Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/LdJ8wKKmtvL1qC-h2v30xsXgJOs.roa
File: LdJ8wKKmtvL1qC-h2v30xsXgJOs.roa (raw, json)
Hash identifier: QXnzTYBNHwORKPypW23M6fujU+X4u6u0+NwYWXYvGmk=
Subject key identifier: 2D:D2:7C:C0:A2:A6:B6:F2:F5:A8:2F:A1:DA:FD:F4:C6:C5:E0:24:EB
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 01927A38712610937F4BDDBBF2C1F4EA6E56
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/LdJ8wKKmtvL1qC-h2v30xsXgJOs.roa
Signing time: Fri 11 Oct 2024 06:16:12 +0000
ROA not before: Fri 11 Oct 2024 06:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.214.82.0/24 maxlen: 24
185.214.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:38:71:26:10:93:7f:4b:dd:bb:f2:c1:f4:ea:6e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Oct 11 06:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd27cc0a2a6b6f2f5a82fa1dafdf4c6c5e024eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:b8:9b:fe:71:60:92:0f:5d:32:2e:b4:ca:
8c:26:51:fd:d6:67:fe:96:cb:24:99:1c:20:dc:81:
58:99:6b:2b:e1:1f:13:88:a1:2e:dd:18:e6:02:c8:
20:38:4b:ca:3a:2e:cd:99:25:31:c1:9c:4d:bb:bd:
4a:87:da:e6:a4:49:37:fa:d4:0c:25:e9:e2:0b:27:
0a:24:0c:bf:ca:48:eb:87:ea:e6:5f:c4:70:3c:18:
92:ef:52:22:ce:f1:a9:aa:01:2e:0d:d4:62:d5:d8:
80:26:2d:1c:7c:30:cc:c6:0a:e0:c5:6f:a7:73:f7:
e3:84:5e:85:e8:d4:33:32:dc:10:42:18:0b:e1:34:
5a:df:82:3a:59:a5:85:15:fc:52:10:0f:4a:8f:fd:
9c:99:a2:c6:da:83:c7:ba:7b:f9:16:1d:f8:27:5f:
db:7d:e7:ad:f6:c0:44:53:f7:12:50:7e:e8:3a:50:
af:79:31:65:e3:bb:df:61:a0:48:c3:2b:1d:1f:83:
9d:47:ac:90:89:68:28:e1:b3:12:11:47:cb:79:6c:
56:f4:31:1c:23:f4:09:78:a3:ef:6a:f6:7c:55:de:
42:15:95:d0:6b:96:b9:da:f8:b0:d8:8d:34:44:1e:
2a:92:23:1b:ad:6c:a0:05:31:17:77:59:4a:78:9b:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:7C:C0:A2:A6:B6:F2:F5:A8:2F:A1:DA:FD:F4:C6:C5:E0:24:EB
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/LdJ8wKKmtvL1qC-h2v30xsXgJOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.82.0/23
Signature Algorithm: sha256WithRSAEncryption
34:c1:7b:1e:80:e6:3f:ef:05:58:fa:1d:46:4e:4a:9b:16:ed:
9d:fa:c5:ed:32:02:b2:92:95:05:5c:79:e6:b5:2f:94:88:ff:
28:8a:e9:57:cd:85:f4:5e:8d:a8:78:d6:33:02:41:32:05:cf:
cf:39:a7:72:bc:d0:a2:92:6b:af:49:6a:7f:6d:93:bd:3c:20:
20:2a:58:7e:49:b1:75:e9:94:31:01:40:1a:02:02:cf:ab:41:
b3:f0:91:50:9a:44:c9:f5:e3:2d:e0:77:45:e8:78:9e:70:d5:
a5:5f:4c:66:52:dd:2f:45:82:c1:8a:c1:a8:65:5f:30:76:d3:
32:f2:17:ac:ce:a1:60:f4:89:6e:be:90:28:a8:9e:f9:55:9c:
d2:fa:fe:08:d9:86:60:b0:77:e9:9e:cc:ec:ff:2e:17:df:65:
b5:35:60:a0:68:85:91:43:cc:ac:57:04:4f:85:3c:59:89:ee:
5f:bd:2e:22:93:cd:a2:43:0f:00:6f:be:4f:99:09:85:6a:92:
44:83:97:cd:af:b5:2b:b7:db:e0:f5:2e:66:9e:99:9b:84:25:
b7:af:66:e5:d8:36:10:0a:92:b4:5e:5b:7e:e4:62:32:00:aa:
c4:38:27:1a:0e:5b:56:0a:64:a0:88:ad:39:48:03:80:db:f3:
36:71:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:24:59 2024 by rpki-client on console-ams.rpki-client.org