Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/imTFHO7EiUWB2-q2oCKXu_UJqn4.roa
File: imTFHO7EiUWB2-q2oCKXu_UJqn4.roa (raw, json)
Hash identifier: 7GpVOBacTnE0ydbvm/3iB9M81WOV/AqzaYg16apNnoM=
Subject key identifier: 8A:64:C5:1C:EE:C4:89:45:81:DB:EA:B6:A0:22:97:BB:F5:09:AA:7E
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 018FF4331647121B1AAEBE61E4200C6C3454
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/imTFHO7EiUWB2-q2oCKXu_UJqn4.roa
Signing time: Fri 07 Jun 2024 19:35:39 +0000
ROA not before: Fri 07 Jun 2024 19:35:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215380
IP address blocks: 185.229.32.0/24 maxlen: 24
185.229.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:33:16:47:12:1b:1a:ae:be:61:e4:20:0c:6c:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Jun 7 19:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a64c51ceec4894581dbeab6a02297bbf509aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:fb:0b:7b:53:d8:d2:de:3f:58:da:13:0b:
83:d9:99:1f:3f:b9:1a:29:c3:13:f2:22:bf:d1:41:
42:9a:2b:df:f7:c2:9a:75:20:33:2a:0b:a6:a3:63:
90:32:8a:65:95:00:f6:dc:3d:ba:c1:4a:5b:d4:f1:
25:9e:31:68:72:3a:4a:26:98:36:fe:67:34:09:b7:
34:f5:fd:00:05:67:a7:49:f2:17:3e:e7:22:27:24:
ed:cd:23:8e:82:7c:da:9f:99:70:cd:36:12:50:eb:
3c:96:71:8a:30:5a:e1:8c:40:4e:4a:a0:6c:b8:d6:
da:f2:b7:eb:5a:a2:fe:d8:ac:5e:e1:5d:e4:2f:58:
7e:51:ce:58:c4:57:f0:c8:ed:ef:5c:1b:e7:89:1a:
4e:39:b1:a7:b1:da:08:64:75:88:45:11:f6:33:57:
36:20:6d:6a:a3:71:45:ff:ff:09:0a:ab:1d:81:7e:
84:9b:9b:18:45:fc:2d:a9:5e:e4:49:bf:bf:05:46:
7b:99:5b:ef:36:4c:8e:1a:ac:3d:54:6b:77:8e:a8:
55:26:e0:2c:85:99:01:a5:bc:39:46:9b:83:9f:4c:
22:b9:84:97:42:b0:28:3b:23:1d:93:2c:d3:4b:86:
ae:4c:6a:22:ab:ad:cd:ef:bd:9e:76:6e:e7:90:5a:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:C5:1C:EE:C4:89:45:81:DB:EA:B6:A0:22:97:BB:F5:09:AA:7E
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/imTFHO7EiUWB2-q2oCKXu_UJqn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.32.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a4:77:0a:51:ba:42:b5:9f:61:6e:3c:d1:22:7e:43:47:1e:
6f:1e:aa:8a:5b:22:3c:15:de:c8:d2:9c:e4:b9:27:50:61:bc:
f7:5c:3f:ae:c0:9e:da:f3:c7:66:ad:b5:c9:0d:a1:90:47:7b:
4e:6f:c8:93:50:d6:b1:e5:07:4b:84:1f:df:b4:81:e6:12:b3:
df:f9:3c:19:98:6e:48:a1:bb:2f:da:97:46:84:9b:b4:32:da:
a1:a5:b3:21:90:82:a0:9f:a7:12:c5:ee:95:d2:38:40:72:2f:
b8:1d:e1:24:fd:6d:08:d9:a0:db:03:2b:17:8b:73:6e:fa:66:
ba:f0:c5:4c:09:e3:f1:80:62:bd:50:d0:15:87:45:d7:1f:39:
9c:65:d0:47:16:8e:ef:6c:22:43:04:27:04:33:29:5e:87:4d:
21:23:29:8d:3f:60:60:7a:a8:2b:48:ec:de:2e:b7:98:57:40:
0b:57:f5:4f:2b:5a:5a:d4:94:c5:e3:36:7a:f8:e2:f6:74:49:
28:96:93:6c:05:f5:24:7d:1c:83:97:c0:6c:ea:1c:80:59:4d:
53:db:a2:62:cc:ad:27:f5:d4:85:f6:eb:14:a8:14:a2:c1:c4:
86:63:32:e3:1c:84:81:21:a4:76:bf:87:89:97:5e:91:43:cd:
d6:1d:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:11 2024 by rpki-client on console-fra.rpki-client.org