Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1nPvChO1kszahrTOEMfbrKOz6g.roa
File: x1nPvChO1kszahrTOEMfbrKOz6g.roa (raw, json)
Hash identifier: 7323Ixgg+ylx6l31xKsyYud9ekAGaB5BCYMRGopKhUM=
Subject key identifier: C7:59:CF:BC:28:4E:D6:4B:33:6A:1A:D3:38:43:1F:6E:B2:8E:CF:A8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CF068F9D7334934E1ED6CF82A9C9FC976
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1nPvChO1kszahrTOEMfbrKOz6g.roa
Signing time: Tue 09 Jan 2024 22:47:40 +0000
ROA not before: Tue 09 Jan 2024 22:47:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 185.92.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:68:f9:d7:33:49:34:e1:ed:6c:f8:2a:9c:9f:c9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 9 22:47:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c759cfbc284ed64b336a1ad338431f6eb28ecfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:f0:e7:56:43:5a:ea:c9:9e:6c:58:e5:2d:
d0:11:08:0f:17:16:65:f7:48:4a:a8:11:b3:e5:e6:
62:9d:8c:a7:c6:5c:1c:d0:95:19:da:ef:f8:4c:e6:
7c:cb:0d:3f:94:1c:de:1c:f2:44:4c:db:dd:fd:17:
67:6e:69:77:12:1c:10:95:03:98:0d:8b:a9:c1:7a:
bc:6e:d5:53:9b:b6:6c:ea:a2:b3:b2:b1:48:d8:8b:
a5:2b:b5:47:aa:fc:5d:d6:62:fe:72:a0:04:f6:44:
61:4c:cb:e9:9c:64:c5:e0:cf:bf:8a:a5:ca:c0:63:
df:69:6d:69:e9:2b:5b:66:3d:11:32:39:67:81:87:
e0:69:8b:54:0a:cf:7e:0c:06:24:dc:60:fe:0d:e9:
69:f5:e3:52:ae:c9:ee:28:60:1f:3f:ef:93:66:44:
e7:ad:47:dd:6d:26:af:20:5a:a5:26:c3:71:01:f5:
ce:0e:fc:e8:59:94:60:36:d0:42:95:65:42:1a:88:
58:a3:c8:d1:60:ea:2c:fa:69:65:51:64:48:35:ac:
6f:c5:a4:95:3e:95:a9:c5:ba:75:e0:a6:1a:93:89:
66:7c:ff:99:09:9e:dc:53:42:06:c7:3c:88:cb:5e:
ad:a9:d3:b6:9c:64:75:6e:7a:00:c5:27:fd:9f:10:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:CF:BC:28:4E:D6:4B:33:6A:1A:D3:38:43:1F:6E:B2:8E:CF:A8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1nPvChO1kszahrTOEMfbrKOz6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f6:1a:5b:45:06:1d:4a:64:15:17:dd:76:85:da:33:bc:15:
82:2a:de:d1:1c:8a:91:89:83:db:8b:95:3f:56:a1:71:06:ad:
13:7c:98:68:cf:2a:9d:4d:02:fd:3e:b5:c3:b7:fd:de:a6:fa:
41:0d:3d:2e:cf:9c:de:3e:e9:d7:55:94:95:50:04:e5:cc:61:
f2:89:d2:b5:9f:38:fe:24:ff:5f:39:30:71:2e:76:11:27:a5:
c1:78:2e:58:45:71:2c:00:5a:11:3f:5a:77:fe:9d:50:37:ad:
62:61:fd:df:3f:47:ef:d7:36:66:5b:ae:a3:1c:5d:e4:db:9a:
68:47:f5:34:1e:d8:f7:57:c4:fe:93:54:f2:29:71:66:bc:ef:
19:01:aa:67:c1:a7:73:39:32:f4:9e:88:cb:c8:b7:f7:50:e1:
6a:00:ca:be:93:b3:7d:55:a7:84:9f:77:6d:b9:a5:fe:e8:28:
ef:89:cc:2a:df:b5:3e:31:22:e1:74:b7:8e:5f:16:5d:32:2a:
7c:1d:8e:e3:3b:d4:26:1d:3d:c0:e0:e7:f7:22:9c:df:9a:ee:
f2:49:8f:c5:6f:1e:dc:f4:5b:80:31:52:10:4e:67:66:3e:64:
5f:25:3b:73:32:ee:36:0a:7e:f2:f5:61:57:eb:63:55:1c:05:
55:2b:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:41:01 2024 by rpki-client on console-ams.rpki-client.org