Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/N4y4gaUkhP_gsldB13xd1h6j6D0.roa
File: N4y4gaUkhP_gsldB13xd1h6j6D0.roa (raw, json)
Hash identifier: GYxcXVUcjuxAspMY0pTQrTIu33QH2812QNz3SpgMgCY=
Subject key identifier: 37:8C:B8:81:A5:24:84:FF:E0:B2:57:41:D7:7C:5D:D6:1E:A3:E8:3D
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 018E5CC6D89D529754BBE8AAB9F7DCBBACCF
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/N4y4gaUkhP_gsldB13xd1h6j6D0.roa
Signing time: Wed 20 Mar 2024 16:51:59 +0000
ROA not before: Wed 20 Mar 2024 16:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 185.224.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 08:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:c6:d8:9d:52:97:54:bb:e8:aa:b9:f7:dc:bb:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Mar 20 16:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=378cb881a52484ffe0b25741d77c5dd61ea3e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:d8:a7:a2:75:c2:b8:37:7e:0a:20:fa:af:
1a:b3:97:d1:bb:fd:f3:48:2d:b9:fc:23:56:7a:0e:
89:8d:57:e2:92:52:53:ec:40:88:f2:a6:86:25:ba:
76:a2:3d:f3:0d:75:07:cd:3e:6a:92:1b:00:4d:96:
20:bd:ad:76:fe:c6:dc:e9:55:77:18:2f:5c:54:ed:
b3:1b:56:bc:47:cb:06:19:5e:39:fc:9d:ce:d9:e6:
c8:cb:a7:15:31:9a:39:b7:3e:2f:45:39:81:5f:da:
af:b3:d2:1b:4d:4f:d7:a9:65:37:36:4e:5b:9a:9a:
f6:81:fb:53:b0:11:ba:99:03:6e:e9:1d:7e:64:78:
00:ff:ed:73:20:08:6a:20:52:ea:4a:ca:ae:35:93:
f0:f0:e5:32:0b:32:10:01:66:3a:b3:10:6f:d6:dc:
49:62:16:2c:3e:5e:7f:6b:d2:0b:a2:9d:4d:03:e5:
90:19:61:f8:d1:b7:92:0e:10:ea:1f:a1:11:6c:3b:
5b:13:32:d1:c5:a3:93:ec:1d:cb:53:e5:3c:5c:d3:
f3:f0:50:e6:a5:b3:21:a9:97:5b:7c:40:d5:e3:96:
12:ec:ad:cc:35:04:3f:b7:7d:d5:6d:43:f3:1f:1f:
20:af:f0:a3:4e:f6:95:3f:80:9c:39:5b:18:dd:f4:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:B8:81:A5:24:84:FF:E0:B2:57:41:D7:7C:5D:D6:1E:A3:E8:3D
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/N4y4gaUkhP_gsldB13xd1h6j6D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:82:6a:77:fb:b4:db:86:59:75:e2:60:ca:95:aa:2b:dd:ed:
b6:4f:20:8b:7e:ee:da:23:9c:ca:6f:86:c7:43:ae:ae:0e:a1:
ff:49:33:71:6f:dc:d5:6e:01:8e:f2:e3:3c:31:f5:8e:be:61:
f9:ab:67:a5:7e:34:63:57:08:79:c7:30:ae:7e:b8:a0:71:e6:
9d:37:94:03:09:12:c4:5a:8f:c6:65:fd:8d:2f:29:d0:ff:25:
d3:55:0b:0a:2d:f8:6c:12:34:7c:c3:73:bf:5e:27:0a:8e:1b:
fe:c1:7a:f2:4e:1c:6e:43:14:87:00:e6:b1:27:7a:44:24:82:
8a:5f:41:23:df:a8:cb:bd:35:61:01:66:5a:2b:42:cf:bf:ad:
16:c3:94:b0:05:fc:ea:9f:63:f2:0f:77:8b:0c:26:90:2b:a9:
e9:be:99:ac:9b:ca:b4:d3:7a:34:37:8c:7d:b5:aa:87:1d:8f:
86:b3:77:f3:72:fd:aa:51:5e:7a:be:21:09:82:9d:d4:cb:b9:
b6:25:46:7f:09:8c:89:27:f7:8c:53:9f:74:6b:f9:41:70:2a:
f6:d0:a9:04:d6:1e:43:b4:15:52:09:8c:ea:d2:74:0d:b8:fa:
d6:46:48:cb:f1:1e:02:d0:83:ab:8b:68:c1:0b:ca:1a:5e:7a:
ea:a9:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:13:24 2024 by rpki-client on console-ams.rpki-client.org