Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8QXhfXmssECcQX50jUhHPE9PZeU.roa
File: 8QXhfXmssECcQX50jUhHPE9PZeU.roa (raw, json)
Hash identifier: 9xDd/ewOr+NmpFWmTyxXGNhDnDoCF8xfyATMjMge2sQ=
Subject key identifier: F1:05:E1:7D:79:AC:B0:40:9C:41:7E:74:8D:48:47:3C:4F:4F:65:E5
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 018DA8AA7CBE9CC0828951C8DC093C4A833B
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8QXhfXmssECcQX50jUhHPE9PZeU.roa
Signing time: Wed 14 Feb 2024 17:29:21 +0000
ROA not before: Wed 14 Feb 2024 17:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211808
IP address blocks: 185.237.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:aa:7c:be:9c:c0:82:89:51:c8:dc:09:3c:4a:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Feb 14 17:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f105e17d79acb0409c417e748d48473c4f4f65e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:ca:19:57:58:0b:4f:dd:38:67:9e:a0:4f:
ef:8c:4d:54:50:ff:1b:70:2b:09:53:57:e8:20:fe:
e5:71:80:ef:06:a2:a4:45:d6:5c:01:00:59:10:5a:
ca:7d:d1:39:c8:ce:23:8e:ba:05:02:35:8a:1e:6f:
70:93:c6:06:35:1b:ca:d4:dc:b3:06:2b:2f:6c:57:
1d:95:43:7b:d6:f8:f0:eb:cb:dc:36:6d:65:21:70:
f2:4a:85:2c:08:3a:d4:f2:43:59:81:c2:a6:ca:80:
e8:89:e6:ce:e5:cf:a4:00:1a:23:3e:e9:9c:d4:47:
35:c8:ac:16:97:04:38:6f:27:30:a5:42:1c:c0:ae:
1e:17:ab:a0:eb:1c:8e:72:3e:2f:bd:77:ec:50:16:
5c:34:8e:b1:e6:d4:9f:1a:69:dd:f3:bf:28:9a:10:
e2:ed:e5:69:fd:6c:92:45:d9:c1:9e:f9:18:c7:88:
28:97:d6:a4:c6:a5:d4:7f:15:9d:76:cf:67:07:dc:
b9:c2:e0:a9:58:34:eb:eb:99:05:8d:3c:ff:a8:b6:
b4:83:01:43:be:40:a2:60:e1:86:03:8f:3e:eb:a8:
63:b6:8e:5d:79:c3:8a:e4:c1:c2:91:e0:61:01:1a:
71:2a:3d:13:fa:08:be:87:f3:e3:f0:1f:00:87:6c:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:E1:7D:79:AC:B0:40:9C:41:7E:74:8D:48:47:3C:4F:4F:65:E5
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/8QXhfXmssECcQX50jUhHPE9PZeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:84:3b:8b:a9:39:50:40:a4:1e:3c:b0:ff:f6:47:2f:2b:1a:
cb:10:8a:9b:e5:3f:8a:0c:33:de:8d:1e:0b:27:f4:99:c5:a3:
7f:93:94:3f:7d:90:2e:e5:89:f5:9b:94:5d:0e:ac:c8:3a:a7:
7e:1b:54:eb:87:dd:40:a2:0f:aa:b5:bf:fb:5e:c5:72:29:8b:
ca:55:b3:d3:56:5f:ce:e2:4e:6c:1c:26:14:3e:18:e3:a1:b2:
4b:9c:b9:fc:6d:0d:bc:62:8a:9f:25:bb:7d:46:ce:55:1b:da:
aa:e7:09:3e:ff:bd:78:b7:37:c6:78:31:f3:fe:c8:c6:89:6a:
e9:ad:d0:39:d8:ef:3d:b9:f1:ec:8b:51:23:d7:9a:9d:c0:03:
54:e9:78:83:f1:94:15:78:84:76:99:d3:b2:09:df:8a:65:13:
76:47:3c:68:b7:b9:ee:eb:33:69:2c:4d:6c:a6:ee:d2:9f:76:
0d:34:44:f7:b1:4d:74:76:1b:69:6c:50:ce:02:43:f1:ca:be:
d0:2a:91:43:19:54:9d:34:49:f5:65:dc:f6:94:de:f7:8f:68:
84:9e:e7:4f:bb:d6:3f:a0:7d:87:3d:97:5e:79:94:65:b4:23:
ed:f4:d4:ae:86:fa:45:20:72:34:03:5b:d8:63:a5:fa:d9:b7:
b3:67:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:56 2024 by rpki-client on console-ams.rpki-client.org