Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/79dsb6m8lxQGeN98A2c22wDk_1U.roa
File: 79dsb6m8lxQGeN98A2c22wDk_1U.roa (raw, json)
Hash identifier: 2vSUhV1XKfWdLmwKr9kntoa1QPOvp8rjMtJgsJj6Lv4=
Subject key identifier: EF:D7:6C:6F:A9:BC:97:14:06:78:DF:7C:03:67:36:DB:00:E4:FF:55
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 018CC86FD9E92259E65313057F82F3315A5B
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/79dsb6m8lxQGeN98A2c22wDk_1U.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206543
IP address blocks: 185.44.231.0/24 maxlen: 24
185.44.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d9:e9:22:59:e6:53:13:05:7f:82:f3:31:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efd76c6fa9bc97140678df7c036736db00e4ff55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:f0:00:65:66:4d:91:bd:78:ee:41:c3:85:
ac:b1:b7:9f:b7:b6:e7:fe:dc:0e:15:28:45:4a:2d:
f7:33:08:96:6c:04:06:5d:4c:a5:33:2b:0f:fc:4a:
3d:26:58:da:b5:0f:0e:ab:11:b3:15:97:4e:94:f9:
83:91:a4:2f:79:ec:83:84:ca:0a:0f:24:30:6a:21:
43:c9:ca:d9:45:c4:67:cc:fd:14:b0:e9:3c:09:26:
b2:81:cc:85:c4:03:be:95:e8:d6:0a:91:a9:a3:52:
ee:2c:56:7c:18:c9:de:e7:28:90:e7:6f:0c:e6:a1:
2b:5f:ea:5a:76:8f:ae:82:1c:4a:7d:e1:41:61:8e:
68:5d:9e:39:67:f7:33:d2:20:42:d1:52:bc:f2:5f:
d5:a1:f1:b4:f2:30:ed:f5:98:c7:03:d5:9b:4b:a3:
1f:8b:3f:36:47:aa:7d:ab:7b:39:1f:71:45:2d:1a:
d4:8e:6d:56:bb:03:82:fa:b2:9c:71:15:ba:bd:68:
9a:74:36:eb:3f:b7:df:74:1e:d2:d2:5d:0b:f6:8e:
ea:d7:aa:e2:c0:0b:83:1f:a6:3c:ff:b9:e0:57:d5:
5d:03:c1:cd:0a:07:f4:fa:20:37:7e:04:6a:57:cb:
dc:dd:68:73:eb:6d:e9:34:04:5c:86:b7:15:5c:99:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:6C:6F:A9:BC:97:14:06:78:DF:7C:03:67:36:DB:00:E4:FF:55
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/79dsb6m8lxQGeN98A2c22wDk_1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.230.0/23
Signature Algorithm: sha256WithRSAEncryption
32:c6:0f:c0:bb:36:f8:1b:81:23:a2:7b:a4:10:b9:39:42:aa:
49:07:7c:72:dd:ca:00:4f:61:42:50:35:a7:a4:51:14:8e:a4:
44:79:39:c6:c7:40:8c:1a:e4:e2:ce:1f:d4:8a:f4:97:5a:dc:
24:66:2e:90:ab:15:2b:7e:d7:45:ae:69:3e:6d:9a:b0:d9:48:
c3:92:b7:f2:26:2f:c5:2b:38:05:53:e2:af:e2:32:8b:76:f8:
d4:40:bd:19:6a:21:dc:16:4b:ee:43:7a:9f:bd:e1:64:37:29:
7a:ce:8d:7e:e3:8d:00:8d:df:27:c3:71:59:f3:a4:68:27:09:
3b:f0:e7:51:bd:c9:b5:3b:14:48:6f:9a:fb:ab:f4:78:17:12:
a7:b0:80:b1:4f:5e:b0:9d:43:67:af:8c:bb:f3:0d:9d:52:43:
27:20:96:58:4e:b3:80:4c:3e:df:9a:ce:36:ad:2a:53:c1:a7:
02:e6:d5:76:eb:31:32:09:20:27:9b:66:25:de:42:02:86:88:
4b:52:f2:d9:e3:37:40:fa:9b:af:92:38:27:a8:a2:4f:63:50:
0c:38:07:8e:37:70:40:3c:ef:23:99:5c:6e:91:69:2c:83:34:
0a:57:8a:bf:7f:a6:d2:48:b5:c7:14:42:04:19:ab:da:6b:e8:
b5:96:0d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 22:04:36 2024 by rpki-client on console-ams.rpki-client.org