Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/S6TurgokM-Dj6lT1tP_hc24yYQw.roa
File: S6TurgokM-Dj6lT1tP_hc24yYQw.roa (raw, json)
Hash identifier: IaC6wL2Jk1nsxqV0xg6csYSjx7XUBtrXO2WHspPDC+o=
Subject key identifier: 4B:A4:EE:AE:0A:24:33:E0:E3:EA:54:F5:B4:FF:E1:73:6E:32:61:0C
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 018CC6B89F898093D0B871132B7A609419BD
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/S6TurgokM-Dj6lT1tP_hc24yYQw.roa
Signing time: Mon 01 Jan 2024 20:30:37 +0000
ROA not before: Mon 01 Jan 2024 20:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204135
IP address blocks: 185.235.37.0/24 maxlen: 24
185.235.36.0/22 maxlen: 22
185.235.36.0/24 maxlen: 24
185.235.38.0/24 maxlen: 24
2a0e:1700::/32 maxlen: 32
2a0e:1701::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:9f:89:80:93:d0:b8:71:13:2b:7a:60:94:19:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: Jan 1 20:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba4eeae0a2433e0e3ea54f5b4ffe1736e32610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:f2:89:c6:f8:b9:59:f0:73:8c:5c:78:27:
30:c2:ee:34:ba:50:61:a3:71:63:85:81:0c:0e:44:
56:d7:61:8f:13:60:ba:01:22:0b:51:27:02:4c:32:
b1:2f:0a:b7:5c:57:e1:3a:57:e4:41:ca:bc:2a:67:
e3:70:3f:c6:13:d9:b1:1c:8f:35:25:5a:46:15:31:
d2:dd:47:8e:7c:8b:f0:1e:f8:ff:88:d5:bc:78:22:
9d:b3:cc:0a:47:4c:64:c1:14:ad:ca:04:81:55:9c:
76:ee:93:4e:db:1b:15:d2:83:b6:74:67:d9:4f:18:
7f:d4:56:10:59:20:44:f1:33:57:35:97:70:d4:29:
52:4c:67:f1:90:48:cd:b8:33:bd:4e:b8:7a:fe:78:
67:6a:5a:e7:d1:22:fc:0a:c5:eb:89:74:55:48:a3:
32:09:b8:aa:c8:cf:26:43:b2:5c:70:f6:54:5f:7d:
aa:36:d1:ad:69:a3:e8:d3:9c:00:29:5d:5d:80:38:
7f:41:00:3c:40:5d:2a:19:10:f8:4a:3b:5e:90:f5:
4f:3b:e5:b3:24:f8:19:de:94:8e:41:02:2c:25:99:
74:8a:9f:ac:0e:42:5d:6e:a4:da:d9:c5:a5:dd:bf:
bf:c6:21:18:ec:bc:36:24:5f:ba:22:77:4d:cd:c0:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:EE:AE:0A:24:33:E0:E3:EA:54:F5:B4:FF:E1:73:6E:32:61:0C
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/S6TurgokM-Dj6lT1tP_hc24yYQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.36.0/22
IPv6:
2a0e:1700::/31
Signature Algorithm: sha256WithRSAEncryption
91:ea:0c:72:6c:0a:d1:4c:20:50:bf:45:7c:94:56:59:37:ef:
96:fb:fb:4b:52:45:12:70:dd:d6:cc:e8:61:bf:3e:b6:62:0b:
ae:71:7a:f0:cb:1d:91:71:ae:29:a5:c8:28:2a:80:5a:b2:01:
ef:02:47:ad:1c:10:82:83:3e:44:d4:07:c7:19:2f:5b:21:bc:
11:6a:fc:dc:0e:8f:2c:6e:b1:6b:fc:35:50:eb:67:66:53:9c:
df:fc:5b:d7:e5:27:fe:79:28:d8:9f:f9:5b:25:0d:77:d4:05:
3e:0a:10:a1:5d:aa:0b:05:e4:7c:bb:ee:4e:46:99:7d:7f:6a:
41:02:06:e9:4c:fb:b8:30:27:93:b6:6a:9f:da:4d:ba:80:3b:
f2:26:b5:e9:66:32:12:e9:01:4f:bb:58:25:0c:75:ca:bd:a7:
08:b3:e7:63:1d:49:53:20:0e:c3:a7:d2:b2:37:9e:53:3b:d4:
ce:60:6d:76:b9:11:44:0e:c1:45:a7:78:10:b2:12:31:83:be:
24:5e:87:2c:8b:b0:4f:86:83:5c:85:a2:d8:7d:ba:a4:cd:70:
a9:0b:5d:dd:df:2a:44:92:58:8f:a2:00:77:7d:a8:ce:4a:ee:
aa:b0:5b:8d:f8:c1:d3:e9:5d:09:25:51:ce:b7:ba:f4:75:cd:
03:58:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:34 2024 by rpki-client on console-fra.rpki-client.org