Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa
File: 4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa (raw, json)
Hash identifier: hqfnHuvbuE4K/iGHUxtD0YaUrwaso8ohwXTqTzTlddI=
Subject key identifier: E2:06:C7:21:BB:1B:16:35:90:FB:B0:EF:A3:9F:DF:AD:75:B0:A3:43
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 018F88F67619F177DF00CB761736604FD210
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa
Signing time: Fri 17 May 2024 23:50:04 +0000
ROA not before: Fri 17 May 2024 23:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.195.0.0/22 maxlen: 24
2a01:77c0:1619::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:f6:76:19:f1:77:df:00:cb:76:17:36:60:4f:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: May 17 23:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e206c721bb1b163590fbb0efa39fdfad75b0a343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:b4:de:88:4b:f9:49:16:4a:22:1a:9e:11:
41:c5:de:b6:b0:1d:8b:30:e8:c7:79:5e:f0:bb:c6:
84:ae:3d:cc:6a:89:c3:ed:d3:e4:49:52:35:b3:00:
ce:cf:85:f9:0b:af:58:f1:67:e0:1a:eb:17:36:8c:
be:df:ea:55:c9:cf:b4:d2:5a:f4:ff:8c:81:5e:78:
55:d8:f7:60:a5:df:5a:e7:66:c3:dd:d3:c9:96:eb:
5d:24:9b:d1:d8:82:0a:d1:d0:84:e0:ca:38:36:fc:
37:04:8e:23:08:b1:cc:8a:bb:ad:42:5d:73:a9:3a:
cb:5f:b2:4d:6a:ed:ca:05:cc:45:77:7d:62:e5:9f:
52:aa:57:4a:8d:e5:77:cb:d0:e1:93:58:35:40:cd:
8f:a8:7e:1c:66:c9:21:f3:3e:9b:49:3a:97:78:19:
a1:27:11:ee:e6:f9:b7:23:e4:74:11:84:5c:3d:de:
00:2f:60:0e:7f:ca:c5:e8:fe:4f:ef:d1:c8:1b:89:
77:5b:09:30:69:29:36:c3:e6:ad:56:9a:d4:2f:be:
34:76:ba:fd:49:5b:5d:5d:27:01:b2:e2:0f:37:a5:
70:e3:c4:6b:4b:35:0e:6c:30:38:31:e2:8d:9e:f2:
b4:f4:c3:f2:9b:c5:14:5a:c2:47:19:c2:d1:f8:3a:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:C7:21:BB:1B:16:35:90:FB:B0:EF:A3:9F:DF:AD:75:B0:A3:43
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/4gbHIbsbFjWQ-7Dvo5_frXWwo0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.0.0/22
IPv6:
2a01:77c0:1619::/48
Signature Algorithm: sha256WithRSAEncryption
71:0b:c0:6b:cd:08:b6:42:b4:5b:3c:bd:f1:79:92:20:ca:28:
d2:fa:82:4e:0e:16:90:07:00:92:32:fa:c8:95:60:78:8b:61:
af:6e:3c:7c:f7:90:95:d4:96:f2:bb:1f:7f:3b:53:4e:94:b1:
23:d9:87:80:8f:79:cd:52:4c:72:6e:3a:f8:48:84:db:be:3c:
37:cc:a9:31:e3:3d:08:76:11:b8:3d:35:b4:b3:53:c2:80:91:
1f:38:85:ab:2a:26:1f:b0:f8:56:96:f2:1a:72:8c:5e:6c:05:
40:18:1d:e2:33:4b:57:ef:0c:61:09:39:00:83:9a:4c:c1:1c:
2e:87:4b:c5:58:06:60:6a:ba:b1:c7:38:c0:ec:13:dc:2b:dc:
5e:95:70:a5:e1:0f:c0:2f:17:e9:2a:c6:31:fe:1a:9b:07:52:
48:81:dc:0c:18:8c:58:a3:62:a6:b1:f3:4c:63:1d:c0:dc:0b:
fe:c4:d1:c8:f6:10:41:31:dd:2b:09:49:9e:f8:5b:ec:65:09:
e3:e8:1c:f4:4a:ab:05:ab:52:04:30:a6:b3:b0:fa:dc:f5:54:
27:c9:d8:ae:a4:a2:7a:f2:22:a9:df:4a:23:c5:95:a1:30:79:
90:04:72:4b:c3:62:43:ec:68:43:92:be:e1:48:0a:50:ca:5f:
38:ad:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 18:28:45 2024 by rpki-client on console-fra.rpki-client.org