Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/S3c7XHMjtItGFGxVEGLIQISKst4.roa
File: S3c7XHMjtItGFGxVEGLIQISKst4.roa (raw, json)
Hash identifier: 4rEc6dn42+7Q6SD4SBWM+RSlD+n8LKFhBZdwn4xt6lU=
Subject key identifier: 4B:77:3B:5C:73:23:B4:8B:46:14:6C:55:10:62:C8:40:84:8A:B2:DE
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018D8A73199CAB881E323227FFF8DE9DC2F1
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/S3c7XHMjtItGFGxVEGLIQISKst4.roa
Signing time: Thu 08 Feb 2024 20:40:15 +0000
ROA not before: Thu 08 Feb 2024 20:40:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204333
IP address blocks: 185.255.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:73:19:9c:ab:88:1e:32:32:27:ff:f8:de:9d:c2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Feb 8 20:40:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b773b5c7323b48b46146c551062c840848ab2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:bf:fd:d6:d6:c3:ea:8b:fb:64:fe:3c:ef:
7a:8f:7a:1c:b4:6c:d1:87:08:ca:84:cd:5d:40:b6:
8e:6f:64:42:02:2d:27:29:51:1f:60:d5:06:2e:97:
77:e9:44:c6:85:83:b3:1a:f0:43:0f:64:b7:d9:a8:
16:52:f9:7a:3f:06:46:f3:58:83:c3:e8:92:32:10:
83:30:78:ce:da:f6:d7:6a:3b:1c:47:26:21:e8:7e:
63:b8:10:04:68:21:7e:d5:98:bf:24:84:1f:21:dd:
24:69:f1:9f:20:9b:90:52:f6:ca:50:fd:3f:fa:ce:
ee:a0:88:5e:c2:04:ac:82:dc:86:61:a8:4d:ff:b1:
a9:99:f7:c5:8a:68:00:51:35:5e:b0:75:d4:54:a5:
b8:7d:de:9b:26:32:b2:ad:a0:fc:cf:e7:11:60:f1:
0b:d2:71:83:65:f9:0a:82:0e:80:02:2d:e9:50:d2:
93:20:65:59:ea:ff:3f:c6:60:d0:2c:86:80:74:e3:
ab:94:c1:ec:13:3f:69:15:2e:3f:21:90:c6:aa:7a:
bb:ae:da:e0:22:76:44:5e:4f:96:71:ad:19:d6:78:
ac:05:63:8d:a9:6a:77:c8:dd:27:5d:ca:2a:d0:04:
48:87:32:b3:85:92:93:52:14:e2:17:68:da:6f:86:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:3B:5C:73:23:B4:8B:46:14:6C:55:10:62:C8:40:84:8A:B2:DE
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/S3c7XHMjtItGFGxVEGLIQISKst4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ee:cd:83:22:9a:09:cc:3b:e7:7a:fb:0a:26:92:6d:29:5d:
38:54:e2:05:24:7c:5e:09:db:d3:50:a6:fd:13:96:2d:5f:35:
78:dc:a3:cb:71:88:7a:4d:b9:51:6f:6a:c4:2f:f3:8f:28:cd:
c1:0d:bd:be:bb:9c:74:0f:36:09:99:bd:a7:c4:aa:d4:56:9d:
c9:37:a2:54:be:14:08:b5:a7:d8:f6:88:ed:c0:30:19:52:67:
0e:da:d1:04:e7:84:de:32:e7:58:9d:c4:cf:fb:41:f8:a5:9d:
93:9b:62:66:cb:26:bc:6c:66:fc:48:46:34:97:cd:50:91:50:
23:44:d8:6e:b4:11:3b:ec:eb:7e:18:03:1d:b1:31:ee:51:c7:
fa:dd:53:e0:c7:5b:bf:32:bc:42:30:6c:35:c2:32:b3:49:40:
c4:72:18:7e:b2:47:5a:70:84:7c:f2:49:bc:b6:45:5b:2c:a3:
82:2e:59:d5:3d:ac:ba:e2:2a:0d:54:9b:76:ac:73:05:31:e7:
9f:b5:96:ee:48:46:79:e9:7f:d5:60:b6:f1:20:43:e4:0d:da:
c8:2b:d1:c8:76:e7:f8:4c:bc:cb:f1:b1:8e:c4:ba:3a:86:25:
b9:d0:59:e9:99:16:9d:39:25:c0:df:db:93:ff:50:b1:9f:89:
a1:55:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:52:50 2024 by rpki-client on console-ams.rpki-client.org