Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/dhzlUq1exp3umICDSrLsBr-AloA.roa
File: dhzlUq1exp3umICDSrLsBr-AloA.roa (raw, json)
Hash identifier: RhUQqETmW5wFRh8g1HZSZz3FzWxChGnUvaSyycX91oQ=
Subject key identifier: 76:1C:E5:52:AD:5E:C6:9D:EE:98:80:83:4A:B2:EC:06:BF:80:96:80
Certificate issuer: /CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Certificate serial: 018CC7952BF0FC2261188D27DBFD5A255516
Authority key identifier: AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/dhzlUq1exp3umICDSrLsBr-AloA.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210200
IP address blocks: 185.98.86.0/24 maxlen: 24
185.98.87.0/24 maxlen: 24
2.57.186.0/23 maxlen: 23
2.57.185.0/24 maxlen: 24
2.57.184.0/24 maxlen: 24
92.242.44.0/24 maxlen: 24
92.242.40.0/24 maxlen: 24
92.242.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:f0:fc:22:61:18:8d:27:db:fd:5a:25:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761ce552ad5ec69dee9880834ab2ec06bf809680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:3e:bb:32:f6:3b:c5:9b:11:53:44:fa:8c:
ec:c7:6f:db:7f:6c:ac:45:19:88:c2:ec:95:2a:ba:
ea:93:b3:87:c5:14:78:58:9c:50:5b:73:e1:63:3d:
c9:07:9d:4b:60:39:7e:71:6d:db:41:e4:14:dd:25:
8d:da:b0:e6:4c:bd:d9:45:1d:d6:52:41:d9:dc:da:
c0:dc:8d:b5:2c:4a:0c:ee:b5:4b:d2:11:a5:49:46:
48:01:14:be:43:ce:53:0f:89:86:ac:45:d6:0a:1a:
1e:47:0d:7c:cb:7d:9e:88:30:ee:23:15:64:8d:8b:
82:07:a9:b1:89:08:19:46:d1:2a:5a:01:c3:74:8d:
2b:b6:da:e6:a8:22:7f:4a:1f:e0:3f:7c:1e:04:a1:
bd:43:00:37:80:0f:9b:93:96:72:78:f4:d8:df:f8:
2a:cf:a9:6e:62:d7:b2:17:e8:c7:4c:13:af:86:6f:
37:aa:34:6b:c0:69:95:aa:2a:2e:8f:dd:b5:f9:f3:
c8:f9:0a:b6:f6:7f:fc:2a:6d:ac:da:ef:c7:18:f0:
ba:0c:c2:cd:81:9d:23:3f:e7:25:90:1d:cb:cb:e6:
9f:8a:27:70:04:9d:6c:21:2b:fb:c9:a2:c6:e8:6b:
9c:bb:70:04:66:80:64:31:8a:54:c9:3e:2a:74:50:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:E5:52:AD:5E:C6:9D:EE:98:80:83:4A:B2:EC:06:BF:80:96:80
X509v3 Authority Key Identifier:
keyid:AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/dhzlUq1exp3umICDSrLsBr-AloA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.184.0/22
92.242.40.0/24
92.242.44.0/23
185.98.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e7:d3:8b:26:26:88:e7:28:fc:a0:53:87:8f:f7:83:d5:45:
76:1c:63:20:9f:16:7a:53:f1:82:14:71:8b:d5:43:ab:14:f8:
a8:70:c6:ca:f6:c9:2f:2b:ce:5e:ce:ca:05:4b:c2:9d:bb:b6:
a2:4d:b3:e5:98:ca:e7:f2:99:6e:26:57:6a:88:2a:e9:4b:f9:
e9:12:25:65:bd:ab:e3:0e:39:29:af:29:b2:e5:03:7d:21:77:
32:ca:a3:64:c7:9f:67:a9:41:c9:65:96:0e:d0:e3:42:6a:ba:
8b:b8:c2:db:db:5a:5d:ce:1e:7e:5b:b4:45:96:5c:f3:b2:43:
8f:9a:45:2f:c3:59:25:2d:50:ae:06:cc:3e:52:18:a8:f6:58:
d9:ef:c7:f1:ac:3d:9b:5c:d9:ea:2b:64:a4:35:bd:e1:a7:53:
41:50:32:1d:df:33:1f:12:6c:02:d3:23:95:6c:a7:e7:2f:8d:
a6:1e:e4:dc:6c:ec:ad:c5:62:f6:6f:0d:69:76:6f:cb:64:10:
f8:de:f3:6c:15:11:8e:65:28:68:d1:90:c1:0b:1a:d6:c9:5b:
c1:9c:74:fc:7c:7c:5a:16:da:f3:63:a9:4f:0c:69:70:09:83:
cf:ee:72:50:37:c8:63:17:75:f8:25:c3:e8:20:df:bf:b6:33:
d4:21:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:05:38 2024 by rpki-client on console-fra.rpki-client.org