Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/K_G5dhQIpIUcHVPzKOBcANtm6-4.roa
File: K_G5dhQIpIUcHVPzKOBcANtm6-4.roa (raw, json)
Hash identifier: avQ58Gvg7mbu0Le92BlXhysfNQ2J0oZDw/1VryUOvj0=
Subject key identifier: 2B:F1:B9:76:14:08:A4:85:1C:1D:53:F3:28:E0:5C:00:DB:66:EB:EE
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0191FF644C426719A68ED4579D48F73231D6
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/K_G5dhQIpIUcHVPzKOBcANtm6-4.roa
Signing time: Tue 17 Sep 2024 09:50:48 +0000
ROA not before: Tue 17 Sep 2024 09:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48763
IP address blocks: 185.162.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:64:4c:42:67:19:a6:8e:d4:57:9d:48:f7:32:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Sep 17 09:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bf1b9761408a4851c1d53f328e05c00db66ebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:40:1b:df:07:35:14:a2:52:fc:c8:c9:c1:
c6:65:74:b0:d4:33:e2:29:79:fb:f7:c9:17:10:30:
cc:0c:f4:e7:06:9e:5c:43:ad:cb:32:27:10:63:2f:
35:68:f9:7b:bf:4a:20:46:93:c5:f3:7e:26:78:60:
61:10:93:f8:ab:4c:a5:9a:8f:bd:15:39:cc:11:d4:
e4:17:f0:83:93:1f:3e:5e:9e:d4:82:5a:75:95:78:
80:11:a1:ca:77:1f:ee:35:4a:5f:7e:9d:1c:e3:b9:
9f:b1:76:0b:0c:7b:a6:b3:38:ac:00:46:90:0f:73:
1b:63:62:20:8e:d8:21:79:77:fa:bf:b7:22:64:5a:
81:b3:88:9d:10:52:f0:ed:d1:a6:03:d7:b9:02:82:
57:8f:a5:c3:24:05:ad:29:ed:a3:c3:97:b8:9b:cc:
ef:2c:6a:7b:59:a7:f8:2d:29:73:65:48:1a:cf:0c:
f7:49:5a:5b:2a:07:68:3b:ef:df:fc:27:ed:ea:3a:
a4:0c:92:d4:f6:7b:4c:ac:48:e9:9d:39:d7:66:b0:
4d:67:cc:f9:f7:0f:e1:83:17:a8:98:f4:ef:ec:38:
73:9a:c3:4f:c9:4d:ba:74:d8:09:e3:5c:54:7b:db:
04:a3:d7:9d:25:27:09:80:f3:b1:2f:7e:ba:b0:34:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:B9:76:14:08:A4:85:1C:1D:53:F3:28:E0:5C:00:DB:66:EB:EE
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/K_G5dhQIpIUcHVPzKOBcANtm6-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.235.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b7:cb:67:17:04:09:eb:94:1c:2d:e1:5c:42:6e:48:c9:d2:
c8:26:5c:68:ea:8b:2f:73:29:21:33:bd:a3:67:4c:09:a9:a2:
76:c5:6a:50:f7:69:6c:0f:f5:fe:cf:7d:f1:fd:36:e9:b7:22:
60:2f:00:a8:32:40:58:7c:70:0d:56:ab:46:a9:8c:18:e5:48:
cc:92:fa:e4:cd:35:a0:ab:c9:f3:d1:30:dc:80:2f:e1:c3:70:
86:f2:f9:56:3e:a6:8c:6c:1c:ee:05:fd:b9:30:ac:5a:a0:95:
f8:12:3f:cc:db:7d:31:bd:c4:72:1d:ed:24:00:d6:7a:d1:7c:
b8:da:69:0b:a2:50:ba:39:bd:fc:76:8f:d0:e3:7c:d4:16:4a:
ae:12:25:8f:d5:9a:bb:96:75:30:6a:bb:a4:6d:08:e4:81:51:
6b:5d:47:e4:bd:32:6d:5a:10:9b:48:48:5d:35:0e:ed:55:67:
d4:3b:9c:76:ab:7f:18:ba:fc:2c:73:b4:50:5d:3a:8e:64:22:
99:ff:cb:cb:e0:2a:13:75:79:ed:b3:17:aa:9f:d8:92:8b:46:
87:ad:07:cd:67:00:e5:1d:87:2a:8f:ef:f5:9b:75:03:9f:a5:
68:98:99:d4:92:18:46:13:4d:3f:d7:66:20:38:e1:53:9c:b5:
8a:c5:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:59 2024 by rpki-client on console-fra.rpki-client.org