Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/LsdKL0F6gX3IBmtPFsEMF7rHtpk.roa
File: LsdKL0F6gX3IBmtPFsEMF7rHtpk.roa (raw, json)
Hash identifier: DB4Ak2OXSLLcOi2kStLiXHvH+yJ1zvNoY/w63Ymy9+8=
Subject key identifier: 2E:C7:4A:2F:41:7A:81:7D:C8:06:6B:4F:16:C1:0C:17:BA:C7:B6:99
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018CC26D610F398B62FDDEA47DAE488755B2
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/LsdKL0F6gX3IBmtPFsEMF7rHtpk.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.213.22.0/24 maxlen: 24
185.126.236.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
2a11:840:2::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:1::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:0f:39:8b:62:fd:de:a4:7d:ae:48:87:55:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ec74a2f417a817dc8066b4f16c10c17bac7b699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:63:83:d2:69:c8:63:f9:e6:ff:8d:ea:84:
fe:f4:45:57:35:bd:ec:1c:45:02:cc:d0:aa:77:d9:
a8:ee:3c:6b:1b:0f:6e:00:8e:67:43:67:f2:f0:fa:
89:ff:7e:52:d2:5a:04:11:c3:b4:02:70:c7:cd:c1:
d8:f6:01:2f:a6:e9:36:4f:1c:c2:cc:47:29:06:ab:
64:f2:46:40:be:35:c5:c5:f2:76:e1:64:9a:17:5a:
aa:a6:d2:67:88:ab:79:a1:6b:31:96:ec:4c:65:98:
5f:f6:80:10:16:5c:30:5c:1d:75:65:8e:b9:52:91:
fb:67:27:f8:48:d0:c5:b5:cd:95:1c:34:e6:d2:c0:
b0:94:e5:99:9d:92:30:f3:12:73:cc:e7:9b:38:da:
24:64:cf:60:cf:b3:08:ab:ef:aa:e9:7f:71:b1:4b:
a9:25:56:12:7c:f1:7d:e2:57:9e:e1:c0:0c:d1:3b:
5d:e1:51:76:5e:ce:a5:79:72:a5:f4:e9:77:52:0e:
66:9c:d7:25:11:59:d7:52:e4:fa:63:c4:0e:79:4f:
42:1f:a0:65:d1:97:ed:62:3b:a4:56:20:e1:82:53:
dd:23:81:b2:74:7f:8a:f9:68:47:15:0a:52:40:c4:
af:c8:db:0c:b0:d8:a5:d2:73:b3:77:8b:14:b6:68:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:4A:2F:41:7A:81:7D:C8:06:6B:4F:16:C1:0C:17:BA:C7:B6:99
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/LsdKL0F6gX3IBmtPFsEMF7rHtpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.236.0/23
185.213.22.0/24
IPv6:
2a11:840:1::-2a11:840:5:ffff:ffff:ffff:ffff:ffff
2a11:840:9::/48
Signature Algorithm: sha256WithRSAEncryption
83:a1:d5:78:19:24:7d:cc:9a:41:ab:56:e0:72:5b:7d:eb:9e:
b0:c8:57:3b:ff:c8:fd:2a:ed:4f:56:c4:44:b3:45:f3:5f:5e:
61:02:36:42:29:f6:52:a6:1c:49:fa:72:41:3f:52:f7:90:dc:
90:d4:e4:74:65:70:ff:60:35:23:66:c3:61:69:25:df:44:0b:
92:4b:29:ab:43:e6:b4:70:c8:ef:a0:6d:60:98:82:63:69:96:
fa:4e:80:9c:e0:ee:31:cc:3a:78:ae:52:e4:5b:d0:88:e3:8f:
ee:30:6d:a2:a7:cc:04:17:ba:42:96:d3:84:ba:64:73:35:62:
ac:93:46:fe:51:67:96:67:c5:ff:b7:08:da:3e:21:a5:d9:2c:
b5:9c:74:ca:fc:57:e5:38:3b:72:6c:0a:42:17:e8:ff:18:56:
5d:0f:71:0c:66:70:b4:0c:7b:35:5c:d0:4e:17:e8:a7:e9:6f:
71:1a:e6:5f:b0:b7:46:3a:f9:69:62:0f:f3:f2:cb:2b:77:ce:
71:38:5c:8d:20:9a:08:68:cb:dd:b7:a8:2a:c9:e9:5b:3f:c5:
13:74:21:13:60:f4:19:70:9c:d7:a4:3b:3c:68:72:63:98:f1:
18:14:81:62:80:3d:fb:72:48:6b:01:6e:de:93:aa:45:c3:07:
77:dc:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:36:39 2024 by rpki-client on console-fra.rpki-client.org