Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/2tckJXoPBGg4oN7TpitS4nzHO9A.roa
File: 2tckJXoPBGg4oN7TpitS4nzHO9A.roa (raw, json)
Hash identifier: ikMhuy1EtMCVwA599epR8wnELtvMexoPunmeu9dZECc=
Subject key identifier: DA:D7:24:25:7A:0F:04:68:38:A0:DE:D3:A6:2B:52:E2:7C:C7:3B:D0
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 018CC42539C1DBC99B971E31216569B6B294
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/2tckJXoPBGg4oN7TpitS4nzHO9A.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202835
IP address blocks: 185.149.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:39:c1:db:c9:9b:97:1e:31:21:65:69:b6:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dad724257a0f046838a0ded3a62b52e27cc73bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:9c:e5:7e:4f:c6:ed:59:d0:7e:e1:7d:50:
62:0f:9e:c9:ea:0f:af:5d:cf:ee:33:7f:e3:ec:42:
43:2b:cd:dc:88:9c:c9:43:bd:69:d4:d0:32:71:b9:
df:b5:83:2c:3f:96:06:bd:1c:5b:33:32:d7:ba:65:
99:c0:de:fa:7a:4e:cc:0a:c4:64:90:c9:be:83:de:
5e:40:8f:3b:97:00:03:b3:41:46:65:2f:ea:f1:e2:
c5:5b:ef:e1:b6:c2:6c:e3:dc:6f:30:56:f5:03:8f:
53:d5:7b:2e:1d:0c:2a:40:6c:00:ea:54:c1:61:cf:
6e:60:c8:94:4a:50:8a:04:49:d4:ff:c4:8e:88:ec:
56:15:6f:78:7a:93:34:50:28:5c:2b:0a:16:df:7f:
97:38:73:d4:80:f6:ce:f3:d8:e0:a4:e8:33:4f:73:
ca:31:73:a7:da:24:a4:4c:7a:a0:b8:27:ff:27:6e:
1c:09:7b:71:ad:28:30:00:c1:b1:e3:9b:95:27:2d:
5d:d7:03:ef:1d:78:eb:a5:c7:9f:ad:b6:62:b8:dd:
76:1c:d0:fc:56:22:76:37:b7:aa:eb:91:7a:a6:ea:
03:08:52:36:54:fc:0e:ce:26:38:56:ad:e3:f8:9b:
39:4b:06:1a:e0:92:2e:ea:e0:f8:58:e0:73:2c:bb:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:24:25:7A:0F:04:68:38:A0:DE:D3:A6:2B:52:E2:7C:C7:3B:D0
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/2tckJXoPBGg4oN7TpitS4nzHO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3a:33:04:06:6d:a1:1c:82:a5:52:26:4e:f2:4c:95:3b:d9:
29:71:4e:1f:e5:80:f0:06:26:b2:5f:01:66:3a:03:c3:93:f6:
f0:59:11:8c:16:16:77:bb:25:fa:b2:76:85:25:71:be:7c:2d:
42:71:54:9a:24:2b:59:7e:5a:77:5c:a6:6e:0d:3c:e1:5b:87:
c7:3f:8b:9c:9c:ee:6e:83:ad:b2:bc:9f:fa:fb:2a:23:1f:e7:
48:81:8b:7a:a7:03:82:eb:b3:c0:97:49:2d:4b:9b:ae:ae:bf:
17:dd:50:89:3f:0f:14:fe:e1:f2:7a:7d:2c:4c:05:0e:67:9c:
b4:46:e7:8b:7c:01:4f:b5:3e:37:23:23:7f:17:a1:c7:21:bb:
e1:f3:75:d9:06:32:6c:34:79:c6:57:4b:28:d6:4b:e8:0f:fa:
a0:e5:95:7d:5b:93:ff:ed:fe:c4:56:6c:d3:d1:ab:88:30:86:
6e:da:3f:8c:7f:35:2d:0c:36:76:d7:33:dc:5a:ba:74:a7:47:
f5:2b:31:3e:8c:57:0e:0a:3a:99:49:06:d0:98:55:81:0c:09:
13:94:04:16:f8:de:95:36:93:2e:e5:4c:27:a8:a7:cf:10:df:
9d:14:4a:4d:9d:d2:4e:a0:a1:5d:f7:9b:3a:eb:aa:8f:71:46:
65:72:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:10:41 2024 by rpki-client on console-ams.rpki-client.org