Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/1-Q_uIdLBKkokL6qEgABzEr69GJk.roa
File: 1-Q_uIdLBKkokL6qEgABzEr69GJk.roa (raw, json)
Hash identifier: La34rf7DHXpcZ3P+AKdqjL6xIl05Y+N6aPsnjZeX1Ys=
Subject key identifier: F9:0F:EE:21:D2:C1:2A:4A:24:2F:AA:84:80:00:73:12:BE:BD:18:99
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 018CC793E578EB205C13AF84FEE7BCF51F5B
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/1-Q_uIdLBKkokL6qEgABzEr69GJk.roa
Signing time: Tue 02 Jan 2024 00:30:07 +0000
ROA not before: Tue 02 Jan 2024 00:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51561
IP address blocks: 185.152.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e5:78:eb:20:5c:13:af:84:fe:e7:bc:f5:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jan 2 00:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f90fee21d2c12a4a242faa8480007312bebd1899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:75:9c:60:d2:64:eb:45:63:06:01:45:98:
bf:5f:31:44:f3:66:1b:ec:5d:19:d8:0d:4e:df:d1:
62:9a:24:9a:7a:4e:c4:06:aa:51:9f:e7:d3:ec:08:
16:bc:17:45:ea:c9:73:58:99:ad:82:62:60:a4:04:
fc:e7:63:58:88:63:13:8b:07:71:6d:2c:ad:d0:fd:
53:e6:be:1d:21:c9:47:68:1a:e5:7b:c0:c5:0c:86:
d4:05:66:70:de:74:cd:38:2f:9a:bd:0f:9c:6c:7b:
90:8e:71:96:e6:52:be:d1:3f:ec:82:af:22:b6:1a:
03:0a:39:23:90:ba:3e:4a:75:72:e4:71:b9:52:66:
bd:c7:09:b6:31:f7:c7:98:bd:d5:7a:a7:81:b0:2f:
d9:c5:17:9c:5b:8b:4b:cb:ea:c1:95:5a:ce:0b:7c:
aa:ee:8e:8e:f5:f9:fe:bb:c8:b1:cf:0b:da:76:ff:
de:04:4a:24:ef:d8:10:b8:0a:49:b5:d0:bb:ae:47:
e1:5d:5c:68:c7:45:89:0a:b8:ba:1f:15:f9:15:67:
26:c8:a4:43:2f:bd:71:fb:55:c7:3d:c3:ac:a4:c0:
da:06:ea:56:76:93:e7:67:c5:9b:4d:59:a0:4f:23:
f3:c6:8f:6f:40:73:5d:f8:b5:29:06:fb:df:9c:08:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:EE:21:D2:C1:2A:4A:24:2F:AA:84:80:00:73:12:BE:BD:18:99
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/1-Q_uIdLBKkokL6qEgABzEr69GJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.2.0/24
Signature Algorithm: sha256WithRSAEncryption
24:63:c4:e0:1e:a3:15:09:b4:25:4f:93:cd:2a:ad:ba:42:3e:
28:22:f1:3c:54:1e:b8:0a:f9:55:96:94:62:a2:3c:0e:d6:f4:
e9:33:41:eb:3f:3c:eb:2d:65:98:9d:8c:41:50:12:92:4a:81:
b9:c7:ae:7d:83:12:b6:f6:eb:27:3e:20:30:f9:43:29:9f:c0:
4e:74:7f:ec:16:9b:e0:c7:3b:a4:5e:ad:80:51:3f:49:43:52:
76:5f:92:66:6d:c7:97:45:04:22:b0:83:2e:ab:23:05:4f:b9:
e4:02:83:37:56:0f:b7:81:31:d0:35:4e:35:72:7a:de:79:bb:
d8:14:4c:31:91:78:d9:0f:78:9e:16:b2:a5:cb:29:22:b8:07:
43:83:fe:f3:01:8d:77:18:6b:10:52:21:9e:60:ba:65:6d:be:
ac:ee:2f:c8:ff:cd:20:44:ae:83:5e:02:f8:6a:e6:86:b7:7c:
41:f3:b5:fa:c1:50:45:8f:d7:a1:f5:d4:a6:84:f0:8d:8d:f3:
8b:33:c1:03:c0:bb:06:e2:22:04:16:5c:0a:12:29:d0:d3:0d:
1d:ca:76:46:2e:c3:1b:3c:66:d9:b0:ac:d2:42:10:22:5e:89:
ef:96:bf:b8:59:ae:1f:87:00:86:3e:12:ce:69:8f:d3:c6:91:
51:11:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:17:42 2024 by rpki-client on console-fra.rpki-client.org