Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/e4GF2Ip_aryiQcI0BepBmvM1bYY.roa
File: e4GF2Ip_aryiQcI0BepBmvM1bYY.roa (raw, json)
Hash identifier: MnYittfeKJ7pBklKAs4J9hjPz15VaazM3tgOZte9HkY=
Subject key identifier: 7B:81:85:D8:8A:7F:6A:BC:A2:41:C2:34:05:EA:41:9A:F3:35:6D:86
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 0190021255D4F8805D3D42A77B67920BD736
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/e4GF2Ip_aryiQcI0BepBmvM1bYY.roa
Signing time: Mon 10 Jun 2024 12:14:34 +0000
ROA not before: Mon 10 Jun 2024 12:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200425
IP address blocks: 185.107.196.0/23 maxlen: 23
185.107.196.0/24 maxlen: 24
185.107.197.0/24 maxlen: 24
2a06:45c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:12:55:d4:f8:80:5d:3d:42:a7:7b:67:92:0b:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jun 10 12:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b8185d88a7f6abca241c23405ea419af3356d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:e5:ef:48:cb:45:1b:b7:a6:48:bd:a3:2a:
61:40:78:f9:a8:90:f1:0e:e6:a6:3d:62:ce:83:f6:
72:87:35:4a:b3:37:70:76:41:82:76:65:3e:3b:f4:
d5:e9:cd:ad:c9:4d:65:38:e6:70:f3:6f:ad:40:0d:
4a:3b:a3:d3:a3:4a:eb:da:b7:54:3f:d3:15:0c:60:
0e:8f:9b:8b:51:fa:f7:ec:7a:2e:2d:f7:92:eb:05:
46:3b:64:c8:17:83:8f:c9:32:6a:1e:1e:e7:aa:75:
d6:cd:54:9f:76:ae:95:58:f0:04:57:b0:cf:72:3f:
2f:a5:f8:07:86:d8:fb:66:a9:b1:54:c9:e6:d2:9b:
e5:ab:0d:eb:bf:c8:11:04:ce:06:54:52:42:48:1d:
db:13:33:a9:c5:3f:af:7c:91:4f:f3:59:2f:c9:a0:
c9:5d:12:da:e8:ca:d2:cc:d8:26:5f:c3:b4:a2:8f:
bc:82:34:d1:3d:1e:8b:24:da:72:fc:c0:24:24:dc:
20:3f:fa:48:ec:43:9d:a2:74:38:3e:5d:8f:db:42:
21:68:15:29:14:3a:5d:f9:d3:0a:8a:7e:75:bb:ff:
2e:65:95:64:3c:05:88:81:a4:6d:96:e2:0c:5c:66:
92:0b:32:97:2c:ab:b7:a0:38:44:72:63:d4:77:1c:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:85:D8:8A:7F:6A:BC:A2:41:C2:34:05:EA:41:9A:F3:35:6D:86
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/e4GF2Ip_aryiQcI0BepBmvM1bYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.196.0/23
IPv6:
2a06:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:8c:96:cf:b6:c1:56:e8:1e:f3:ad:96:01:ef:e4:28:20:21:
af:ad:45:b0:f7:cf:b6:e7:3b:5e:85:d5:35:e4:b9:89:75:23:
90:83:92:62:0e:6a:69:7d:fd:aa:d4:68:c3:23:06:07:6b:4a:
ac:5a:aa:8c:d9:77:35:79:75:1f:59:3b:74:18:82:15:5a:ba:
ae:8a:cf:13:92:63:8d:61:e7:4b:d1:c8:d4:e6:ee:62:63:01:
ee:cb:ed:41:3f:af:48:ae:59:9d:73:01:76:6d:46:89:10:3d:
e6:3c:53:e6:fa:9d:b5:41:8d:cf:d4:c8:ec:47:87:d7:61:d1:
c6:f9:cd:3d:02:6d:cd:e8:d2:ba:fa:b1:a2:af:22:fb:81:94:
74:de:30:f6:f0:12:de:13:57:fa:57:e3:15:54:eb:16:1b:9c:
53:2c:ac:ee:6d:bf:b7:6d:44:5c:f1:d0:0f:4f:cb:36:96:b2:
04:92:6a:15:e0:f2:4e:46:b4:30:fe:58:08:14:08:01:4d:73:
f9:32:a6:40:74:99:99:d8:e9:20:bd:d4:35:1f:2f:08:fb:64:
e9:93:f1:dc:f9:d3:0e:54:8e:56:4c:65:97:4c:70:19:0a:07:
a2:25:0c:a5:b7:d5:75:54:aa:86:45:af:a1:d8:d7:2a:48:89:
98:4e:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:07 2024 by rpki-client on console-ams.rpki-client.org