Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/1cFDlNo0Chn7JkbdPAlimCGNQE4.roa
File: 1cFDlNo0Chn7JkbdPAlimCGNQE4.roa (raw, json)
Hash identifier: Z+4FEpLwXtWecJwfCey3FLdg1ChDIufzdjbLIT57DNM=
Subject key identifier: D5:C1:43:94:DA:34:0A:19:FB:26:46:DD:3C:09:62:98:21:8D:40:4E
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 018CCA2A4C0DA3132E306B0D07D4686A85DC
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/1cFDlNo0Chn7JkbdPAlimCGNQE4.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212248
IP address blocks: 185.105.237.0/24 maxlen: 24
185.231.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4c:0d:a3:13:2e:30:6b:0d:07:d4:68:6a:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5c14394da340a19fb2646dd3c096298218d404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:48:3c:63:1f:b4:ac:27:1c:22:14:2f:98:
05:5d:4f:4c:47:8d:30:23:af:1d:0c:d1:dc:50:bb:
97:96:3e:2d:70:81:e5:bf:22:4c:de:d0:f8:64:38:
d3:f5:73:1e:42:b6:03:34:52:26:92:af:57:ec:1a:
08:b0:22:01:e7:2f:7c:e4:1d:f3:34:80:04:96:8a:
89:33:f2:12:20:d3:30:24:a8:d3:8b:a5:56:fb:5c:
fc:b6:98:34:bc:cb:fc:4a:96:54:0a:12:75:eb:36:
4c:39:bb:cc:6f:80:9b:35:7e:25:35:36:14:b4:08:
b5:d8:2f:3b:8b:a9:e5:bd:2b:de:7b:37:b6:a2:1a:
4a:83:44:98:09:2b:c4:92:19:e0:fd:76:5e:86:32:
3d:e6:ed:45:fe:68:f8:db:3d:13:0c:47:c9:84:37:
4e:4c:cd:83:14:fd:27:25:33:ec:c0:f9:89:d7:90:
fe:e0:70:53:b3:d0:a7:f0:89:59:93:a9:b9:2a:8d:
d3:0d:b4:6f:d1:54:74:bd:b8:91:73:a0:bd:aa:01:
85:e6:ee:ff:d6:18:19:04:a2:07:95:df:d3:c5:41:
7f:e7:57:92:4a:d0:a9:b8:dc:eb:dc:3f:67:dc:c1:
ea:01:49:39:64:ee:44:a1:de:1b:ca:e6:cb:92:3b:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:43:94:DA:34:0A:19:FB:26:46:DD:3C:09:62:98:21:8D:40:4E
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/1cFDlNo0Chn7JkbdPAlimCGNQE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.237.0/24
185.231.114.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8c:68:73:97:a0:b0:3d:d1:6f:cc:db:41:e3:3f:48:07:e2:
51:1b:22:59:4b:69:ed:a1:cd:7f:d6:fe:6d:05:ec:1e:70:d1:
41:89:4f:3f:f7:b9:bc:1a:94:20:2e:8e:ca:9a:54:99:a5:c0:
c8:ac:94:ef:61:08:26:96:e9:0a:c0:be:6f:e3:3a:e5:98:a7:
c0:51:fb:6f:1c:f7:74:d1:fb:80:2b:f4:be:55:64:b0:10:a2:
f0:7d:a0:4e:67:5f:8c:73:3b:ae:1d:ff:c6:2c:5a:12:50:f9:
02:5b:b1:9d:1b:01:f6:7a:92:34:b6:f0:84:e5:6f:f9:8b:2e:
9f:d0:5d:85:a7:fc:2f:e1:b3:f2:ce:e7:12:ae:2c:31:8a:8c:
58:d7:2b:c4:e9:a2:62:b8:63:b5:f9:15:a3:bb:5d:50:26:7c:
75:6b:67:bb:6c:a9:99:70:c5:ad:9d:65:10:34:c8:52:f4:9a:
96:7e:27:2c:78:07:ac:af:9c:0e:9d:72:3e:f1:3a:a2:bf:8b:
b3:6b:1a:69:6c:e4:74:08:54:fa:1d:8a:8c:41:af:74:76:22:
1e:ac:fb:43:cb:75:c6:e0:83:a7:3d:1c:9d:ae:90:77:1f:b5:
ed:83:9f:f0:7f:7a:17:db:0b:bb:90:40:28:80:43:ac:ae:4c:
b1:63:4b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:52:08 2024 by rpki-client on console-ams.rpki-client.org