c6:f7:d1:fd:4e:
bb:81:ab:24:c5:25:41:bf:8d:24:e7:4c:4e:bf:33:41:48:e8:
ed:82:c0:a2:e2:08:7f:0a:12:72:1d:e2:2e:e3:fa:87:51:64:
da:58:31:6f:58:a9:d7:32:6d:15:2c:bc:16:41:aa:d1:ba:b9:
8b:6c:09:db:d7:fe:ad:4d:67:0b:75:9f:c2:6e:51:c3:3e:99:
37:4e:52:7b:b7:d7:a1:98:9e:4c:37:45:3b:5a:40:73:af:73:
80:1e:a6:9f:34:31:8c:d6:3c:2e:18:5b:f9:e3:c9:27:e4:d9:
d5:89:07:29:83:73:69:99:5e:e4:3b:12:8a:47:ef:a0:03:6e:
0c:d3:28:10:ab:8a:56:0e:23:6e:75:69:30:79:03:16:13:75:
56:96:ee:93:fa:ca:48:e0:2f:77:dc:7b:d4:4e:66:b6:d4:d1:
ae:94:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:26 2024 by rpki-client on console-ams.rpki-client.org