Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/tg1WgEL2be2tmGPA1bOittOVxSw.roa
File: tg1WgEL2be2tmGPA1bOittOVxSw.roa (raw, json)
Hash identifier: iEBcZiM5E4ohZ069nfHkq2lC3a5s8X+y8PQsOHNWXgY=
Subject key identifier: B6:0D:56:80:42:F6:6D:ED:AD:98:63:C0:D5:B3:A2:B6:D3:95:C5:2C
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 018CC26D45CA52F96101E717DCD43EAB1027
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/tg1WgEL2be2tmGPA1bOittOVxSw.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 185.240.128.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:ca:52:f9:61:01:e7:17:dc:d4:3e:ab:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b60d568042f66dedad9863c0d5b3a2b6d395c52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:27:57:2d:4b:d4:38:0e:c2:7b:ba:f9:0e:
17:ff:32:f7:5d:ca:45:a5:08:57:62:ce:be:2a:e6:
47:b9:df:8e:81:64:8c:3e:a7:77:0b:44:a3:a1:79:
27:2c:f9:8d:7e:92:75:0a:b9:d6:c5:f1:c4:5c:05:
ed:e4:a8:93:70:de:69:2d:87:a9:81:33:32:94:01:
94:45:ac:42:21:a6:b3:21:06:09:d0:09:3f:f2:1a:
ba:13:15:2f:ec:2c:ed:49:55:b3:55:a4:76:1b:b0:
a0:c7:40:b4:2d:5a:92:25:a5:dc:7b:98:ab:16:d8:
60:eb:16:e7:33:37:0b:6e:01:ed:37:93:86:66:1f:
eb:12:07:3b:fb:a0:4b:99:38:d4:c8:0e:0c:b9:26:
16:cc:8f:22:b2:d9:cf:71:c9:cb:0d:7d:91:90:22:
9c:22:7b:e0:52:f5:2b:34:ec:14:89:aa:3f:b4:49:
c2:27:f4:01:58:ce:54:06:20:73:a1:b8:cd:92:1e:
1d:af:d6:99:27:78:66:f9:bf:e8:5b:ba:e1:a2:0e:
51:e4:5b:75:f0:2c:ef:9f:c6:45:82:a6:00:08:00:
a4:be:a1:28:6f:63:6e:48:d4:cd:57:3e:5f:71:ca:
6a:1e:84:c6:22:ac:7a:20:3f:4d:e5:36:31:79:d5:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:56:80:42:F6:6D:ED:AD:98:63:C0:D5:B3:A2:B6:D3:95:C5:2C
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/tg1WgEL2be2tmGPA1bOittOVxSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.128.0/22
Signature Algorithm: sha256WithRSAEncryption
71:33:f8:b4:46:2d:08:90:15:e1:ce:bf:9a:26:47:6b:8b:e9:
2c:55:79:97:e6:b6:06:5a:f0:b0:f8:c2:41:c0:98:ed:65:8b:
b2:0d:ed:e6:19:91:e3:cb:d3:5c:39:54:f1:4a:87:7e:77:96:
4c:42:2c:2b:a1:17:76:71:4d:fb:e8:d6:45:26:b1:1b:0c:7e:
39:a4:c3:46:98:57:65:12:62:fd:3d:f1:62:ae:96:25:d0:8f:
9f:6b:d3:f0:b6:e2:f7:23:27:9b:41:25:6c:8e:6a:06:05:e8:
b8:c9:d2:26:5a:0b:19:39:04:eb:21:56:ab:a5:7d:7f:c7:5e:
76:30:5b:8f:a2:4f:91:70:09:27:dd:c3:38:46:fa:b2:be:26:
7f:b7:b3:66:8d:8c:8d:44:b3:50:3f:ee:eb:e9:a5:28:62:31:
58:f4:9a:13:b0:1e:49:98:93:5c:db:28:99:91:9d:26:1f:3f:
91:7b:22:98:c5:19:80:0a:c4:82:5d:5b:73:04:3f:9c:a8:4d:
85:da:9d:eb:16:26:b2:cd:48:5e:39:75:dc:67:38:d7:69:9f:
31:e0:6a:d5:f3:47:d2:c0:8a:2f:ba:42:45:44:ab:08:fa:d5:
52:93:f5:73:2a:7e:3d:fc:5f:82:cd:42:3c:aa:00:7e:b4:22:
68:fc:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:03:06 2024 by rpki-client on console-ams.rpki-client.org