Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/irsEQQbqphrKxjsPBtuq5v1hdy8.roa
File: irsEQQbqphrKxjsPBtuq5v1hdy8.roa (raw, json)
Hash identifier: UmWcb2DyiJFXiEe9YXiKWWrC90xK6c9mb3EZAx4itt4=
Subject key identifier: 8A:BB:04:41:06:EA:A6:1A:CA:C6:3B:0F:06:DB:AA:E6:FD:61:77:2F
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018CC9BC2901B7FC2416FC8C4004BAE09140
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/irsEQQbqphrKxjsPBtuq5v1hdy8.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200533
IP address blocks: 185.117.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:29:01:b7:fc:24:16:fc:8c:40:04:ba:e0:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8abb044106eaa61acac63b0f06dbaae6fd61772f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:20:4f:ce:4b:c2:f0:6e:73:05:9a:4c:c8:
a7:37:a5:3b:02:05:d4:62:ae:17:5f:54:8b:21:da:
cb:cc:61:3d:93:1a:f3:8a:ef:f7:fa:81:08:86:95:
23:b1:b6:e6:3b:a3:2d:3e:06:ae:51:86:eb:e7:78:
71:12:4c:cf:4f:c5:88:32:a2:07:36:03:68:6e:7c:
42:66:8f:24:88:93:46:f8:e9:38:23:93:fe:bb:29:
5e:84:7b:50:01:f6:a8:3c:9e:11:2d:a2:7a:46:dd:
e2:82:07:41:dd:57:cf:b3:df:39:15:4c:6c:c9:15:
21:a2:c6:06:5c:e9:0c:b7:7b:cc:36:1b:c2:6a:32:
d9:0f:f7:af:75:52:19:d6:1a:35:df:a3:fa:0b:aa:
e8:f3:ac:99:59:90:93:4d:21:75:59:54:06:1b:05:
82:95:4f:b7:c5:99:1d:52:4e:ca:3d:44:df:c5:d5:
d1:85:ef:67:c3:cb:63:26:65:87:6d:41:d4:0e:ad:
ee:fd:49:d4:fd:52:82:21:23:63:d9:3c:33:77:f2:
45:b1:b7:d1:bd:2a:c6:8c:d0:df:30:66:a4:5f:54:
5d:d7:bc:c4:f9:d9:63:7b:76:dd:4c:fb:d5:86:ef:
b9:96:11:96:4c:86:5b:be:60:d8:50:bc:ad:3d:cd:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BB:04:41:06:EA:A6:1A:CA:C6:3B:0F:06:DB:AA:E6:FD:61:77:2F
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/irsEQQbqphrKxjsPBtuq5v1hdy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:da:bf:f6:9c:85:6d:5a:fb:86:f1:df:df:58:84:44:60:29:
8f:04:d2:7c:a3:d0:1e:a9:8e:73:5c:21:42:56:6d:36:ed:df:
e1:1b:85:99:b5:30:61:e4:e0:50:e7:77:80:f3:9f:b8:a4:4e:
13:da:71:61:56:86:b3:45:80:c1:6d:8e:53:19:e0:ee:27:ac:
1d:e3:5f:e0:7a:87:36:1c:ea:4d:d3:28:04:bd:c1:7f:3a:98:
95:59:81:51:bd:6a:28:c0:2b:c9:ea:be:25:33:55:7a:e1:71:
21:c9:c0:d9:49:94:b9:20:40:7d:63:cd:4c:d3:88:87:ba:64:
69:33:8e:e7:b7:99:e8:c8:a2:88:14:9d:72:bd:e5:b1:e9:fb:
74:8d:3b:a0:60:3e:3d:9d:6b:82:18:1d:64:df:2d:08:ab:96:
d0:90:32:51:10:36:09:ae:83:54:46:f5:6d:7e:f8:6d:15:2c:
42:c6:ef:28:b2:9f:2a:15:c6:45:e4:e7:d2:8f:de:d4:78:1f:
8f:00:b1:ee:23:14:99:53:be:31:f8:9f:7e:f0:73:1b:65:e4:
16:16:3b:c7:bd:89:2a:52:22:c7:a9:a0:73:1f:f4:f3:cc:07:
47:89:27:a6:c2:e2:da:41:cb:05:05:68:80:61:f2:37:77:09:
53:7b:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:53:25 2024 by rpki-client on console-ams.rpki-client.org