Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/ApPxvO5Qeb9h92SwdrDkoZx32WI.roa
File: ApPxvO5Qeb9h92SwdrDkoZx32WI.roa (raw, json)
Hash identifier: bxnFxO0UWG64hP9cf0gdbkb/klZOvZ88lrm+zo05YTQ=
Subject key identifier: 02:93:F1:BC:EE:50:79:BF:61:F7:64:B0:76:B0:E4:A1:9C:77:D9:62
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 01927A3871AFB2E2480C28DCB582CAA7BE33
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/ApPxvO5Qeb9h92SwdrDkoZx32WI.roa
Signing time: Fri 11 Oct 2024 06:16:12 +0000
ROA not before: Fri 11 Oct 2024 06:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.214.82.0/24 maxlen: 24
185.214.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:38:71:af:b2:e2:48:0c:28:dc:b5:82:ca:a7:be:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Oct 11 06:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0293f1bcee5079bf61f764b076b0e4a19c77d962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:97:a2:b3:c5:cb:62:05:ed:06:d9:b1:c0:
98:0f:82:db:9f:15:4a:b4:79:96:03:87:dc:76:c1:
24:2b:82:88:3c:72:6c:46:9c:86:c6:04:53:90:c9:
25:73:31:05:53:9c:7d:90:4c:c5:4c:71:40:6e:9b:
1a:33:05:8e:21:f1:a3:5b:c9:3c:b6:e6:ad:3f:f6:
16:e4:37:68:22:6d:5f:3d:17:a1:e8:c8:94:b3:69:
54:00:c5:96:b9:3d:a1:b0:87:f0:7a:51:59:48:f6:
f7:62:83:6a:17:38:32:f2:3c:62:fc:bc:22:71:9f:
8d:52:2d:9d:ab:32:ad:9d:62:e9:ce:da:23:42:a2:
81:fa:50:7c:22:77:0f:9b:34:af:cb:9d:da:20:0d:
41:b1:62:15:6d:a7:71:67:44:c9:fa:49:4b:a2:ab:
d3:5c:31:c8:a4:f6:b3:e9:41:97:45:81:60:9f:7b:
6b:31:fc:3a:7b:3d:95:5e:8e:9c:11:b2:9f:7b:40:
07:d4:cd:99:e5:d0:dd:67:c8:7a:47:c9:b3:ce:b5:
ae:48:f4:8c:6f:2e:41:02:9b:7f:a1:db:e8:a1:cc:
6d:4b:3a:30:9f:58:f9:9e:8f:42:e4:03:7c:9e:54:
2d:e8:fa:b7:79:70:05:13:2d:99:f5:f8:8c:55:38:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:F1:BC:EE:50:79:BF:61:F7:64:B0:76:B0:E4:A1:9C:77:D9:62
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/ApPxvO5Qeb9h92SwdrDkoZx32WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
18:72:27:5e:9b:d0:3c:62:00:c1:36:0f:ed:b9:ee:ae:e6:ee:
1d:e8:3e:5c:2e:71:52:3e:9e:5c:06:af:e8:e9:99:07:5a:0b:
a9:87:98:0d:1f:73:6b:e0:7d:eb:2e:79:43:ef:c9:81:27:f7:
ca:d8:47:86:51:89:9b:94:07:77:43:32:e0:90:60:20:38:49:
67:d6:00:53:d5:92:4c:23:7e:7a:8b:14:a9:4d:f7:ca:38:00:
21:24:35:99:ef:be:ac:a6:ea:f0:bb:6a:b6:bf:7c:6d:4c:50:
94:53:3b:02:70:6b:d7:c7:48:c0:13:d2:79:f3:58:11:03:12:
ea:b5:fc:14:e3:c1:d4:bc:e9:a3:91:ec:06:17:bf:3c:e2:98:
65:39:93:d0:74:1d:bf:b4:39:19:da:4b:7c:e3:9f:3c:73:fb:
f6:ff:cc:b7:12:fd:18:af:53:20:99:72:e9:f1:cc:17:e1:e9:
b7:b1:d0:cc:e4:7f:4b:d2:f8:c9:8c:64:c3:3b:41:e7:5d:8c:
ca:20:59:ba:ae:c8:96:b0:80:b1:17:32:4a:65:b7:99:22:ad:
81:7c:c9:f3:e1:3b:6b:c5:3a:8c:82:f0:3e:1e:e1:af:44:7d:
1e:da:f1:04:ce:9a:41:8a:fc:94:84:b0:5f:27:5c:61:cd:9b:
39:d9:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:08 2024 by rpki-client on console-fra.rpki-client.org