Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/dIyh5FX9qclWFZN4CRj1humdGUs.roa
File: dIyh5FX9qclWFZN4CRj1humdGUs.roa (raw, json)
Hash identifier: T/+3OzzN94j5EelfFCNImAjd9NCTOHOpKlIxaF6MU8s=
Subject key identifier: 74:8C:A1:E4:55:FD:A9:C9:56:15:93:78:09:18:F5:86:E9:9D:19:4B
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0191E170C2834A72B8D8CC68CFBDDF68BE14
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/dIyh5FX9qclWFZN4CRj1humdGUs.roa
Signing time: Wed 11 Sep 2024 14:15:48 +0000
ROA not before: Wed 11 Sep 2024 14:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:70:c2:83:4a:72:b8:d8:cc:68:cf:bd:df:68:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Sep 11 14:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=748ca1e455fda9c9561593780918f586e99d194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:2e:74:d5:1e:d6:bf:3e:e7:22:dd:47:99:
4c:de:58:64:ac:cf:9f:99:8a:f4:b4:c1:37:13:8d:
c0:7b:b8:a2:9f:20:c5:5c:0b:77:a4:4b:f1:23:d1:
53:8b:ab:53:8c:1b:ca:2b:5e:33:b9:60:c8:08:3e:
71:00:a2:1a:f0:82:1d:99:3f:62:4d:58:02:63:d9:
3a:33:b1:33:d9:3b:5e:14:f7:6c:e3:d2:42:2f:f9:
cc:b9:0b:23:b1:26:50:c7:df:61:54:7a:a0:94:8a:
be:8d:31:97:42:c5:14:f0:1f:e6:9a:ce:0f:54:b7:
f9:ae:4e:94:1b:71:6d:d0:95:d5:51:40:90:77:40:
a7:36:47:c9:ae:22:aa:0a:3b:84:53:92:3a:3d:f4:
43:96:7f:e5:8a:48:25:17:5f:49:fd:2f:ee:0e:4b:
78:1f:bb:97:c0:ad:ba:40:f4:d0:77:95:94:62:64:
6c:16:71:e3:37:94:46:69:bc:3a:4e:81:9a:82:8c:
06:bc:bc:51:d7:29:8a:80:4c:47:13:2f:6c:b4:e0:
eb:67:00:e4:e0:50:a0:39:0d:e5:55:31:af:97:9d:
3f:7b:ae:80:dc:b8:70:f1:c3:b0:63:38:5d:f0:66:
5a:53:63:28:d8:5a:4f:9d:a8:ac:56:27:2a:f3:1a:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:A1:E4:55:FD:A9:C9:56:15:93:78:09:18:F5:86:E9:9D:19:4B
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/dIyh5FX9qclWFZN4CRj1humdGUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.249.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c5:e6:a9:fa:31:db:48:a7:8c:40:5a:54:64:50:ce:de:92:
fe:d2:7c:37:13:f6:20:c6:f5:36:85:f1:1b:4e:16:63:85:39:
90:5d:24:a7:47:ac:83:b0:3a:50:f7:97:80:88:6a:68:3d:de:
bb:68:6b:14:40:e9:21:dd:c1:42:1d:50:1b:40:f4:b2:bc:7b:
ca:1f:33:fc:27:6f:7f:1f:bd:82:40:2f:c1:d8:70:d1:ae:53:
5f:75:ba:55:3d:d6:9d:87:2d:47:cf:47:90:53:76:77:6d:c1:
b8:11:69:55:cd:ef:24:f3:bc:a6:45:af:93:81:64:a1:fe:a5:
e5:4a:9d:ef:c9:13:18:d0:77:5d:9d:a3:e1:58:56:7e:6a:e2:
b1:5d:51:be:d0:82:27:93:cb:a9:2d:7b:92:09:63:ab:7b:99:
25:b1:67:66:16:3c:3f:18:ec:5e:e7:10:18:43:f8:82:db:0e:
dc:06:ec:0e:7d:fe:73:78:fa:ee:6d:3b:fb:ff:3e:f8:0a:01:
c7:9a:d7:cd:63:fb:7e:c4:91:12:d6:35:92:ad:d9:ef:20:46:
5a:7a:5a:75:0d:68:35:10:00:ec:ac:28:fc:56:7d:7a:85:8b:
a6:64:bf:0c:27:a1:26:ca:33:b5:39:e4:3f:37:d6:d6:8b:f5:
9b:3d:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:39:07 2024 by rpki-client on console-ams.rpki-client.org