Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/dU_2JuKlkdnju2mtEs9uV9qsJ5U.roa
File: dU_2JuKlkdnju2mtEs9uV9qsJ5U.roa (raw, json)
Hash identifier: jhATiG6VTvCoXMIKHhJpX5gyv2NfbraqeDjGvcXdLJ4=
Subject key identifier: 75:4F:F6:26:E2:A5:91:D9:E3:BB:69:AD:12:CF:6E:57:DA:AC:27:95
Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial: 018CC8DF429E777D6FE55235C3A4C6CBA6DA
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/dU_2JuKlkdnju2mtEs9uV9qsJ5U.roa
Signing time: Tue 02 Jan 2024 06:32:03 +0000
ROA not before: Tue 02 Jan 2024 06:32:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208669
IP address blocks: 85.202.93.0/24 maxlen: 24
85.202.92.0/24 maxlen: 24
85.202.94.0/24 maxlen: 24
2a10:1900::/32 maxlen: 32
2a10:1906::/32 maxlen: 32
2a10:1905::/32 maxlen: 32
2a10:1902::/32 maxlen: 32
2a10:1901::/32 maxlen: 32
2a10:1903::/32 maxlen: 32
2a10:1904::/32 maxlen: 32
2a10:1907::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:42:9e:77:7d:6f:e5:52:35:c3:a4:c6:cb:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Validity
Not Before: Jan 2 06:32:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=754ff626e2a591d9e3bb69ad12cf6e57daac2795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:0b:eb:8b:ea:1c:bc:a3:03:89:35:00:7a:
17:26:85:84:83:89:39:65:0f:4e:a2:13:ee:23:56:
e8:df:9a:e5:c6:29:68:36:b5:4b:38:74:e3:28:92:
43:6e:53:05:53:4f:be:5e:4d:72:19:1c:0f:ea:b2:
d4:f9:41:ab:f4:cc:cc:0a:7f:bb:84:41:d9:46:1c:
77:bc:62:dd:48:a5:10:1e:9d:23:d7:b2:9a:05:b3:
7e:c8:47:0c:be:16:53:c0:16:dc:70:8b:06:89:86:
21:ec:64:c8:fc:59:d0:1e:51:89:f7:39:e8:b8:14:
7a:0b:92:f9:32:d5:9f:4c:28:05:fe:49:75:55:a6:
c7:36:97:18:c1:68:08:5a:b2:1b:a5:87:55:0c:ba:
be:aa:1e:15:1e:b5:78:4b:c5:1c:54:dd:d1:db:9f:
18:46:f2:87:89:5d:67:ef:dc:e4:c9:0c:d8:70:83:
80:f4:1c:0f:95:85:2b:27:ef:1a:63:8a:1b:45:a3:
ec:bb:26:3c:5f:9a:c1:c5:03:11:a5:5e:be:01:19:
7a:89:4c:e8:a6:e0:c4:d5:d9:67:90:24:45:fd:ee:
5e:c5:f1:7b:84:61:24:16:44:80:2a:3a:79:0e:7c:
2d:d2:f2:11:92:c4:1a:6c:e4:ac:3d:e3:a8:33:47:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:F6:26:E2:A5:91:D9:E3:BB:69:AD:12:CF:6E:57:DA:AC:27:95
X509v3 Authority Key Identifier:
keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/dU_2JuKlkdnju2mtEs9uV9qsJ5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.92.0-85.202.94.255
IPv6:
2a10:1900::/29
Signature Algorithm: sha256WithRSAEncryption
ba:c9:e3:db:08:aa:e1:23:86:5c:6d:30:2d:1a:1a:de:d6:b7:
d9:cb:ec:af:e0:a3:cb:f3:07:a3:27:97:01:9e:34:33:a5:36:
32:b0:4e:21:ce:2e:6c:87:4f:6c:95:cd:b5:74:d7:22:63:6b:
71:9b:28:42:c1:81:9b:71:7a:34:c8:3b:d5:ba:ce:14:ab:78:
04:f0:82:22:7e:3d:f3:19:e4:a0:0f:6e:0c:02:68:6e:da:05:
3a:5b:4c:6e:23:c0:01:4f:e3:7f:df:cd:39:2e:88:30:06:3f:
7d:18:52:ac:af:e8:c1:fb:2d:30:24:96:7b:a4:e4:d2:a2:fd:
eb:e0:65:51:d4:9e:d4:75:8b:70:d3:4e:13:ab:90:8d:b0:1f:
61:ea:a6:ba:94:33:09:a7:d3:c7:f3:47:8e:10:2d:2d:a3:cb:
8a:88:4e:3e:03:a7:ef:c6:64:08:8d:7a:95:b8:43:e1:b9:87:
19:04:20:56:ae:42:6f:83:53:eb:ce:94:44:8c:de:65:b0:cb:
fd:fe:a0:82:ac:40:02:aa:50:1a:8d:ae:59:1b:78:69:fe:79:
3c:a8:84:d3:28:91:72:e6:0d:d9:32:05:50:2a:53:48:37:f0:
ca:ac:ab:81:16:1a:2c:1c:ea:ff:00:47:0f:0c:e6:c1:c6:94:
49:f7:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:53:41 2024 by rpki-client on console-fra.rpki-client.org