Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/gUwiMlcBqH0HkWDTrOT84LxrkeI.roa
File: gUwiMlcBqH0HkWDTrOT84LxrkeI.roa (raw, json)
Hash identifier: qVDYJzN+o3uMA9VCD3xH1SNQ9sZ9k1FljNXCzAC65cY=
Subject key identifier: 81:4C:22:32:57:01:A8:7D:07:91:60:D3:AC:E4:FC:E0:BC:6B:91:E2
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 018CC3B70FC1882E60DD7984EE07F0369428
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/gUwiMlcBqH0HkWDTrOT84LxrkeI.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.28.38.0/24 maxlen: 24
185.28.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0f:c1:88:2e:60:dd:79:84:ee:07:f0:36:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=814c22325701a87d079160d3ace4fce0bc6b91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:70:9b:41:35:4e:70:a4:19:f9:ef:c9:90:e2:
07:dd:62:53:2f:0d:6d:7d:fb:9e:bf:cf:a1:00:de:
38:43:81:7d:65:00:19:2f:21:f2:c8:2e:7f:e3:7d:
f3:a5:bc:61:b9:ac:8f:87:3a:73:4c:37:7b:2f:69:
7b:13:11:8e:99:a3:5d:11:92:79:22:bd:1f:ee:5d:
13:55:f0:c4:cf:37:7d:f1:ba:cc:ab:23:0e:55:4e:
8e:f2:b6:dc:71:59:34:e0:69:15:67:ea:f4:ec:a1:
83:13:20:7b:aa:a1:78:ea:e6:5a:c8:7d:47:0e:08:
19:ed:f3:f9:ed:97:b1:19:6e:44:e4:f8:9c:4a:6b:
94:dd:2d:44:dc:44:55:4f:ca:8b:9d:1a:f3:19:37:
8a:9f:e8:05:39:f2:08:71:d6:fb:44:f1:07:be:26:
b1:55:57:20:c1:1c:c9:af:5c:d0:75:9d:b2:d8:38:
1a:26:6b:91:98:df:2d:72:e7:01:a0:40:63:b6:07:
e0:75:77:92:4f:1f:42:f2:30:7e:9e:d6:ba:0b:b9:
0d:4d:f7:14:0e:25:be:16:23:69:be:d4:1c:75:6c:
26:ef:8b:05:d3:7b:14:bf:06:9c:6e:45:16:05:fa:
8e:e0:5a:04:8c:ab:f3:9e:d0:e5:58:70:be:b6:30:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4C:22:32:57:01:A8:7D:07:91:60:D3:AC:E4:FC:E0:BC:6B:91:E2
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/gUwiMlcBqH0HkWDTrOT84LxrkeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.36.0/24
185.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:04:94:be:ed:38:98:8f:c5:4c:06:d5:94:b0:eb:8b:78:d2:
07:da:cc:a4:b0:e6:8b:3e:19:9f:a0:d0:68:11:e9:d4:a6:70:
df:0d:3c:6a:03:84:21:f4:52:01:67:2c:49:70:f5:d3:ef:12:
ac:22:0d:30:06:1c:1d:5d:e6:5c:4d:54:30:10:f9:d5:cf:2c:
88:40:da:79:8a:22:fe:7d:c2:7b:65:8f:45:c7:a6:fc:df:b7:
40:24:3d:a3:dc:b3:0a:3c:24:92:0e:c8:1f:73:04:18:b3:29:
33:78:fc:02:bf:c7:57:98:d8:9f:71:f1:00:77:a0:c4:c8:46:
9e:a1:59:f4:a2:29:a2:73:02:72:08:08:99:1b:a5:10:da:0c:
d6:3b:66:ba:00:93:7b:6f:6e:da:a4:73:1f:96:87:c4:31:73:
93:23:e6:80:1f:3d:00:45:84:07:3c:f2:a0:56:a0:4b:3c:e4:
17:3f:ce:c6:10:6b:5e:88:e1:18:06:25:81:4d:5d:8b:d1:b2:
20:31:13:d1:01:8b:8a:47:bb:85:21:b4:93:fb:2b:ad:e9:d8:
e3:a1:08:d3:96:05:c1:84:e6:45:5a:9d:75:43:9c:ee:37:0f:
ef:d2:0e:3f:35:0b:79:a2:08:48:39:cb:83:1c:01:d7:14:20:
39:b6:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:34:04 2024 by rpki-client on console-fra.rpki-client.org