Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/g87p2tcRIXeBWaId0mgMpUHs9fQ.roa
File: g87p2tcRIXeBWaId0mgMpUHs9fQ.roa (raw, json)
Hash identifier: XNy0byiezKwkVhHCbNNKYK4p67ilAUz7wvQiiTAJMQs=
Subject key identifier: 83:CE:E9:DA:D7:11:21:77:81:59:A2:1D:D2:68:0C:A5:41:EC:F5:F4
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 018CC8DCE8F2BBAF3ABFBB71B3554C779B91
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/g87p2tcRIXeBWaId0mgMpUHs9fQ.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209093
IP address blocks: 185.243.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e8:f2:bb:af:3a:bf:bb:71:b3:55:4c:77:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83cee9dad71121778159a21dd2680ca541ecf5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:a0:72:b5:21:33:61:eb:79:53:87:c4:01:
70:0a:5c:32:ee:69:97:d2:f3:f7:b6:c3:62:c2:f8:
20:a8:c0:e7:3e:b2:71:d2:4b:c5:67:03:9c:df:44:
bd:76:11:5f:1e:08:87:08:14:73:5f:5d:9c:72:41:
81:31:57:ad:9b:5e:2e:8a:f5:3e:4c:e4:ed:f3:76:
22:77:d0:1b:cb:cf:ad:35:23:c8:51:c3:ce:e1:4f:
f1:70:bd:e5:61:75:97:70:48:92:4c:59:57:93:96:
c7:ac:91:f6:ee:31:95:8a:a9:50:07:2b:97:31:50:
b1:dc:86:e6:e3:b6:96:cb:12:c2:44:31:1a:61:08:
c8:4d:93:ae:c8:d3:cb:96:8c:ad:dd:b8:b6:48:54:
2e:27:ce:56:17:2a:eb:6a:4d:eb:fd:38:2a:95:53:
74:9f:29:3f:95:bf:d7:6d:5e:66:11:5a:58:ce:95:
c1:0c:91:73:f5:b6:72:d3:b1:0e:2a:7a:00:10:c6:
08:7f:66:0c:90:41:a9:73:12:04:0e:ae:fc:d8:2d:
39:43:51:92:86:8a:14:9c:f0:03:5a:29:c4:8d:18:
72:a9:52:22:f2:28:4d:80:35:d1:c8:5c:9c:cd:f5:
7f:e1:62:cc:64:aa:df:ff:5b:4a:a6:ee:e2:82:76:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:E9:DA:D7:11:21:77:81:59:A2:1D:D2:68:0C:A5:41:EC:F5:F4
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/g87p2tcRIXeBWaId0mgMpUHs9fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.21.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bb:5f:77:51:27:74:26:e1:31:a0:14:4d:ea:5a:8d:c2:3b:
2b:54:22:f7:8b:6d:99:88:93:92:48:64:5d:b0:82:16:72:c2:
fa:0c:c8:c2:44:dc:56:ff:43:fa:eb:08:b4:db:4c:18:12:05:
88:57:01:39:f1:4f:f7:9a:0a:b5:83:a9:ff:a6:ac:ff:93:25:
a9:09:a5:7c:a3:ca:d7:b9:39:88:4b:30:c4:8f:b2:d2:19:55:
cc:56:73:65:00:ce:f8:fd:bc:80:30:d7:a9:b3:3e:db:9f:3e:
5a:71:26:83:67:f5:17:ed:00:03:ed:43:cd:fa:30:ad:d0:c0:
b4:8b:ac:e9:ef:62:25:e4:69:b7:d6:08:36:03:d4:a4:53:62:
b3:3a:43:3a:f4:b0:29:c1:24:a2:97:6d:4c:e3:cf:cf:e1:17:
1b:f6:6a:d2:d4:21:e9:3d:36:e6:19:92:72:72:db:22:b6:a4:
9e:ef:12:05:a4:e0:dd:6d:4c:f9:e3:9f:56:38:7d:aa:b8:fe:
45:81:b2:26:e2:fd:25:cf:f4:01:72:07:f2:af:ab:a7:4d:2e:
be:f3:7f:75:0d:59:07:78:ef:95:cb:70:27:a8:84:89:48:71:
d9:c0:0a:d1:78:23:b2:72:a5:54:9a:64:45:cd:23:a6:e3:bc:
2c:43:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:13 2024 by rpki-client on console-fra.rpki-client.org