Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/uZ_KYLjNQrMJsXpLL4m_W6gKSQ0.roa
File: uZ_KYLjNQrMJsXpLL4m_W6gKSQ0.roa (raw, json)
Hash identifier: cPkj5lc0SzloxSMffpkwsEnZwcmDsHn44R4tClhoRIo=
Subject key identifier: B9:9F:CA:60:B8:CD:42:B3:09:B1:7A:4B:2F:89:BF:5B:A8:0A:49:0D
Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial: 019363E8A0C9737BCA27FBBF31D619AD0415
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/uZ_KYLjNQrMJsXpLL4m_W6gKSQ0.roa
Signing time: Mon 25 Nov 2024 15:20:09 +0000
ROA not before: Mon 25 Nov 2024 15:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213822
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:e8:a0:c9:73:7b:ca:27:fb:bf:31:d6:19:ad:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Validity
Not Before: Nov 25 15:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b99fca60b8cd42b309b17a4b2f89bf5ba80a490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:19:95:c7:60:f1:0d:00:b7:bb:9b:a8:6d:
b0:13:0e:ab:03:50:19:b5:d9:13:3f:68:ee:5b:81:
11:56:83:4c:9d:3f:aa:4d:8c:d6:be:b3:4f:ce:85:
2a:41:69:eb:af:dd:74:c1:7c:70:9c:09:de:f5:82:
ce:bd:06:2e:8d:1d:ed:25:ec:5a:37:6a:ef:bc:81:
72:e7:8f:1d:50:97:6e:9b:eb:36:ba:c7:72:db:d2:
1c:bf:68:ec:68:e5:98:46:1c:ef:52:73:b3:7b:5e:
eb:cc:23:14:4a:d4:73:cd:54:d5:df:47:bc:1c:e8:
4d:bc:7d:0e:dd:91:cd:3b:9a:ef:6d:6a:fb:a7:b5:
2c:9e:62:c0:1a:d3:eb:5e:91:bd:0c:f2:3b:05:b3:
ae:09:94:0d:73:a9:44:68:28:e5:33:7e:83:33:ae:
46:d5:5c:36:5c:3b:be:d2:13:dc:8d:57:f3:1f:86:
01:1a:bb:3a:6f:30:85:bb:c5:ca:49:97:17:38:da:
9a:be:66:c5:20:70:ef:5b:78:c9:4c:2d:2f:77:29:
c9:f9:f5:ed:3c:4f:d4:32:6c:af:45:96:31:46:de:
a0:93:0a:e8:e2:02:cb:42:f6:6e:79:b4:f9:d4:57:
b4:ff:8b:31:71:34:db:57:db:95:1f:f6:a5:65:1e:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:CA:60:B8:CD:42:B3:09:B1:7A:4B:2F:89:BF:5B:A8:0A:49:0D
X509v3 Authority Key Identifier:
keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/uZ_KYLjNQrMJsXpLL4m_W6gKSQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
78:be:56:23:3e:29:a2:e5:92:fe:97:50:38:11:2d:cc:ce:a3:
ee:08:ac:15:86:e0:b5:9d:81:61:7e:82:3b:e6:45:05:6b:57:
94:6d:04:37:6f:ae:32:ce:77:c6:3e:49:62:0a:fe:e8:42:c3:
34:4a:a2:0e:c4:de:76:cf:f4:8e:b6:15:17:d5:4e:9c:d5:de:
a0:d9:6e:f2:52:b7:89:9c:13:12:a8:aa:6c:68:da:ef:48:91:
e3:6f:ca:83:74:06:be:29:96:9d:3c:38:a8:b2:87:d9:e5:bd:
f1:66:9b:44:4f:2c:a7:35:4c:90:d5:bd:ca:d4:c4:74:aa:95:
18:21:51:be:b0:e1:6b:5a:55:61:e9:0d:67:d2:95:2d:4f:4f:
40:37:e0:d6:2d:20:f3:e0:ed:c2:12:e2:d8:2b:19:2e:a5:93:
b5:60:6d:56:38:64:dd:b2:dc:7a:da:3b:01:52:60:aa:02:bb:
b9:7b:36:aa:ec:91:72:6a:6c:39:96:d6:57:cd:95:b5:0c:d4:
fe:1c:3a:5f:14:8e:f8:96:50:1e:da:3f:e3:65:6b:e4:06:88:
1f:7e:62:69:1a:a4:22:13:31:7b:9c:bb:29:7a:11:66:aa:6f:
cb:53:cf:52:71:51:78:78:c1:a2:a8:2e:dc:91:63:33:a8:08:
8e:10:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:51:42 2024 by rpki-client on console-ams.rpki-client.org