Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/M75Cc2znCtvGk-jPYO7nO1DDZeY.roa
File: M75Cc2znCtvGk-jPYO7nO1DDZeY.roa (raw, json)
Hash identifier: eZbtVx/in9FP8qacbWwVCk/VGbqBQZJjxNnRkKwTiEM=
Subject key identifier: 33:BE:42:73:6C:E7:0A:DB:C6:93:E8:CF:60:EE:E7:3B:50:C3:65:E6
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 018CCA2A9FFE3A29F9B395AFC5FEC90D5276
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/M75Cc2znCtvGk-jPYO7nO1DDZeY.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 185.23.152.0/22 maxlen: 22
185.23.152.0/24 maxlen: 24
185.23.153.0/24 maxlen: 24
185.23.155.0/24 maxlen: 24
185.23.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:9f:fe:3a:29:f9:b3:95:af:c5:fe:c9:0d:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33be42736ce70adbc693e8cf60eee73b50c365e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:c8:1f:e9:76:f2:2a:36:34:ba:73:cb:f1:
fa:bb:d8:7a:51:0a:c9:dc:06:de:32:6e:9e:ef:8a:
4a:30:9a:72:10:ec:aa:2d:5a:8a:b3:50:ac:37:f3:
41:41:5f:40:78:be:7f:fb:72:be:4e:1c:ec:50:a8:
e9:c5:8c:13:e2:20:5a:87:e0:93:27:ea:ab:b2:93:
80:6c:89:32:e3:a3:15:5c:67:18:98:2a:a5:11:93:
09:74:fc:6f:75:04:53:be:8c:bd:cf:14:92:18:72:
e7:f8:64:c4:a8:de:77:7a:58:f8:c1:bc:ba:c3:6a:
4d:86:70:30:87:88:45:0f:2e:c1:30:1f:2c:97:47:
b7:cc:ab:66:d5:02:42:cc:f8:87:0d:00:25:f3:1c:
ec:d9:7f:5d:21:70:73:ac:f6:ea:f1:6e:a0:4e:f3:
39:53:f4:b1:40:e9:1f:19:4d:21:64:b8:11:3f:c4:
ad:5b:0b:6e:2b:05:0e:55:82:a0:1a:6b:81:53:b9:
00:42:db:bf:38:e6:86:79:06:a1:5e:d0:62:00:82:
f6:51:fb:f8:b8:ce:ca:7d:22:d5:9f:ae:bc:fb:ba:
4f:a8:d7:d5:dd:90:42:cd:fd:0c:9b:58:75:f1:05:
65:05:0a:2d:68:ba:3f:4c:66:a8:63:ed:34:b2:ee:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:42:73:6C:E7:0A:DB:C6:93:E8:CF:60:EE:E7:3B:50:C3:65:E6
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/M75Cc2znCtvGk-jPYO7nO1DDZeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f7:3f:28:64:c5:ac:f9:f8:02:e2:ae:fd:2b:38:97:97:c5:
f2:ef:08:15:7f:6a:d8:04:2d:31:8e:3d:77:84:07:f2:bb:d3:
17:de:5d:ef:94:60:b0:85:85:d4:50:74:f5:1f:0f:63:b9:ac:
62:43:4c:87:da:4d:9f:00:cd:90:50:bb:93:14:56:17:c4:01:
99:c1:e3:17:3e:20:c4:1b:15:be:7d:4d:eb:70:6b:b8:a4:84:
3d:13:05:1d:dd:1c:9f:65:9e:2f:dd:a3:14:75:9a:6d:43:7a:
ca:c8:1a:71:cd:27:a7:4d:e9:4c:e8:de:16:b6:ba:2d:f5:b2:
5a:24:92:59:25:fa:a2:d3:f9:52:6f:0a:24:33:80:7e:bf:ff:
4d:15:dc:55:96:99:6b:cd:48:98:4a:fb:d0:c3:3b:90:3b:22:
fc:2b:aa:79:82:bc:39:df:c1:cf:58:95:db:7d:b9:85:46:3d:
7a:eb:39:40:fc:6b:bc:29:fb:eb:eb:b6:76:a3:1c:52:03:f8:
fa:dd:3d:52:2e:d4:09:27:81:34:2f:54:ae:d6:78:e0:f0:eb:
30:e6:86:2a:12:49:19:c5:33:5d:dd:38:ca:e9:b2:8c:c3:82:
4c:73:fe:15:6e:96:e3:5c:fc:b1:08:33:5f:8c:7f:56:33:07:
d0:42:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:52:29 2024 by rpki-client on console-ams.rpki-client.org