Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa
File: vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa (raw, json)
Hash identifier: RzbsUcexIXqhXU4KGamGV+v9VGjcLH4U3vJja1Duexk=
Subject key identifier: BE:BD:81:9C:BA:31:33:9B:3E:FF:06:0D:A1:44:E2:58:55:17:68:2E
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 018CCA2BEC17448D12B2BE554A96FD99E82A
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa
Signing time: Tue 02 Jan 2024 12:35:25 +0000
ROA not before: Tue 02 Jan 2024 12:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.1.94.0/24 maxlen: 24
2001:7f8:b6::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ec:17:44:8d:12:b2:be:55:4a:96:fd:99:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Jan 2 12:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bebd819cba31339b3eff060da144e2585517682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:43:8e:23:5d:1e:3d:ac:3f:ae:8b:83:34:
86:34:38:0d:ec:80:3e:c9:21:a7:68:04:e4:a7:a9:
6a:cf:82:d8:bb:54:b8:db:05:bf:bf:20:90:ca:95:
13:56:96:fc:93:1a:76:e5:db:23:99:b8:5a:f8:d3:
ca:70:78:f2:ba:41:7c:50:fc:6f:1a:8a:41:30:ce:
25:38:e7:11:d0:06:ea:1b:b8:93:51:b4:38:fc:c9:
b2:b8:03:d1:ec:ad:f3:70:6c:e3:2a:22:c1:67:52:
eb:aa:6a:e3:cc:05:fe:4e:37:34:34:3f:83:05:4b:
5c:1e:0f:8c:4e:60:43:ec:45:0f:b9:b6:ed:ad:87:
46:5c:2b:f2:b4:16:79:63:d0:a9:68:ba:39:b2:9b:
8e:49:f7:f3:a2:5f:8f:fa:44:84:3e:2d:4c:76:45:
0b:a4:14:0e:78:10:76:d4:7a:b4:60:c5:b2:a1:c1:
c7:a7:80:d3:37:2a:fa:04:bf:b7:66:ca:68:00:63:
26:9f:0e:3d:04:97:9b:08:dd:28:55:37:22:b6:65:
62:fc:24:7e:00:43:fd:f6:4f:e5:bc:87:fb:43:b9:
22:a9:76:b4:84:bd:2a:f6:cd:4d:16:0c:3c:b4:ad:
a0:79:d6:e9:44:33:50:77:a7:c6:19:05:00:f9:74:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:81:9C:BA:31:33:9B:3E:FF:06:0D:A1:44:E2:58:55:17:68:2E
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.94.0/24
IPv6:
2001:7f8:b6::/64
Signature Algorithm: sha256WithRSAEncryption
be:05:d6:13:10:af:36:24:ab:25:dd:4b:e5:57:08:43:d9:b7:
bb:2d:74:df:2a:07:d7:97:f2:d3:b3:70:6f:60:41:90:92:39:
d0:24:7e:ea:7e:d0:63:f5:7f:a8:b1:19:31:27:21:6e:32:8b:
6b:4b:43:9a:fd:a4:dd:e9:8e:64:81:ae:5a:0f:0e:9a:8e:51:
19:3f:a1:4b:49:60:02:e5:79:be:45:ea:91:eb:98:f0:30:14:
98:f2:b4:3f:55:00:55:e8:77:13:14:52:22:0f:46:26:f2:8c:
3e:06:86:0c:68:51:3e:61:61:ef:9d:63:41:de:e2:a9:ac:25:
f1:cb:46:35:73:b9:d4:2d:80:af:32:53:bf:ef:31:97:21:bd:
46:3b:e6:9a:c1:af:58:4d:f7:65:cb:d2:07:2b:af:14:7d:99:
7c:84:0d:3b:92:6f:1c:2c:b4:32:0c:e6:df:d7:32:36:33:93:
5d:c6:0e:08:b9:b0:1b:d3:1c:fc:d4:7f:e2:3f:ad:a8:1c:09:
aa:e7:71:46:6f:1e:18:82:ca:1c:4d:1a:e7:9d:06:c3:b5:bf:
3a:a1:6b:06:35:f0:24:12:9d:f4:8d:0d:dc:6e:91:6f:5a:4c:
22:48:5c:44:50:ae:7b:71:4c:6f:ee:5a:82:dc:43:de:2a:8e:
56:61:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:54:56 2024 by rpki-client on console-fra.rpki-client.org