Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/XGujbrXQHJyS42CnyaOaw57iq9Q.roa
File: XGujbrXQHJyS42CnyaOaw57iq9Q.roa (raw, json)
Hash identifier: 2WKzmZhWb7dk0VQSI7rl8x4b+wBtPozV1jNAp6z+ubk=
Subject key identifier: 5C:6B:A3:6E:B5:D0:1C:9C:92:E3:60:A7:C9:A3:9A:C3:9E:E2:AB:D4
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 018CC801743935CAB22BAB7E0E7C18E0E6D1
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/XGujbrXQHJyS42CnyaOaw57iq9Q.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204456
IP address blocks: 185.222.233.0/24 maxlen: 24
185.222.232.0/22 maxlen: 22
185.222.232.0/24 maxlen: 24
185.222.235.0/24 maxlen: 24
185.222.234.0/24 maxlen: 24
2a0d:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:74:39:35:ca:b2:2b:ab:7e:0e:7c:18:e0:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c6ba36eb5d01c9c92e360a7c9a39ac39ee2abd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:d9:3f:55:71:21:e7:e9:e9:56:37:a8:c2:
7c:a6:89:56:2e:45:55:0b:7a:bc:9b:d3:b8:ce:16:
61:2e:b2:80:87:96:f0:5d:28:d7:11:3d:51:f2:e7:
b3:b6:88:42:c8:3c:06:5f:b5:30:c8:fc:e8:7b:ae:
a9:1b:87:9f:47:6a:41:17:d6:e3:82:03:a3:b9:be:
da:1e:4b:9d:f0:4f:d3:78:80:46:e0:7a:df:21:95:
41:d1:ac:44:06:be:09:d9:e7:fa:b6:f0:f4:d9:67:
32:59:87:2b:8b:00:a8:f2:eb:46:df:d3:fc:38:e2:
5f:2a:dc:56:11:62:6f:eb:3b:4d:50:cd:97:cc:6e:
f6:48:dc:e8:f9:34:7a:ad:7b:b0:2c:45:bb:0b:0d:
8a:f1:7a:a6:33:3e:0b:4c:8b:2e:20:78:ec:10:34:
9f:e9:79:b9:5c:55:47:f8:fa:57:fa:16:52:73:38:
16:f6:7a:c3:0a:4a:45:89:76:03:29:70:33:49:8b:
e7:32:9b:37:fc:d2:f4:2b:64:77:15:b2:d4:ac:01:
df:ca:fe:f0:dd:29:56:db:52:95:82:77:68:2f:8c:
13:78:b9:8d:f3:20:d6:98:b6:61:c4:86:8e:00:a9:
43:20:c0:d7:61:96:d8:bc:cb:45:79:de:d7:ca:72:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:A3:6E:B5:D0:1C:9C:92:E3:60:A7:C9:A3:9A:C3:9E:E2:AB:D4
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/XGujbrXQHJyS42CnyaOaw57iq9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.232.0/22
IPv6:
2a0d:800::/29
Signature Algorithm: sha256WithRSAEncryption
9f:7d:c5:6e:a5:b3:ac:19:e2:b6:e8:db:14:f3:c1:36:c8:19:
33:76:c6:b4:d8:85:be:24:20:4d:1d:c7:19:25:37:27:c2:a1:
a7:49:35:82:59:44:b0:bf:d0:d6:e2:7e:e1:a5:55:bd:02:3f:
60:3a:e4:33:e0:0c:25:00:c4:bd:44:0b:0d:1e:e3:b1:13:9c:
af:ab:1e:ce:f0:f7:a3:8a:91:7d:52:a6:96:80:e8:c7:11:de:
a5:01:05:52:3e:17:0a:3e:ed:a4:00:d8:dc:fe:a1:3e:82:9e:
44:32:0e:7c:a1:68:40:f7:17:32:c9:39:3c:48:01:e2:73:cb:
f6:f4:09:52:79:8a:eb:c3:4b:18:27:53:42:b0:83:14:ee:1a:
70:e2:cd:b8:23:2c:71:74:c8:51:f8:ac:20:7c:3c:a9:af:4f:
1a:8e:b6:fe:76:5a:a3:b5:a7:b7:5f:33:7f:30:eb:5f:dc:94:
0b:0b:5d:3c:6f:11:ee:6d:a7:81:6c:ff:9a:ba:bc:7e:77:f9:
62:d9:d9:0e:b8:3f:f0:db:29:90:06:69:dd:08:f2:b6:98:bc:
59:65:f7:e2:a8:41:3c:9c:84:8e:c3:bf:d3:61:9b:16:89:8a:
2d:51:3e:ec:02:93:b3:1e:db:b4:bd:b9:0b:ea:64:8f:4a:44:
3f:f7:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:26 2024 by rpki-client on console-fra.rpki-client.org