Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa
File: n0m62i3DR3LjgqHx-5XJLQKY6L4.roa (raw, json)
Hash identifier: 99mDwyhN6MkxvMwx+iX7RkDxhZGG9oMQxrMRXk9TV78=
Subject key identifier: 9F:49:BA:DA:2D:C3:47:72:E3:82:A1:F1:FB:95:C9:2D:02:98:E8:BE
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018CC50035D5A5E1590A5021E05674B21A22
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48761
IP address blocks: 185.172.48.0/24 maxlen: 24
185.172.49.0/24 maxlen: 24
2a03:2100:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:d5:a5:e1:59:0a:50:21:e0:56:74:b2:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f49bada2dc34772e382a1f1fb95c92d0298e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2d:44:03:21:65:d0:6e:dd:5c:4f:f8:14:2e:
a6:5d:81:63:b3:91:ea:fe:2f:24:b2:46:9f:f6:5c:
eb:f8:d1:ea:5d:74:b3:ea:79:9d:f6:92:d2:62:73:
dd:83:e5:13:52:54:34:4f:00:5d:50:98:93:fb:d4:
5d:7a:b6:80:06:21:12:9b:28:75:b0:aa:e1:ec:41:
fe:5b:b4:22:56:40:56:fa:4d:61:16:ab:e2:05:1c:
39:b0:87:30:c5:f0:46:18:3b:00:de:36:8d:99:80:
ca:44:69:ae:54:fd:35:0a:0b:d0:ee:70:43:3f:83:
d1:4f:c3:04:6d:ea:84:bb:ef:a6:f3:e0:03:4e:01:
1a:9d:e6:ad:4d:3a:a6:92:df:84:bd:06:2c:e8:5b:
15:d4:3f:a4:58:93:d4:78:19:c8:5f:de:ce:c6:a8:
62:b5:fd:83:63:a5:4a:92:01:68:76:96:0d:4f:fe:
ef:bc:27:66:68:64:31:8e:14:25:42:12:ea:26:46:
c3:7d:59:b0:5c:82:23:eb:bf:73:8c:48:f0:c1:c7:
6a:c7:2a:33:85:b5:17:d0:cb:aa:60:31:64:1d:2b:
08:68:d7:32:18:c4:96:81:0e:0e:82:3a:6a:ca:bb:
48:64:c9:60:0c:ee:5f:16:53:01:ee:f7:ea:73:d1:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:BA:DA:2D:C3:47:72:E3:82:A1:F1:FB:95:C9:2D:02:98:E8:BE
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.48.0/23
IPv6:
2a03:2100:45::/48
Signature Algorithm: sha256WithRSAEncryption
64:2a:23:78:8a:bd:df:82:fb:b2:6a:01:de:54:6e:b7:db:b6:
d6:1f:89:bd:f1:c5:04:75:d9:f3:fc:2f:91:4d:08:2b:01:11:
e1:3c:5a:cf:b3:58:62:45:03:64:42:b4:23:3e:6d:ef:3a:52:
3e:9f:d7:2a:e9:5c:8a:b7:05:eb:e5:0d:df:e0:cf:30:f8:32:
2f:89:1d:4a:2b:41:e8:45:3c:aa:08:55:9e:15:2e:69:91:ba:
38:20:af:c8:ef:73:2d:fd:4d:70:91:29:cf:00:62:cc:b6:30:
e7:19:b2:78:53:50:34:f1:bf:8d:66:05:ff:50:50:f8:b7:d0:
bb:e5:69:17:be:99:a1:4b:9b:18:be:06:3d:33:0b:90:9c:65:
6e:f7:68:eb:70:a5:16:37:f8:8c:47:f2:f4:66:d0:c8:d0:fb:
19:30:09:6b:a9:b8:c9:1d:4b:2a:24:1f:66:62:a7:da:62:21:
f5:9a:a1:f6:7f:12:64:e3:09:c8:91:96:8c:9b:cd:ee:2f:57:
9d:d1:c8:ec:33:ea:fb:b8:22:07:5d:d1:cd:f7:9c:02:bc:72:
8a:84:2b:b4:1b:65:e7:de:1d:a9:25:d6:36:83:2d:e0:0f:29:
03:75:45:64:25:54:75:74:5f:57:50:ad:5f:9b:da:bc:e4:94:
76:57:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:14:41 2024 by rpki-client on console-ams.rpki-client.org