Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/obBE1iEcSoN0jyqaLFcOElOHPKo.roa
File: obBE1iEcSoN0jyqaLFcOElOHPKo.roa (raw, json)
Hash identifier: FQKVFtHKjJwJLhwwBumbkysX2tVuC3A8rzbcfYkoEPc=
Subject key identifier: A1:B0:44:D6:21:1C:4A:83:74:8F:2A:9A:2C:57:0E:12:53:87:3C:AA
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 018CC49320E6AFC78FA4864F438E1CD7BAA6
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/obBE1iEcSoN0jyqaLFcOElOHPKo.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211814
IP address blocks: 185.225.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:20:e6:af:c7:8f:a4:86:4f:43:8e:1c:d7:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b044d6211c4a83748f2a9a2c570e1253873caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:6c:26:8b:29:4d:05:bb:34:f0:86:3f:9a:
8a:a9:c9:96:37:ad:53:78:c8:ce:27:fa:97:3c:c7:
dd:f7:26:07:ae:ae:33:14:04:8c:71:61:85:e2:28:
70:a1:56:7b:58:7a:cf:78:30:18:3b:9e:9a:5a:f2:
16:08:ea:51:ed:a0:17:2e:eb:4f:f7:30:4d:55:7f:
1b:e8:b9:b8:88:18:eb:70:ca:4f:76:b1:5a:57:d2:
17:5d:0b:66:03:b3:d8:b7:cf:fa:40:87:e6:25:e2:
bc:90:c4:75:76:37:b9:bc:b4:e2:c0:b0:3d:e4:6f:
9a:4b:5e:8e:13:cb:8c:f7:a5:42:cd:2c:ec:48:84:
7e:44:59:02:6c:d5:8d:0c:79:48:54:d5:05:ca:ee:
a3:d4:ee:68:b2:90:e4:26:9a:18:54:85:5d:f7:5a:
21:63:48:44:b7:cd:38:87:37:66:90:53:ae:07:a0:
11:df:e7:60:9a:6f:b6:1d:b4:b6:45:20:69:b1:17:
6a:09:c5:f5:d5:60:9d:5e:55:50:dd:51:f6:d4:ce:
31:bc:1f:52:fe:7e:13:c0:9f:2f:73:90:df:c2:08:
47:cf:2e:58:a3:51:9c:6c:4a:44:31:0c:53:70:55:
85:2b:ad:fe:c5:53:42:5c:ee:74:07:50:e4:d5:cf:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:44:D6:21:1C:4A:83:74:8F:2A:9A:2C:57:0E:12:53:87:3C:AA
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/obBE1iEcSoN0jyqaLFcOElOHPKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.199.0/24
Signature Algorithm: sha256WithRSAEncryption
86:03:2d:1c:5c:11:da:9c:79:bc:9b:47:3b:f1:c0:58:65:da:
30:ed:2a:65:a0:ed:fb:68:21:23:71:b6:a3:21:15:54:c4:9f:
da:7e:c0:65:ee:31:5a:60:af:36:7f:56:b4:2d:48:bf:13:02:
6b:52:57:19:46:85:37:1b:8a:7c:f5:c9:e6:a3:40:e8:e9:67:
ff:98:aa:1d:15:fd:5d:2b:be:68:da:83:f0:25:92:db:28:f2:
d5:af:dc:c9:49:9a:69:6f:05:db:96:75:51:f6:b4:10:2f:cf:
7e:1e:d7:da:5d:9b:08:93:93:a1:3b:09:f4:3f:ba:5b:9f:6e:
9c:c3:4d:94:a0:15:f0:54:d1:cc:76:33:f0:7c:c7:98:33:e9:
e2:1c:6c:6e:61:48:03:59:a3:99:a9:9c:5e:6e:6f:fc:22:bf:
01:35:1b:b3:e0:3d:5f:ec:03:d7:b5:5a:80:c4:b8:e2:7b:ba:
9c:ac:6e:30:53:bf:ac:d1:22:c1:c2:51:b0:1d:8a:2e:4a:5a:
b8:c9:91:45:84:2f:60:78:37:07:0d:d6:0b:c5:d2:6a:b3:0b:
a7:91:79:98:af:b8:bd:5e:e7:f5:e8:23:24:bf:d7:4d:80:54:
a1:66:00:b4:bb:2d:d4:fa:2a:7e:46:d8:61:9c:17:17:ba:f0:
6e:fc:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:46:45 2024 by rpki-client on console-fra.rpki-client.org