Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/dTMLNfhsw0eeHTabJhtb5YGs6q4.roa
File: dTMLNfhsw0eeHTabJhtb5YGs6q4.roa (raw, json)
Hash identifier: YMaKSWLiZMCLd+LHmcag2Os4ySXiyS2kgIwrhlTdvYo=
Subject key identifier: 75:33:0B:35:F8:6C:C3:47:9E:1D:36:9B:26:1B:5B:E5:81:AC:EA:AE
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 018CC94D8F044C45165C87B8A76D711FC86E
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/dTMLNfhsw0eeHTabJhtb5YGs6q4.roa
Signing time: Tue 02 Jan 2024 08:32:32 +0000
ROA not before: Tue 02 Jan 2024 08:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209057
IP address blocks: 185.202.192.0/22 maxlen: 22
2a0e:6a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8f:04:4c:45:16:5c:87:b8:a7:6d:71:1f:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75330b35f86cc3479e1d369b261b5be581aceaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:67:b3:97:ee:ba:2c:22:07:26:e3:f6:37:
f8:83:c5:b5:5f:ff:08:95:38:62:8b:bc:f5:47:7d:
b4:f0:06:b3:42:c3:24:b3:0a:cf:f4:7a:dc:86:5d:
d7:c5:6c:1c:71:e0:a8:ab:2d:bf:e6:1d:16:9c:62:
5b:5c:a3:ab:bf:9b:18:85:9e:ca:16:88:16:08:40:
ab:9c:49:c0:82:16:47:af:d9:7b:92:e4:17:bd:98:
77:ff:b2:ec:79:43:2e:fa:09:53:8a:a3:a7:ae:54:
d9:50:86:0a:f1:4e:25:c9:37:e5:12:4f:2f:e2:96:
67:fd:80:06:b1:c5:28:b7:b1:b9:d7:b8:ae:bd:b5:
d8:5e:38:cd:5e:c5:b6:44:67:21:49:7c:13:09:f6:
ad:ce:d3:1b:bd:b8:46:b3:83:be:31:fb:82:91:29:
27:e4:db:d5:46:1e:3f:3c:f3:b9:98:3c:99:a2:a7:
d0:60:89:10:46:03:5a:a1:2b:c3:74:08:1e:34:c5:
05:79:20:1d:c9:52:a7:56:8a:16:37:93:d2:fe:cc:
bc:51:43:00:6d:45:cb:fc:cc:a7:a7:f5:e0:a7:3f:
cd:75:64:a3:7a:a6:92:02:80:2b:4e:97:a3:e5:6b:
ca:72:79:fe:bf:e7:25:b5:1e:f7:2e:d5:79:53:18:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:0B:35:F8:6C:C3:47:9E:1D:36:9B:26:1B:5B:E5:81:AC:EA:AE
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/dTMLNfhsw0eeHTabJhtb5YGs6q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
IPv6:
2a0e:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
64:8c:73:65:7e:b5:5b:38:21:39:55:dd:c5:af:67:75:e5:e8:
18:dc:2f:d4:7e:3b:2a:da:93:70:79:a6:f4:d0:b9:8e:3f:23:
2a:f0:58:30:ee:89:5c:98:05:0f:59:37:79:59:5a:33:04:bd:
4e:58:d9:4d:c6:17:31:a1:34:b6:52:60:25:95:8f:de:75:c6:
01:36:7b:26:78:50:b0:38:a4:56:d0:5d:a8:fc:d9:6e:89:09:
7e:5f:ee:0b:6e:f4:b0:f3:b2:05:d2:58:c0:ab:2f:9a:75:db:
80:e9:8e:11:ad:45:4b:23:21:38:43:2c:55:fc:9b:2f:aa:84:
0f:55:ca:5b:4a:c1:d1:42:99:86:14:b8:8a:3e:37:8b:40:eb:
fd:45:4d:64:10:31:57:54:3b:84:d7:e7:6a:8f:d8:81:66:a9:
94:f1:14:2d:11:f2:f9:36:9d:ee:f8:b4:cb:89:08:49:1c:bd:
ba:9d:59:84:cd:a0:07:c0:a6:68:88:54:4a:7c:c5:61:d6:6f:
e7:6c:9e:c7:7d:7d:49:2b:0e:0f:26:92:97:14:ce:8a:57:b9:
7b:b1:1e:32:87:d0:b9:ea:42:23:51:70:5d:b4:e1:ef:71:bc:
b6:6f:12:49:70:df:35:97:e1:0a:4c:61:4c:ec:dd:a2:1a:78:
62:4c:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:33 2024 by rpki-client on console-fra.rpki-client.org