Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa
File: 25vV_Hla1Uz5TU7dM8H6qVgL2To.roa (raw, json)
Hash identifier: f87ENI3MHssTgPGmoqzQl685IQTawybAiHOiQ2Su5oA=
Subject key identifier: DB:9B:D5:FC:79:5A:D5:4C:F9:4D:4E:DD:33:C1:FA:A9:58:0B:D9:3A
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 018CC795609E14763043B6D237C44BC471A8
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50864
IP address blocks: 185.160.89.0/24 maxlen: 24
185.160.88.0/24 maxlen: 24
2a07:bbc2:1::/48 maxlen: 48
2a07:bbc2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:60:9e:14:76:30:43:b6:d2:37:c4:4b:c4:71:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9bd5fc795ad54cf94d4edd33c1faa9580bd93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:be:86:91:35:e3:e5:5f:8a:c4:81:fd:3b:
b1:50:df:65:56:52:47:d3:c4:a1:9e:98:ef:7c:73:
c5:15:c5:64:0a:37:d0:05:53:ae:fe:6a:ce:6e:f9:
92:40:e5:be:5f:a3:d7:2a:72:ec:45:6b:36:3f:32:
d5:d0:b1:f8:20:32:65:18:02:04:c9:a9:81:1b:73:
7f:3e:9c:f8:5e:8f:61:df:b3:65:44:3c:96:c3:dc:
1d:f9:0b:39:37:94:56:dc:30:51:37:22:0a:c1:bd:
fe:3d:f2:b5:ea:b9:2d:e1:4e:3c:45:44:5c:15:b3:
63:fa:c9:f0:a3:c4:1e:c7:2f:50:5d:ac:2f:ea:3d:
c5:3a:f1:b6:48:d1:e5:fc:0b:02:1f:1d:06:93:55:
bc:64:cf:ed:2f:2d:09:25:99:53:82:78:9d:29:ce:
ba:7b:1d:e6:cf:43:5c:b1:3b:a7:40:1c:d6:21:88:
e6:16:71:1e:82:78:85:cf:61:ff:62:aa:7b:63:d2:
a2:7c:90:b8:b7:45:dd:44:57:64:b1:4f:4e:ea:3a:
cc:a6:16:67:88:70:04:51:6b:9e:a1:bc:64:72:d9:
bf:f1:84:c8:3c:a0:5b:2a:eb:d4:61:68:02:6a:eb:
cb:d9:9e:b4:4a:6c:b7:ed:66:38:74:7b:7c:b1:a7:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9B:D5:FC:79:5A:D5:4C:F9:4D:4E:DD:33:C1:FA:A9:58:0B:D9:3A
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.88.0/23
IPv6:
2a07:bbc2::/47
Signature Algorithm: sha256WithRSAEncryption
94:24:84:c1:d9:ac:20:a1:41:f0:bc:e8:69:4e:c3:68:fd:8e:
0a:03:17:d1:cf:be:16:6e:65:95:bf:76:89:56:05:3b:aa:f9:
f1:49:62:09:af:77:35:d6:69:8a:b7:b0:a3:2c:df:ce:33:21:
7c:de:2c:f2:b0:9c:f5:6a:a0:cb:04:13:6f:47:6c:75:26:d5:
40:59:0b:9e:fe:5f:fe:6d:f1:90:88:9e:5a:9b:89:74:75:7d:
e4:3a:11:96:cc:96:bd:ed:21:f0:cc:4f:cf:00:06:2a:82:da:
f1:f7:7b:4e:31:a1:ec:9b:78:97:07:fc:7e:75:bb:20:c1:17:
72:4c:23:c3:21:0e:13:9b:c8:53:f7:bb:10:c8:ec:29:7c:b0:
47:fc:74:81:85:31:33:9e:00:5a:47:94:42:21:b3:11:8d:e1:
6e:73:30:cb:ac:78:43:0a:27:41:5d:bb:2d:fd:b8:80:de:d4:
f4:fa:24:59:88:cc:1c:fe:ab:46:75:2b:96:d0:3a:d7:67:84:
9d:91:16:d9:8f:4a:01:a8:3a:21:46:9e:60:02:7d:6e:7b:dd:
9d:eb:98:0e:35:ba:1a:b2:3f:5f:bb:b8:f5:51:d9:b8:82:f3:
1a:35:74:dc:ea:a9:65:fc:6e:17:6a:b1:37:a6:82:7f:fe:05:
cc:eb:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:56:00 2024 by rpki-client on console-fra.rpki-client.org