Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/dDnbo-F-sGWYNWVorSRhQSKE0zc.roa
File: dDnbo-F-sGWYNWVorSRhQSKE0zc.roa (raw, json)
Hash identifier: Q1RF7yJBEuvNR/1i9nYruIxcVmnYlYUYViFbUDYEcgQ=
Subject key identifier: 74:39:DB:A3:E1:7E:B0:65:98:35:65:68:AD:24:61:41:22:84:D3:37
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 018CC492CC8EB4CBC75B0D2B55FA8684B0B6
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/dDnbo-F-sGWYNWVorSRhQSKE0zc.roa
Signing time: Mon 01 Jan 2024 10:30:04 +0000
ROA not before: Mon 01 Jan 2024 10:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42442
IP address blocks: 185.186.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cc:8e:b4:cb:c7:5b:0d:2b:55:fa:86:84:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Jan 1 10:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7439dba3e17eb06598356568ad2461412284d337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:b9:14:f9:3c:e2:87:3a:72:39:be:b9:e4:
5d:2f:04:7d:ab:fd:55:fb:cf:12:8e:1e:91:b7:25:
99:0b:c1:48:63:3d:19:fb:49:35:6c:9a:ef:79:cb:
7a:61:30:f4:7b:a9:83:ae:c8:41:2e:84:80:ed:3e:
8d:4e:9a:8e:52:6d:24:f2:86:18:ae:16:cb:c5:c8:
8b:eb:ec:cd:76:28:d7:61:79:ca:1e:01:9a:26:18:
5a:b6:31:e2:6c:db:ef:8b:51:cd:e4:2f:df:1c:b5:
98:70:a6:a8:4f:f0:03:32:2e:1f:8c:3c:3d:51:be:
1e:2a:1a:55:8a:0b:ae:72:c3:df:3e:d5:29:e9:06:
46:91:2f:9a:df:7a:bf:84:64:5f:c5:b3:f6:31:64:
b8:1e:12:94:d2:56:6e:01:c5:28:d1:39:3a:4a:1c:
76:5b:87:ad:df:c3:39:c3:d1:e3:96:ef:04:44:93:
0b:66:6c:95:37:f3:cc:12:c9:7c:c4:5c:52:c0:04:
c6:b5:a9:fe:f5:dd:e8:e7:4d:36:a8:a0:ee:36:9f:
8a:f3:9d:15:b5:45:d3:9c:70:8c:86:c5:8a:04:21:
7f:46:e3:63:47:1a:36:ae:0a:1b:f7:5b:64:c5:71:
ee:b4:f3:08:46:12:b2:60:da:a3:55:64:73:5a:88:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:DB:A3:E1:7E:B0:65:98:35:65:68:AD:24:61:41:22:84:D3:37
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/dDnbo-F-sGWYNWVorSRhQSKE0zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.220.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f6:52:fa:c7:7d:0c:64:fc:27:cd:e4:5c:53:38:35:a6:93:
55:8a:3e:4c:7a:1d:da:30:e4:e1:2c:cd:59:2c:0e:0a:23:eb:
36:b0:01:8a:74:35:9c:47:0e:17:a9:a9:f2:0e:df:a1:c0:89:
bc:38:ec:a1:bc:f8:0f:13:ef:b2:06:c6:4c:a9:16:6d:12:de:
8b:a6:65:6e:34:a6:39:c4:27:f7:67:1a:df:e6:ad:b0:28:60:
44:fc:1f:cb:4a:3e:1d:f2:96:21:46:bf:1f:60:68:4f:19:53:
3c:46:77:e3:81:7b:3b:17:f0:fc:13:29:09:91:6b:87:4a:aa:
8c:9d:5c:82:80:e4:d7:e2:39:92:25:ac:1e:b1:61:4f:81:64:
38:5e:d5:fa:57:b7:80:15:93:49:6f:6e:2e:04:09:f7:a6:25:
58:c9:4d:ac:db:18:f4:3b:47:5f:31:11:6f:7a:b0:16:b2:ef:
b4:6f:51:86:26:05:c9:f1:d0:e3:b4:e0:f0:08:dd:eb:56:8d:
c8:48:1d:03:0e:a3:f3:e9:bb:81:2d:e5:67:23:c1:25:0a:84:
6c:cd:92:da:40:d1:26:7e:d4:ef:1c:76:7c:7e:f9:bc:6a:1f:
ed:70:e9:29:28:2a:ad:c9:12:a4:cc:a0:ed:97:94:0a:bf:6e:
97:0a:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:05 2024 by rpki-client on console-ams.rpki-client.org