Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/oCaopvMywS4ml1ziTPMTd23kAEQ.roa
File: oCaopvMywS4ml1ziTPMTd23kAEQ.roa (raw, json)
Hash identifier: p8w96/iDCEIbPTiBCmTFWe4HSf038y+sP9fXG5H7aMU=
Subject key identifier: A0:26:A8:A6:F3:32:C1:2E:26:97:5C:E2:4C:F3:13:77:6D:E4:00:44
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 018D06FE87DE7D5143E7F0AF51CFB49BEA16
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/oCaopvMywS4ml1ziTPMTd23kAEQ.roa
Signing time: Sun 14 Jan 2024 08:02:40 +0000
ROA not before: Sun 14 Jan 2024 08:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.47.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Oct 2024 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:06:fe:87:de:7d:51:43:e7:f0:af:51:cf:b4:9b:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jan 14 08:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a026a8a6f332c12e26975ce24cf313776de40044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b0:b9:32:d1:e3:3d:d4:77:8d:83:d2:92:12:
4d:d3:f1:8d:50:aa:6c:93:75:d9:ce:d1:0c:33:8d:
88:e1:88:40:5d:9e:68:b0:6e:24:32:e8:00:ab:fd:
5a:8a:21:b4:aa:16:c2:5e:d1:5f:e4:e9:69:47:dc:
7d:1f:fd:d9:92:60:ab:58:1a:ae:44:63:df:2a:98:
89:33:67:f8:17:d4:24:29:f8:54:06:c6:d6:70:98:
a6:47:96:95:97:18:75:2f:c7:3f:72:d4:5a:5a:88:
9c:c0:29:2f:ad:14:2c:b8:ae:6e:13:34:f6:42:d4:
52:a3:ca:87:6d:75:05:f2:3c:b0:dd:fb:e7:66:12:
a9:80:cf:d8:b4:06:57:fd:10:0a:69:49:30:c0:b9:
1d:86:73:5e:b9:b7:54:dd:fb:6b:b8:8e:63:31:e7:
d2:1e:b0:b3:e2:a2:9b:77:09:27:3e:d3:26:70:42:
6e:e0:59:52:2a:16:d8:99:02:a8:bb:de:73:9c:43:
6f:86:be:0b:a9:5b:7c:17:45:0e:04:4c:dc:a0:74:
b3:39:b4:4a:5a:d8:c9:48:cc:08:06:21:2e:f4:80:
dc:7a:b1:63:f1:8c:3e:bc:98:60:f4:11:ab:97:d8:
a1:26:f2:a3:dd:53:4a:42:37:29:e9:2d:3c:f0:06:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:A8:A6:F3:32:C1:2E:26:97:5C:E2:4C:F3:13:77:6D:E4:00:44
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/oCaopvMywS4ml1ziTPMTd23kAEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.182.0/24
Signature Algorithm: sha256WithRSAEncryption
13:11:fa:64:23:b8:f2:ce:8d:85:3f:8a:fe:92:1e:3d:2d:88:
ef:7f:ee:fb:49:93:b4:4d:da:b6:70:ba:4f:72:b8:fe:18:1b:
60:5a:8e:26:93:08:51:a5:28:26:80:cf:6f:4f:3e:df:a0:93:
fd:77:be:77:0c:ce:5d:b5:bb:ff:62:0b:21:86:d1:26:66:08:
9a:ed:63:a4:b4:83:9e:36:c2:9a:55:16:5f:f4:76:21:01:57:
fe:59:bc:8d:e7:5c:3a:e6:19:cd:f0:fb:28:b6:29:91:e7:ef:
23:dc:67:e3:4a:f9:c1:f2:91:ce:96:af:64:e8:c6:c1:6e:29:
87:9a:0b:e1:2d:f0:4e:6a:e4:f4:1b:86:9c:5f:c2:55:49:7e:
1c:e5:5e:cd:cc:67:eb:05:a7:9d:d2:c9:9d:55:77:82:c0:dc:
1e:33:24:fc:57:f5:0e:f5:ef:d6:59:0c:13:af:a5:8f:4a:88:
f2:fd:cf:35:ca:af:a6:82:68:99:83:82:0b:e8:e9:35:b6:48:
7f:03:92:ec:10:2f:77:be:a1:67:b2:b9:ad:25:fe:3b:5d:1e:
37:99:71:1a:8e:5a:28:02:e5:a5:3f:b6:e8:cb:2b:36:e7:8c:
06:bd:20:38:b1:11:f3:33:b0:d0:b0:6a:00:84:50:3a:d6:a2:
92:e1:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 22:28:50 2024 by rpki-client on console-ams.rpki-client.org