Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/u41sdDfcAjlQHDUIn-TCdg73KwE.roa
File: u41sdDfcAjlQHDUIn-TCdg73KwE.roa (raw, json)
Hash identifier: Q6DdQp7FX1EEhnX0U6af9tfLIe9A95h3zrQj7v4XB6c=
Subject key identifier: BB:8D:6C:74:37:DC:02:39:50:1C:35:08:9F:E4:C2:76:0E:F7:2B:01
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 018CC64B6B0A381982E75E28EBAE6A6D403E
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/u41sdDfcAjlQHDUIn-TCdg73KwE.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207174
IP address blocks: 185.211.212.0/22 maxlen: 24
5.181.240.0/22 maxlen: 24
185.49.192.0/22 maxlen: 24
185.249.108.0/22 maxlen: 24
2a0c:240::/29 maxlen: 48
2a01:a260::/32 maxlen: 48
2a0b:6b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6b:0a:38:19:82:e7:5e:28:eb:ae:6a:6d:40:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb8d6c7437dc0239501c35089fe4c2760ef72b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:21:ff:d2:3b:9c:8a:78:0c:3a:33:10:f3:
7d:4b:a9:53:3b:92:d3:59:8b:0d:ac:cf:43:c4:ee:
78:b7:54:e2:e8:b9:d9:ba:d7:03:fb:69:44:b7:10:
30:9a:0d:20:f0:57:f5:3c:61:9a:62:d3:6e:fc:2c:
40:01:51:20:a1:eb:63:42:d4:02:73:be:b8:1c:7b:
d1:06:5b:53:fe:61:a2:00:5f:e6:59:fa:94:f5:0e:
a2:8c:91:eb:bd:6f:98:ff:27:6e:ef:c9:27:18:37:
c5:91:b8:60:80:e5:d6:80:b4:70:5a:ea:17:15:8e:
32:70:25:cc:66:32:3a:02:ed:18:2e:bf:7f:cc:fe:
ea:99:7d:34:1c:1d:45:f9:2d:c5:c3:e3:9b:bd:d7:
96:e4:e4:92:f6:3e:d5:25:80:6b:0d:26:1d:20:a6:
7a:f8:74:e6:99:13:81:9f:7f:5c:d7:c7:32:c3:36:
c7:18:c9:63:f3:11:af:9f:e9:00:67:19:6c:12:6e:
f5:54:06:22:1f:bf:0a:03:73:f8:76:73:0d:ac:42:
a9:d6:95:ef:9f:ef:a5:42:0e:6f:54:32:d9:03:31:
4b:68:52:54:e4:53:61:db:6c:c3:44:ae:91:0c:76:
f0:0f:9d:b6:24:62:03:9f:05:28:7e:26:21:08:e9:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:6C:74:37:DC:02:39:50:1C:35:08:9F:E4:C2:76:0E:F7:2B:01
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/u41sdDfcAjlQHDUIn-TCdg73KwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.240.0/22
185.49.192.0/22
185.211.212.0/22
185.249.108.0/22
IPv6:
2a01:a260::/32
2a0b:6b40::/29
2a0c:240::/29
Signature Algorithm: sha256WithRSAEncryption
26:65:86:c9:1c:6d:f4:a2:ca:cd:7d:2c:2e:e8:0f:2a:96:71:
91:26:40:b4:32:ad:e3:65:2c:a4:1d:ad:b2:90:e9:54:b6:ff:
fc:df:0a:6c:15:f7:4b:99:d6:c7:5e:6a:89:24:2d:ef:aa:44:
36:80:73:a8:fb:fa:8f:e3:31:56:69:7c:98:a5:9b:41:78:25:
f7:6c:38:9a:a2:ec:f8:31:b1:7c:67:6b:c0:ce:32:a0:c1:7e:
34:c7:8a:ed:96:77:ad:dd:b2:41:04:81:0e:4a:54:86:96:0a:
99:53:24:7f:98:27:5c:4f:54:08:b8:ef:7b:03:d4:0a:72:ee:
bf:07:c1:16:3b:75:5b:bc:a4:ff:1f:1e:54:b7:3b:8a:98:b0:
85:f0:6f:8d:bd:4d:5f:b5:c0:10:74:f5:94:04:5f:f0:65:c0:
d6:06:46:ad:a1:23:db:90:6a:ae:7d:4d:a9:c5:66:1f:e5:17:
6b:34:65:b0:d2:69:90:82:de:c1:e5:db:52:a3:a4:f5:34:e6:
58:b0:94:12:c8:64:06:2a:22:a7:c9:1a:bc:c8:e4:ef:29:77:
76:e2:76:99:de:a9:5e:9e:4d:c9:73:b5:36:3f:67:0f:56:3c:
ce:9f:13:15:0d:61:70:7b:47:86:5f:6e:c0:39:df:9f:4b:a5:
f6:8e:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:22 2024 by rpki-client on console-ams.rpki-client.org