Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/sW282B4-3brTg0qyOkm3doqvoTc.roa
File: sW282B4-3brTg0qyOkm3doqvoTc.roa (raw, json)
Hash identifier: eGL1SrzyOGahWHCnWqRgqOSXcMa8vfLxWuWC2DoBcyQ=
Subject key identifier: B1:6D:BC:D8:1E:3E:DD:BA:D3:83:4A:B2:3A:49:B7:76:8A:AF:A1:37
Certificate issuer: /CN=ba9c1933f1efd78700efdd5fdb0dc89cc8b6734a
Certificate serial: 018CC727040DFAFF374306F111F5D3BB14DD
Authority key identifier: BA:9C:19:33:F1:EF:D7:87:00:EF:DD:5F:DB:0D:C8:9C:C8:B6:73:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upwZM_Hv14cA791f2w3InMi2c0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/sW282B4-3brTg0qyOkm3doqvoTc.roa
Signing time: Mon 01 Jan 2024 22:31:12 +0000
ROA not before: Mon 01 Jan 2024 22:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.103.202.0/24 maxlen: 24
185.103.203.0/24 maxlen: 24
185.103.200.0/24 maxlen: 24
2a06:2d40::/48 maxlen: 48
2a06:2d40:3::/48 maxlen: 48
2a06:2d40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/upwZM_Hv14cA791f2w3InMi2c0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/upwZM_Hv14cA791f2w3InMi2c0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/upwZM_Hv14cA791f2w3InMi2c0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:04:0d:fa:ff:37:43:06:f1:11:f5:d3:bb:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c1933f1efd78700efdd5fdb0dc89cc8b6734a
Validity
Not Before: Jan 1 22:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b16dbcd81e3eddbad3834ab23a49b7768aafa137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:d6:2c:a5:92:5b:a3:4f:5f:37:ad:0e:fb:
37:d7:c9:0c:14:e9:5d:d4:34:e8:e4:57:f6:83:32:
8b:53:a2:0b:f2:16:9a:7f:f7:0d:81:60:33:5a:a0:
dd:45:92:77:b4:85:89:4a:cf:f5:5a:2e:12:58:3f:
1d:3f:8c:4f:3f:c7:ef:ce:17:4c:3f:b7:46:6c:78:
bb:b6:8d:93:74:e3:d2:44:c3:37:3a:13:5d:e4:60:
34:20:b2:ae:c7:81:28:ee:89:5c:ca:3b:16:3f:5b:
8e:d6:8a:b3:4b:e8:c0:6c:37:d2:e4:6f:b8:f0:f7:
58:88:72:49:36:37:70:62:fa:33:78:12:a6:bd:d7:
2b:d2:ad:59:07:75:6c:72:e6:55:00:84:05:18:7a:
4f:f5:e8:e1:f2:f2:3e:b3:a2:cc:e2:dd:e3:42:7f:
2f:08:57:0a:6b:59:c8:3f:e2:ff:25:45:78:02:09:
7d:5a:2f:f2:3b:8b:d4:73:b4:92:7b:31:5d:0f:cf:
00:28:9c:b8:e8:4e:3a:06:54:84:60:4d:1b:0e:68:
67:9f:e3:10:ec:fb:76:45:01:41:e6:34:21:88:10:
d9:45:78:8c:46:cc:f6:f8:b3:0e:95:ed:fb:54:38:
43:d5:eb:79:fc:24:25:36:e0:c8:a3:f9:73:41:a3:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:BC:D8:1E:3E:DD:BA:D3:83:4A:B2:3A:49:B7:76:8A:AF:A1:37
X509v3 Authority Key Identifier:
keyid:BA:9C:19:33:F1:EF:D7:87:00:EF:DD:5F:DB:0D:C8:9C:C8:B6:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upwZM_Hv14cA791f2w3InMi2c0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/sW282B4-3brTg0qyOkm3doqvoTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ff3422-0ecd-4bb5-8b27-5d9603638322/1/upwZM_Hv14cA791f2w3InMi2c0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.200.0/24
185.103.202.0/23
IPv6:
2a06:2d40::/47
2a06:2d40:3::/48
Signature Algorithm: sha256WithRSAEncryption
1c:01:be:91:ba:de:d0:23:9d:09:47:da:e1:5a:1d:65:8b:28:
35:96:30:5c:e6:4c:7a:4d:a0:82:f9:fb:9c:36:4b:5c:c1:14:
38:cd:83:36:6f:38:bd:00:70:51:24:71:b0:33:10:bd:3e:a4:
52:e8:ba:ae:2a:af:14:c6:4d:20:0c:ad:79:11:8d:73:a8:b6:
b8:86:45:1c:b3:13:e3:11:81:0e:c0:db:ef:f2:35:49:ac:80:
e0:f6:4f:3f:19:ad:06:34:9a:46:21:56:00:94:12:a0:b0:9d:
98:5e:9b:81:68:f8:c6:94:46:f2:c2:bd:87:fa:da:d4:b8:7c:
08:33:b8:26:f3:72:f0:a4:4b:13:3a:a5:d2:2b:a2:e4:16:2f:
8d:ff:0d:26:64:a3:22:15:04:73:b0:21:f7:8a:56:24:42:44:
67:9a:47:75:2b:a7:6b:4e:9e:10:bd:01:c8:96:5c:c0:47:35:
82:f5:86:d1:aa:89:0e:ca:d7:6b:72:f3:95:17:d1:f2:72:5e:
57:af:39:c2:22:85:cc:59:30:bf:15:5c:dc:91:6e:0b:51:52:
b6:04:dc:ae:18:df:8f:be:95:29:4b:d7:59:33:7e:4d:03:14:
a2:cc:45:63:aa:80:06:0f:71:92:61:44:75:9c:55:f8:78:4e:
bc:ed:6c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:18:18 2024 by rpki-client on console-fra.rpki-client.org