Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2sFZAOMxGwZK-n7sVsLCS7mFwLY.roa
File: 2sFZAOMxGwZK-n7sVsLCS7mFwLY.roa (raw, json)
Hash identifier: AyiteHN6Jc2Vhvd+ZzxBk0HvEZyJkZba9CX6YkN6bbI=
Subject key identifier: DA:C1:59:00:E3:31:1B:06:4A:FA:7E:EC:56:C2:C2:4B:B9:85:C0:B6
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E01064A642091D2F0A5C1896BAF8B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2sFZAOMxGwZK-n7sVsLCS7mFwLY.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39556
IP address blocks: 185.232.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:01:06:4a:64:20:91:d2:f0:a5:c1:89:6b:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dac15900e3311b064afa7eec56c2c24bb985c0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:33:b5:bf:14:5b:7d:c6:54:01:33:3a:9f:
a4:06:34:5b:07:e8:00:c9:bc:de:ec:5d:5c:2d:1f:
03:e8:a7:7f:53:6a:3e:62:8d:f4:5c:8f:b6:77:50:
57:b0:a3:0f:a5:dd:03:18:0a:cd:dc:a5:6f:d2:d1:
0d:bc:4b:d2:e5:e2:50:8a:8f:cb:33:2a:a1:03:b3:
90:83:35:d5:09:93:19:04:e8:cb:39:80:ef:2b:e4:
a7:ba:67:a9:10:b6:f0:6b:09:20:e7:a4:dc:a6:7f:
bf:27:66:06:b5:ae:d6:8c:4c:0a:0a:c1:de:aa:46:
10:f2:fd:09:35:2d:75:f1:8e:e1:a3:84:1c:3f:42:
e7:3c:19:c1:3c:c1:07:2d:8f:74:f9:bc:43:b5:8f:
67:e7:4a:50:cc:e2:01:97:91:3b:cd:36:11:09:84:
8e:49:e8:55:8d:a0:48:0b:4b:93:71:1f:6a:4b:24:
5f:70:bd:6b:15:a3:e3:f5:bf:ca:7d:70:98:a9:01:
f5:3b:fd:2f:b0:46:2d:3f:a1:48:5e:d9:f4:3a:f2:
e4:0f:3b:32:a5:99:42:23:48:cf:96:11:2b:9d:e9:
09:fd:9f:fc:3e:41:71:04:40:98:99:17:ed:6f:25:
57:74:83:7c:db:48:c8:84:74:55:f6:9e:f4:e7:e2:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:59:00:E3:31:1B:06:4A:FA:7E:EC:56:C2:C2:4B:B9:85:C0:B6
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2sFZAOMxGwZK-n7sVsLCS7mFwLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.28.0/22
Signature Algorithm: sha256WithRSAEncryption
53:08:3f:e5:0b:8b:6d:60:8f:32:95:07:24:e3:5b:46:b9:d4:
f2:d8:27:46:c5:9d:55:cf:a7:d4:e9:be:6a:af:10:f7:92:cf:
b1:6c:d4:c7:e5:2d:5d:d2:f3:d8:d9:e8:ca:04:48:31:36:6f:
af:d0:33:73:2a:ad:0b:09:26:12:34:4a:fd:27:15:84:e9:01:
dc:9d:89:9e:af:6c:cf:2e:09:b0:9d:04:41:cb:03:b2:d5:a3:
42:be:87:f9:b7:fd:f3:83:a5:3e:0a:3b:82:c8:54:a1:4a:2d:
2e:e1:98:6f:b7:e4:06:0b:d2:98:e2:01:bb:8e:d7:19:d2:46:
7c:c7:ca:60:94:cf:fb:d5:35:98:bf:87:cb:ae:a2:6a:f9:ab:
18:de:9d:f4:26:fb:78:b1:fb:02:13:80:a0:ef:7f:b8:9f:70:
fa:0d:76:7f:f8:8e:1c:8d:79:88:11:d8:2a:1f:14:54:e3:bf:
4d:ba:d3:ac:ef:c0:8c:1a:87:bd:4d:65:7e:d4:83:98:5d:1e:
94:74:0c:08:1e:68:0b:de:39:6a:a7:6d:3e:1d:60:2c:bb:8c:
ba:b5:db:18:5f:be:7f:56:e5:57:08:64:77:e9:f0:c7:3e:fa:
97:09:48:6d:d5:18:e0:f4:ef:8d:4b:5a:ad:b5:9a:77:9f:75:
ac:d9:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:13:25 2024 by rpki-client on console-fra.rpki-client.org