Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/CFQZVUoGrPPvLKq8XQ9B5pN6hOM.roa
File: CFQZVUoGrPPvLKq8XQ9B5pN6hOM.roa (raw, json)
Hash identifier: 13BJzWNxpbhkf9s7zCXeMr0U3Qf39CbuvbvpOJEqSgs=
Subject key identifier: 08:54:19:55:4A:06:AC:F3:EF:2C:AA:BC:5D:0F:41:E6:93:7A:84:E3
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 018CC86F03CB696B7E48AC8A609D8B47E418
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/CFQZVUoGrPPvLKq8XQ9B5pN6hOM.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207452
IP address blocks: 185.244.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:03:cb:69:6b:7e:48:ac:8a:60:9d:8b:47:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=085419554a06acf3ef2caabc5d0f41e6937a84e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:15:ae:b3:4d:f1:96:2f:12:3d:7c:c8:c5:
d3:45:03:79:37:71:9a:0b:d0:30:9b:0a:26:0f:c0:
f1:65:2b:16:02:d6:78:05:6f:47:48:a7:01:a1:13:
c9:9f:a0:f5:cd:01:d2:ea:99:cc:b0:c2:6c:db:9f:
3b:d5:87:92:42:32:64:df:f8:df:c3:cd:f1:12:ee:
c2:a3:95:6d:94:6f:1a:ec:c9:62:68:c3:6c:e4:a4:
fa:38:5a:30:d1:e4:f8:ac:10:dd:1d:0e:ec:fe:97:
39:d8:b8:0b:ff:f6:5d:9a:e9:14:6c:9e:20:c7:7c:
45:3e:2a:e1:63:2e:29:89:14:67:7a:55:d9:52:8d:
ce:e5:21:f9:1f:3b:4d:32:53:fc:35:98:65:2d:2a:
00:52:71:b0:1e:a8:a4:ca:df:32:9b:f6:b3:77:77:
37:e4:67:ae:d1:d3:93:d0:11:65:31:f7:84:a8:d8:
1a:f9:2c:77:61:5f:77:56:96:0b:21:96:10:19:3c:
1a:39:da:eb:01:c0:90:57:b5:f1:24:61:6f:38:86:
e1:47:9b:f7:08:43:d0:b1:03:b7:d3:68:7f:71:15:
8e:95:55:f8:0e:18:d0:32:8c:d9:f4:71:97:68:5d:
7d:02:cc:6c:ec:0c:c0:08:2c:7b:6c:82:03:3a:ee:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:19:55:4A:06:AC:F3:EF:2C:AA:BC:5D:0F:41:E6:93:7A:84:E3
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/CFQZVUoGrPPvLKq8XQ9B5pN6hOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2d:8b:60:e6:18:23:99:00:2c:22:9a:02:61:36:e4:ee:40:
e3:12:5c:c4:03:de:2d:8e:c0:e7:32:32:6a:36:af:82:b8:66:
df:b9:53:2d:1e:85:11:6f:01:f1:78:c0:bb:9d:ed:c2:fc:d4:
38:57:39:36:a6:dd:17:4a:61:dd:8d:42:62:34:82:a2:20:5a:
fb:a0:2b:0d:42:02:30:5f:46:18:2e:d4:8e:b6:18:96:2d:b5:
ca:3f:8b:fa:4a:45:1c:13:24:c9:67:5a:f2:2e:c4:d8:e4:7b:
0b:47:0f:79:a1:c5:f7:bb:7f:67:63:35:d7:c1:28:a0:05:93:
7b:62:8d:e3:02:dd:c2:e6:f7:68:29:38:65:f0:a7:7e:a8:04:
5e:4b:d3:84:8a:80:f7:2a:47:a5:46:a9:a0:50:bc:6a:01:60:
34:0e:9b:3e:b6:43:61:68:7f:a2:d6:54:52:13:73:08:0b:11:
84:35:e5:b7:9b:dc:38:20:7b:48:62:79:11:79:db:05:f6:eb:
97:35:3a:ce:a5:a6:d7:63:86:16:a2:ec:8e:81:49:3d:28:f6:
b6:9a:5a:a1:a1:2c:4d:92:e4:9c:44:8c:ec:b8:5b:bf:98:47:
b7:c5:b9:b1:84:72:57:a1:5e:87:7a:1e:29:1e:1c:17:7f:86:
46:67:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:57:09 2024 by rpki-client on console-ams.rpki-client.org