Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa
File: bSBaZbXyGK6s-45ETJbR2_RRyog.roa (raw, json)
Hash identifier: AE9bc+6rfxb8joZMQ0FdtiMtcQNUyac0ka4fvtDIFk0=
Subject key identifier: 6D:20:5A:65:B5:F2:18:AE:AC:FB:8E:44:4C:96:D1:DB:F4:51:CA:88
Certificate issuer: /CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Certificate serial: 018CC493745259BDF512CBD916DE23975B7A
Authority key identifier: DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60940
IP address blocks: 185.23.93.0/24 maxlen: 24
185.23.94.0/23 maxlen: 23
185.23.92.0/24 maxlen: 24
2a04:2500::/32 maxlen: 32
2a04:2500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:74:52:59:bd:f5:12:cb:d9:16:de:23:97:5b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa68d14863a454b89547b59b5cc3415cd2d8f37
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d205a65b5f218aeacfb8e444c96d1dbf451ca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:e9:10:ae:cd:29:e2:93:ad:b5:4f:7a:6d:
1c:e0:b6:ed:b8:c5:47:57:48:15:ec:e7:55:31:e2:
e2:8d:8c:ce:0e:45:1f:6d:e8:a3:f6:64:a5:ac:bb:
8a:aa:2b:ca:08:1a:63:c7:20:0e:56:b2:43:e1:57:
e1:cb:57:8c:2c:b0:5f:3e:7e:80:f6:6c:80:f7:4c:
35:66:a9:1e:54:5c:4e:c7:5d:fa:f8:07:18:87:6e:
d8:dc:e9:0d:12:57:71:f6:e0:fd:4c:d2:ec:aa:75:
fa:8b:f0:5f:2f:24:b9:d2:c3:70:eb:dd:1a:aa:c9:
2c:ba:69:2c:b9:0d:5e:6e:e2:37:08:e2:00:f0:d3:
59:5c:9b:75:b7:06:12:93:f2:24:bc:93:ca:1e:2a:
ad:86:3c:70:a5:1f:b4:df:fb:d1:55:bd:8d:fc:45:
a3:13:83:0f:5b:f4:d6:23:a5:db:39:65:ae:20:e5:
e0:af:0b:6f:41:7e:1a:05:8b:d6:3e:ed:80:df:5b:
b7:6e:08:19:9d:37:ff:bb:ab:45:82:59:d8:d1:5f:
fc:9c:54:50:d0:13:7b:31:c3:3b:6b:a1:9b:a8:46:
4f:44:b7:be:68:e5:a5:75:cb:d2:40:df:e0:39:2b:
b7:5b:c7:10:40:0f:c7:7d:b4:9d:b7:7f:4c:d9:29:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:5A:65:B5:F2:18:AE:AC:FB:8E:44:4C:96:D1:DB:F4:51:CA:88
X509v3 Authority Key Identifier:
keyid:DF:A6:8D:14:86:3A:45:4B:89:54:7B:59:B5:CC:34:15:CD:2D:8F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36aNFIY6RUuJVHtZtcw0Fc0tjzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/bSBaZbXyGK6s-45ETJbR2_RRyog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a146c7-81e9-4862-974f-e0ecd5342ed8/1/36aNFIY6RUuJVHtZtcw0Fc0tjzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.92.0/22
IPv6:
2a04:2500::/32
Signature Algorithm: sha256WithRSAEncryption
1a:d8:ee:2c:5c:4b:69:8f:1d:e3:83:78:6d:92:8e:c0:1a:6f:
7c:58:7d:4e:97:29:f4:73:25:9f:a5:b3:66:cf:2b:8b:bd:f4:
a1:b2:84:40:64:b9:ee:13:dd:b7:97:d8:d6:1c:5a:17:91:69:
d0:7a:6d:96:e8:0b:b0:04:34:58:04:0d:48:b0:c0:34:45:38:
5a:09:39:01:99:35:b2:b5:a1:69:5c:30:4d:06:8c:10:63:05:
50:9f:77:d2:d1:90:57:48:a7:b9:96:33:49:58:98:21:f5:57:
ca:89:43:53:00:55:82:e1:6a:da:a5:df:d0:80:35:fd:2f:ac:
c8:16:71:16:4a:cf:3b:27:41:3f:3a:3c:6a:2d:20:71:d6:e5:
1d:d2:35:f1:d9:cf:46:5c:cc:c8:29:2b:f6:e7:f8:23:a4:40:
45:10:9f:9b:9d:2f:e1:bc:46:a9:0c:d8:9a:f9:a7:de:33:9b:
2f:d3:4f:1f:46:7c:c5:4d:64:b1:ae:83:4c:d2:a3:a3:11:08:
4f:77:ae:20:ff:cd:f1:b0:c2:29:9d:7c:31:41:a9:b9:c7:04:
ff:a2:53:58:1c:ad:47:b7:19:f3:60:81:68:64:61:cc:52:a0:
5c:34:ff:81:a2:c1:72:f8:01:e2:ee:87:94:be:41:1a:fe:25:
42:88:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:39:21 2024 by rpki-client on console-ams.rpki-client.org