Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/m2E145NPKbRX_VOp8ovV-3hxCb4.roa
File: m2E145NPKbRX_VOp8ovV-3hxCb4.roa (raw, json)
Hash identifier: DL9/79yMxtcLVnGtVsBdvZ+mMwpJd/l7irsQkxQyzso=
Subject key identifier: 9B:61:35:E3:93:4F:29:B4:57:FD:53:A9:F2:8B:D5:FB:78:71:09:BE
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018CCA2A9F3EC47D9E244129467D7C6A3F19
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/m2E145NPKbRX_VOp8ovV-3hxCb4.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202520
IP address blocks: 185.111.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:9f:3e:c4:7d:9e:24:41:29:46:7d:7c:6a:3f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6135e3934f29b457fd53a9f28bd5fb787109be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:b7:e8:37:c8:27:6a:7f:c7:70:bc:ac:06:
ae:c4:db:5e:fe:8e:bf:b0:1c:76:0f:29:56:ff:aa:
5b:bf:f0:a8:95:18:36:6a:10:70:6f:44:10:10:72:
3b:03:4f:84:ce:4e:39:1a:7f:a3:7d:29:a0:15:f9:
8b:86:57:c2:7c:0e:4a:cc:f1:0e:ef:46:a2:5d:41:
cb:9b:3c:1f:6b:f9:5a:e3:71:f4:b6:f0:51:20:99:
21:1e:89:8f:c5:7c:2d:b9:21:99:b1:0a:17:9f:b8:
cc:da:07:9d:b2:e1:45:e4:7e:09:d4:d4:ae:70:83:
b4:5a:7e:01:c0:23:e7:05:49:12:b7:87:ff:de:2f:
e6:ec:d8:e1:94:fe:7d:6a:6b:01:49:55:c6:37:df:
79:c9:7a:d3:e2:7c:5a:83:55:d9:df:d3:0e:bd:cc:
45:16:05:60:d1:ec:9b:fa:85:9e:45:a9:ee:cd:e5:
05:c5:a6:a1:34:48:71:7b:36:c8:05:fd:bc:f7:2c:
3d:4a:65:80:ae:06:63:da:17:18:d3:dd:9c:73:87:
8e:80:74:85:5e:2c:63:e9:18:ad:12:bd:f1:4a:80:
30:93:ac:39:39:79:d7:67:d7:3e:34:d5:d0:fd:af:
79:21:a5:38:69:e2:27:8e:e1:50:c8:fa:27:96:bd:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:35:E3:93:4F:29:B4:57:FD:53:A9:F2:8B:D5:FB:78:71:09:BE
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/m2E145NPKbRX_VOp8ovV-3hxCb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7e:98:9d:25:85:ed:1a:cf:f3:f0:a2:59:e8:84:9b:fd:e4:
83:49:9c:4f:d9:d9:19:c1:6a:bc:66:59:47:01:a2:9b:54:97:
37:d6:da:3a:04:e9:01:cf:18:cc:8c:a5:ba:0c:31:17:6f:3b:
d0:a7:70:ce:05:a2:c8:ac:26:fd:5c:d0:dc:4b:33:b4:85:a1:
00:44:2a:3d:41:01:2b:9f:87:1e:69:d9:8a:cd:65:eb:d7:59:
47:fa:d4:00:d3:b0:ec:57:cc:ca:c4:fd:36:50:1f:41:8d:e2:
28:28:5b:73:2e:74:9d:45:59:1d:13:76:30:54:f1:8a:8c:6a:
3c:c7:0f:f4:43:78:0e:3b:22:b9:cc:09:52:ef:78:9d:5f:42:
cc:aa:8f:f8:df:47:51:93:48:66:23:51:01:d6:ca:1b:ee:47:
15:0c:8b:98:23:f1:6c:36:8d:d1:7f:96:00:20:90:35:86:b4:
05:79:67:71:8c:56:40:9f:a3:fc:75:a7:af:b1:03:08:32:a0:
07:98:d1:75:23:98:36:8b:93:f2:f6:6a:a7:49:eb:39:99:52:
68:73:18:ca:10:10:93:c5:b2:66:81:cf:39:f5:5e:46:d2:92:
d6:5d:c3:19:b8:1d:45:f0:95:f3:24:a2:54:f1:59:ab:b4:36:
2a:c0:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:38:02 2024 by rpki-client on console-fra.rpki-client.org