Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/c2Um77VBBMUz6W5fC5pzyvl2OUE.roa
File: c2Um77VBBMUz6W5fC5pzyvl2OUE.roa (raw, json)
Hash identifier: cEtfb8seliakExAI/ZbHqG/Jt0hl9jD+e7tgBsXBdnU=
Subject key identifier: 73:65:26:EF:B5:41:04:C5:33:E9:6E:5F:0B:9A:73:CA:F9:76:39:41
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 018CC8DF6DAA0751AC5B049C04ED62038D7B
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/c2Um77VBBMUz6W5fC5pzyvl2OUE.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 185.200.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6d:aa:07:51:ac:5b:04:9c:04:ed:62:03:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736526efb54104c533e96e5f0b9a73caf9763941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:5d:c9:94:2e:90:d8:f6:1b:0a:82:80:f7:
5a:0c:f7:10:a9:b9:60:87:13:94:3e:5e:e5:da:d0:
9d:05:8b:31:6c:d0:e1:b2:d0:04:02:f7:f2:e4:78:
25:51:81:50:bf:f1:53:b5:10:22:da:f0:fa:0c:23:
3b:dc:b9:d5:ec:34:e2:91:6b:6c:ed:82:33:54:86:
a0:99:51:7c:3d:af:e5:28:78:b0:95:27:e7:87:fe:
2e:ab:54:8c:a7:09:f3:8b:ba:ec:7e:f9:a5:89:67:
63:12:18:c6:76:cc:e5:06:ac:3f:d7:07:f6:2a:df:
c3:91:71:5a:35:02:e1:77:61:ac:44:b0:04:53:40:
15:27:61:dc:a6:00:58:f9:56:ee:93:be:89:49:bc:
3e:dd:ff:b7:75:7d:54:07:66:ef:3e:aa:c3:cb:52:
01:8f:85:39:6c:8f:4c:d6:a0:f7:dd:4a:d0:e7:54:
c4:cc:c6:4f:b2:7f:d2:ed:25:94:a8:26:2f:a3:79:
c7:a2:0d:94:01:72:aa:69:f0:54:35:a4:d6:93:42:
c3:aa:0a:84:26:54:1d:91:38:25:41:bd:f8:07:e4:
66:c6:27:a7:d3:c6:84:3f:b8:eb:c5:52:27:4f:b2:
6e:c5:b2:db:48:21:b2:b0:0b:97:f5:fc:18:27:02:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:26:EF:B5:41:04:C5:33:E9:6E:5F:0B:9A:73:CA:F9:76:39:41
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/c2Um77VBBMUz6W5fC5pzyvl2OUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
96:05:e6:59:7d:28:24:7a:0b:dc:b1:63:06:00:20:1f:50:10:
6d:0c:9f:2e:9a:90:5a:d5:9e:c6:d6:7d:6f:63:8b:49:d9:45:
d5:87:99:13:cc:94:64:17:95:7f:4e:47:3a:40:a6:4b:95:14:
b8:d7:8e:af:fa:b1:5a:47:65:76:24:36:ca:8f:2d:59:1d:9e:
46:cf:45:10:00:67:08:50:5a:69:e4:a1:e6:95:40:3c:73:ab:
8f:71:75:d9:67:99:00:03:70:b1:d8:37:4e:a0:f9:11:d2:e9:
f8:ff:a6:d3:cf:ca:f9:24:95:23:94:d1:38:c0:0c:ac:62:63:
d0:c7:fb:25:43:c5:99:68:3e:62:4a:83:42:c9:23:c2:af:af:
fa:9e:2a:95:15:28:38:af:a0:a5:aa:cb:b2:12:87:ab:f6:43:
59:e5:ca:b0:9c:64:ad:33:76:32:c3:bd:72:c9:b3:e4:77:cd:
1d:de:8a:c2:d3:3c:c7:05:1d:80:3f:ea:ad:a1:49:b9:2f:80:
cd:62:05:f6:47:69:d8:f0:79:a4:b2:0b:3e:0e:66:f8:8b:7c:
3f:8e:9f:06:77:40:61:94:31:59:74:2f:93:ad:73:42:b9:0c:
c7:2d:b1:13:c8:ca:55:39:67:a5:d1:7a:98:d8:23:47:94:57:
e7:dc:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:18:39 2024 by rpki-client on console-ams.rpki-client.org