Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/0Ej1-QYGK9jwzpTN0PWx7VwZ5FY.roa
File: 0Ej1-QYGK9jwzpTN0PWx7VwZ5FY.roa (raw, json)
Hash identifier: GbSyNs72bhPH2Pev9cXyFXgBUUb14Tz7TDnRiND9BbU=
Subject key identifier: D0:48:F5:F9:06:06:2B:D8:F0:CE:94:CD:D0:F5:B1:ED:5C:19:E4:56
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 018FF23F05E623F53950E8D5E7BF33C12D1B
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/0Ej1-QYGK9jwzpTN0PWx7VwZ5FY.roa
Signing time: Fri 07 Jun 2024 10:29:27 +0000
ROA not before: Fri 07 Jun 2024 10:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211974
IP address blocks: 185.203.220.0/22 maxlen: 24
2a12:9740::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:3f:05:e6:23:f5:39:50:e8:d5:e7:bf:33:c1:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Jun 7 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d048f5f906062bd8f0ce94cdd0f5b1ed5c19e456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:ec:65:23:2e:2e:ae:72:0b:a6:82:53:72:
26:96:e1:bf:45:17:d7:43:2b:59:b5:24:66:31:ff:
07:a2:55:08:52:40:c2:8b:6f:c8:3a:20:11:9d:4f:
64:b5:de:2e:80:53:8b:48:f0:bb:06:33:d5:1d:aa:
6a:85:30:70:fe:0f:0f:79:2f:de:06:1e:8c:cf:44:
21:fd:79:9b:11:12:f9:2f:fd:46:b8:be:1d:63:d5:
f1:16:1c:0d:40:58:00:96:80:43:10:65:c8:7e:7c:
b8:45:85:b9:ef:14:b0:fe:8d:8e:e2:aa:84:a2:f4:
00:c1:ec:2a:d7:56:49:8e:71:ca:c9:7c:fd:08:fb:
cd:f7:f0:1d:9c:ab:f6:ec:4b:35:6b:bd:24:94:49:
88:d8:32:cd:cb:00:56:f3:af:75:d9:c7:50:c6:b3:
65:1d:5c:00:1c:86:33:97:ee:08:ee:44:5f:da:f8:
95:d5:f7:ef:0d:12:90:72:9e:88:90:16:b9:24:e2:
27:4d:b1:73:85:cc:de:e8:1c:93:10:f7:d3:39:f7:
d2:bc:f4:eb:1e:7f:a7:94:1d:1b:46:90:53:66:10:
38:99:fa:17:b6:7c:6e:28:5e:7a:5b:bb:32:a0:7f:
cd:54:ef:ab:5d:b2:b1:c2:23:e4:e2:e0:74:9b:c1:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:F5:F9:06:06:2B:D8:F0:CE:94:CD:D0:F5:B1:ED:5C:19:E4:56
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/0Ej1-QYGK9jwzpTN0PWx7VwZ5FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.220.0/22
IPv6:
2a12:9740::/29
Signature Algorithm: sha256WithRSAEncryption
71:25:13:e9:c8:06:a5:6a:3e:99:f9:07:d4:e6:64:80:23:24:
56:10:34:fb:52:55:e8:41:15:f7:46:1a:fc:51:b8:f7:65:a0:
34:5b:d1:4c:8b:86:be:de:3f:58:60:6c:a4:5b:70:fb:de:62:
7c:08:4a:34:63:6b:19:af:51:7b:61:3b:e3:db:2f:8f:fd:64:
aa:c6:5e:c4:f7:1c:c7:76:b6:a4:fc:4b:c6:c1:9b:90:09:61:
56:6b:69:ce:62:37:6e:d0:de:32:14:88:72:03:46:11:bc:d1:
d0:c3:db:ed:98:66:82:c6:8f:ad:bb:13:96:40:7f:bf:3b:04:
7e:ac:cd:c8:f3:9b:01:9e:0e:99:2a:ed:cf:69:23:2e:29:03:
f7:be:16:95:7e:37:fa:ee:be:9d:b7:17:34:58:e1:d3:b6:64:
df:db:23:e0:62:20:1e:41:3b:a6:c6:42:f9:01:c1:5c:b0:ef:
5d:9a:c9:1f:9e:57:dc:bc:64:ba:66:e0:e6:04:4d:64:90:6a:
b7:e3:88:3c:e8:52:ce:e0:db:13:97:08:00:eb:64:5e:f7:84:
b6:d8:30:a8:89:cf:e1:89:ba:97:5c:72:76:38:d9:6f:01:be:
5c:52:e6:f6:20:f0:b6:8b:87:72:69:db:22:2c:ef:08:7f:ac:
72:42:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:24:52 2024 by rpki-client on console-fra.rpki-client.org