Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/n2sc0FVrO2g3XNRmUFLtSg3sN7M.roa
File: n2sc0FVrO2g3XNRmUFLtSg3sN7M.roa (raw, json)
Hash identifier: +z0N9B5jZYXypjXrnuYcuFjLYml6kEKVywW1kLIe3QA=
Subject key identifier: 9F:6B:1C:D0:55:6B:3B:68:37:5C:D4:66:50:52:ED:4A:0D:EC:37:B3
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 018CC794D05B73A37001107061FE249091D8
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/n2sc0FVrO2g3XNRmUFLtSg3sN7M.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207003
IP address blocks: 185.218.192.0/22 maxlen: 22
185.218.195.0/24 maxlen: 24
185.218.194.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a10:f2c0::/29 maxlen: 29
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d0:5b:73:a3:70:01:10:70:61:fe:24:90:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f6b1cd0556b3b68375cd4665052ed4a0dec37b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:e6:d8:0d:88:e3:24:e0:2e:28:d1:b7:e1:
99:a0:fc:7e:b9:3d:d0:4b:d4:4f:28:04:b5:11:1b:
e6:1a:68:90:f0:b9:4f:ac:a8:c8:0f:77:24:88:35:
18:3f:dd:d7:01:47:87:0e:2e:87:19:fc:7e:7d:cc:
59:6d:91:41:05:e1:36:70:49:ff:cf:7c:5c:83:2a:
63:a7:b9:fc:a0:79:84:8a:27:81:16:3a:c7:09:05:
1f:0e:ad:4d:d6:a4:0f:de:77:a6:0f:fa:86:4b:dd:
42:8d:a7:7b:40:3a:0b:86:0c:7f:6c:07:32:da:89:
1c:50:14:95:73:73:44:3b:2e:af:8f:aa:60:f0:46:
34:38:53:7f:20:4e:0d:e5:ae:63:eb:c5:b6:2f:0d:
c0:52:6e:ba:44:72:fb:60:30:6c:54:b6:33:29:ee:
03:78:5d:f3:c0:c4:84:14:90:65:16:ad:1a:c2:c4:
3b:f8:86:b1:55:9c:d0:25:bc:a5:51:0a:49:6c:2c:
6d:0c:6d:48:f7:1c:81:68:92:35:d3:6a:fa:16:a6:
47:83:1d:2d:19:86:8e:32:fe:a8:ec:6c:a7:aa:ca:
25:3a:bb:98:18:c0:bf:f2:1b:da:c9:c6:62:5c:f7:
9c:36:eb:06:19:92:be:65:22:c0:81:00:96:d0:56:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:1C:D0:55:6B:3B:68:37:5C:D4:66:50:52:ED:4A:0D:EC:37:B3
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/n2sc0FVrO2g3XNRmUFLtSg3sN7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:33:68:2c:55:59:91:66:6f:11:b5:8e:4e:b2:0e:07:4a:bb:
52:51:13:78:7f:d5:99:16:87:55:36:6f:8b:67:30:2e:ba:58:
a3:07:fe:47:eb:16:84:63:3b:0e:57:31:10:dd:bf:a6:d7:3e:
36:01:01:6f:07:e7:5a:6f:30:63:65:45:a5:93:fc:ab:e8:08:
ee:70:5c:7d:df:0c:41:15:6a:9f:b5:e2:98:22:78:c9:f0:6a:
ca:5c:87:7b:78:af:8e:d0:ea:5a:0c:5c:65:1f:0f:04:98:d0:
05:b3:17:3f:dd:64:71:16:f5:9d:bf:41:77:f9:ea:67:da:0d:
05:41:33:89:76:fb:12:00:27:18:bb:5f:da:66:4c:05:8f:91:
19:50:62:c0:d2:6d:8e:38:b4:9e:be:b2:0d:e7:a2:d3:94:30:
fb:a7:b2:a4:9e:96:e0:90:46:ea:08:3d:15:0d:6c:71:66:c6:
ea:c3:db:de:fc:c5:b0:88:9b:c0:a1:b5:68:bc:2d:c0:7e:7e:
5f:2e:b9:55:e0:d1:e6:04:3c:b8:cf:ce:d1:09:e6:fc:13:06:
f3:90:78:98:f4:68:e7:b6:77:38:23:56:6e:7e:dc:48:42:1a:
bb:ea:d8:ec:96:13:77:47:6c:5d:41:8e:61:00:ce:54:4b:12:
9e:f7:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:07:47 2024 by rpki-client on console-ams.rpki-client.org