Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/2mR7XyS9TGOtkhE1irnRxvk1z8A.roa
File: 2mR7XyS9TGOtkhE1irnRxvk1z8A.roa (raw, json)
Hash identifier: Dhezoutf2DrC9umNfUjZaEj8Nm5W2xAjWUvw5AaDRnk=
Subject key identifier: DA:64:7B:5F:24:BD:4C:63:AD:92:11:35:8A:B9:D1:C6:F9:35:CF:C0
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 018CC9BCC4F56E366B34FDDEB4DB46CA3745
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/2mR7XyS9TGOtkhE1irnRxvk1z8A.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205192
IP address blocks: 185.226.161.0/24 maxlen: 24
185.226.160.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c4:f5:6e:36:6b:34:fd:de:b4:db:46:ca:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da647b5f24bd4c63ad9211358ab9d1c6f935cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:3b:b7:39:4f:39:30:a5:4b:ce:61:a2:0d:
b2:9d:d2:a8:b8:5b:2c:f7:47:bc:78:e6:e9:ca:c3:
11:20:a5:71:d6:c2:01:45:81:2f:63:99:e3:18:5b:
88:4b:ab:13:b2:5c:6a:d2:53:50:f8:d5:15:5f:4e:
7c:0a:c1:6f:7e:2f:49:29:19:fc:cf:0e:36:36:0c:
b5:b4:76:c5:cd:b4:d0:83:b4:08:87:86:50:fa:b1:
39:63:a0:1c:1f:62:12:98:bc:5e:56:fe:3c:01:0b:
b8:0e:b0:55:8a:8a:6f:5f:94:18:31:97:bd:b1:af:
5e:f5:db:ad:ab:27:b2:90:50:c4:62:d0:31:51:81:
b0:4d:0f:0f:11:00:b5:d3:1a:82:db:11:f0:c8:82:
87:3b:b3:6d:c0:c1:f1:65:9e:42:d4:9b:9c:47:cf:
97:39:79:ff:e4:fa:3b:b0:90:5d:ba:d4:dc:4a:1b:
0e:5e:f0:26:11:91:91:b7:5e:f2:8c:46:27:de:21:
bf:ae:34:a7:45:7e:e8:ab:e6:2d:ae:91:72:a6:28:
05:a1:17:6f:1a:b3:0e:5a:60:99:96:4f:aa:56:35:
05:36:ec:05:dd:6f:30:ed:94:9d:f7:06:bd:38:6c:
46:fa:24:b2:0f:9f:42:67:25:41:a2:42:96:dc:03:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:7B:5F:24:BD:4C:63:AD:92:11:35:8A:B9:D1:C6:F9:35:CF:C0
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/2mR7XyS9TGOtkhE1irnRxvk1z8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f0:8d:1f:5f:eb:67:b4:f6:63:0e:db:68:a1:a6:ae:71:ee:
75:df:a4:36:5b:c7:2c:57:31:78:9b:aa:05:67:2e:f6:2f:26:
cb:fa:b7:47:1b:15:be:e3:df:35:85:8e:c6:24:5e:55:85:99:
cc:12:72:3a:a4:99:6b:dc:51:b2:32:60:54:6b:4e:88:8d:69:
10:0f:e0:3f:11:97:9f:72:03:d9:83:ef:dd:c5:48:86:12:d8:
aa:81:a2:59:04:4a:1a:e7:75:6c:ef:13:fc:82:78:a0:21:60:
f0:15:55:e8:39:da:eb:6c:cc:80:bd:3f:12:ba:e6:95:ca:93:
fa:77:c3:c4:d0:ee:51:76:f7:38:21:13:6b:05:4c:8c:db:8f:
70:5e:08:32:e3:fe:ee:11:80:a7:d3:07:50:8b:4b:da:9e:10:
02:95:ce:3f:b4:83:88:d6:2e:6c:52:1d:03:3a:5a:29:eb:e0:
b6:22:f9:6e:6c:e6:73:af:97:31:0b:a2:6e:c6:91:b5:fe:1c:
07:dc:00:2c:56:a1:6a:ce:ac:15:8b:b1:0d:fa:af:26:e3:c8:
85:32:1c:60:f2:52:24:1b:6c:67:83:ac:ee:a2:2e:7b:05:e2:
1b:f8:a6:1d:bb:87:f1:3f:b4:17:fc:46:77:a1:b4:bc:39:8e:
b8:97:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:22:33 2024 by rpki-client on console-fra.rpki-client.org