Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IPK6O1qQhVIBNV3jWkyKvPv8vzo.roa
File: IPK6O1qQhVIBNV3jWkyKvPv8vzo.roa (raw, json)
Hash identifier: RBtTSXbAgp41bxyQNH/o56bGUTMcbArdsBtez05NkFY=
Subject key identifier: 20:F2:BA:3B:5A:90:85:52:01:35:5D:E3:5A:4C:8A:BC:FB:FC:BF:3A
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 018CC9BCB86E8B63085AC40D9165D67ADC65
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IPK6O1qQhVIBNV3jWkyKvPv8vzo.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49100
IP address blocks: 185.110.239.0/24 maxlen: 24
185.110.237.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
185.110.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b8:6e:8b:63:08:5a:c4:0d:91:65:d6:7a:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f2ba3b5a90855201355de35a4c8abcfbfcbf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:74:88:a1:d3:05:be:4d:cb:da:e3:11:7f:
6e:da:04:6c:ba:89:57:8f:c6:a6:77:de:7a:af:ca:
25:05:e4:8b:93:ff:b3:1e:00:01:84:1b:5a:1d:7f:
2c:14:e3:aa:0b:3e:1d:6d:51:56:bb:94:e1:26:b2:
5e:4a:37:f1:62:a6:f2:ad:70:bc:6f:38:10:91:72:
00:23:74:e2:b1:04:31:60:16:89:fa:ed:78:9a:1a:
3b:18:f0:48:52:ed:c7:b5:9a:ee:18:dc:a9:35:3b:
2e:67:51:cd:9a:71:de:db:c2:05:dc:65:03:e9:a4:
7e:04:84:72:8d:e8:05:bd:30:da:d2:b5:57:72:6c:
6e:f2:56:63:d1:88:fc:c3:cf:02:8b:19:6e:7b:e1:
d8:a5:41:9d:74:e8:66:16:67:bc:2c:12:ec:e9:3a:
22:1c:54:f0:cc:98:04:ac:ad:83:ec:e2:6f:b7:ae:
6f:a2:bc:c9:35:8c:cc:29:40:b9:f3:e4:01:4c:bf:
7e:51:3d:2b:14:84:22:08:74:84:de:3e:70:6c:b7:
26:8d:f2:01:51:da:53:a7:54:d4:1b:ae:19:2a:fe:
7a:02:bc:6c:e4:f8:f0:2c:ab:9b:e1:07:b0:54:95:
39:9c:4b:fb:91:0d:39:93:8f:a7:cc:7a:4e:aa:42:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:BA:3B:5A:90:85:52:01:35:5D:E3:5A:4C:8A:BC:FB:FC:BF:3A
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/IPK6O1qQhVIBNV3jWkyKvPv8vzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:7d:e3:2b:b4:26:b1:fe:e7:3a:c4:b2:8c:b0:12:58:40:81:
5b:60:68:8c:81:90:ab:9d:99:a0:34:c3:a4:70:c1:59:cc:20:
ce:a7:d0:d1:e3:2e:6f:fc:0f:35:aa:cc:14:64:7a:53:aa:8a:
e6:1d:77:2a:81:30:95:31:5a:91:08:35:15:6a:1d:bc:e2:e8:
12:f0:bb:24:cc:6b:62:7e:1d:cb:ce:b8:e3:e9:35:9d:70:9d:
1d:14:85:2c:a3:7a:c4:c1:39:f8:0a:97:98:bc:85:41:c6:4a:
45:ce:55:6d:d6:50:43:e0:cf:a1:bc:d4:ec:c7:e3:d2:a9:6e:
6e:61:56:a0:27:c8:f8:33:47:37:7a:30:55:61:c3:1e:82:d5:
91:af:79:55:5a:a8:fe:71:9e:cd:d3:9f:fe:62:ad:43:1b:3d:
6c:f9:20:0d:95:d2:88:d3:9e:e8:a6:87:91:08:bf:ca:1d:7c:
19:75:8c:d2:aa:ec:ad:01:a2:f3:0b:d0:18:32:33:e1:97:fb:
ac:66:b1:d3:f7:7e:62:1f:ac:30:c2:63:f8:84:74:c6:b7:f2:
4c:76:d5:d5:11:b8:b2:c0:08:d7:47:37:51:9b:54:ee:07:fa:
cd:0e:1b:9b:d5:2f:1d:b6:15:46:bd:d6:ae:3a:ba:00:e9:2d:
5b:b8:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:12:55 2024 by rpki-client on console-ams.rpki-client.org