Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/n9LAXfZDNFjDyb4joQvozQroWWY.roa
File: n9LAXfZDNFjDyb4joQvozQroWWY.roa (raw, json)
Hash identifier: 0HlAsWkK2KkyLx9Y80XyFC344Mlgr1xICQvBNX6adas=
Subject key identifier: 9F:D2:C0:5D:F6:43:34:58:C3:C9:BE:23:A1:0B:E8:CD:0A:E8:59:66
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 018D3A88DCF257060930DD091D036F235324
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/n9LAXfZDNFjDyb4joQvozQroWWY.roa
Signing time: Wed 24 Jan 2024 08:14:24 +0000
ROA not before: Wed 24 Jan 2024 08:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 185.175.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:88:dc:f2:57:06:09:30:dd:09:1d:03:6f:23:53:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Jan 24 08:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fd2c05df6433458c3c9be23a10be8cd0ae85966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:20:4c:5b:49:22:71:5c:4d:07:e1:82:a4:
61:27:07:46:6d:ea:10:36:e4:f7:af:e7:54:9d:d9:
8d:2a:00:b3:2e:be:21:90:06:85:ff:41:c5:d1:1b:
d7:d8:9b:98:f9:5a:65:34:93:d0:ce:87:bb:bb:64:
78:16:58:04:db:43:8e:2b:fa:64:fb:46:36:3c:a3:
82:e3:46:38:ef:e5:0f:cd:19:b0:f5:a2:f4:46:67:
8b:a6:f7:45:33:cc:7c:3e:2b:ba:6b:34:ee:e2:7a:
ff:fc:b2:b6:ee:57:e1:68:98:63:c6:f9:66:c7:0e:
47:6a:31:52:dc:5c:f2:fd:c9:a4:83:07:0e:5b:91:
24:de:78:bb:4f:5a:2b:81:e7:c2:e0:ba:07:b1:16:
92:0f:7c:f5:72:19:49:f2:52:22:e7:7c:c0:50:f5:
cc:cd:0d:9e:9d:c6:48:36:ef:3a:a1:7d:ca:45:65:
34:84:bc:1d:c6:16:20:2c:8d:b2:45:40:bf:e2:24:
5c:b8:6a:f4:b9:50:19:43:62:b8:c7:27:53:78:2f:
d5:57:47:27:6a:5d:02:e2:8b:e2:e8:d6:e3:48:df:
56:44:e0:9a:c4:10:37:58:ae:32:54:f6:d1:ce:b5:
0b:62:5d:d3:8f:a6:dc:69:29:e5:f2:0f:aa:35:21:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:C0:5D:F6:43:34:58:C3:C9:BE:23:A1:0B:E8:CD:0A:E8:59:66
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/n9LAXfZDNFjDyb4joQvozQroWWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:ec:ce:d6:a5:f6:17:bd:5e:ad:b0:b4:c2:25:3d:da:a8:e6:
fc:6d:9b:0f:42:2e:ff:ee:7b:c5:3d:6d:7d:5e:b1:c5:87:85:
0f:30:94:8e:4b:73:d6:63:c3:50:c2:67:c8:16:50:30:24:f9:
8f:bc:2a:83:21:e7:50:d8:ff:bd:ea:32:64:1c:4e:6a:01:a2:
60:82:13:02:b7:80:9b:7b:84:39:40:bf:76:fd:16:35:22:3c:
a6:86:90:4b:55:c9:34:b4:0e:00:0b:f4:63:5a:d1:9a:77:5c:
9b:5c:60:76:1c:af:2d:28:46:3c:6c:c1:06:d4:14:d7:e6:a0:
85:3e:73:5d:7d:56:e8:b0:34:8d:37:2b:68:09:69:7f:f5:9c:
de:97:3d:2b:ff:1d:84:c6:3a:35:80:21:1b:a6:8c:3f:12:04:
20:83:14:19:1a:60:6b:62:57:32:ae:3c:af:ef:a0:b2:b0:6b:
f7:eb:53:2b:0e:93:aa:f8:b6:27:47:e9:4b:2f:30:51:ee:ef:
b4:cf:79:54:83:da:bd:05:b9:fc:7c:cf:0f:47:71:af:ab:c8:
a7:54:d7:14:2a:5b:93:f6:83:f3:05:eb:48:71:44:96:92:29:
4d:45:86:38:c5:87:d1:a9:f5:f3:e9:6b:94:7b:98:f4:f5:6e:
54:eb:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:47:03 2024 by rpki-client on console-ams.rpki-client.org