Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa
File: bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa (raw, json)
Hash identifier: BjMvOoxfQwjqHVsLjoQqT8eG3s4d4OJMFwIINRMycOU=
Subject key identifier: 6C:3F:32:DC:2A:E5:1E:67:4F:D0:3F:20:99:B5:74:AB:66:C4:EC:C6
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 018CC726C111647B513581E755FDA3196EA3
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa
Signing time: Mon 01 Jan 2024 22:30:54 +0000
ROA not before: Mon 01 Jan 2024 22:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206589
IP address blocks: 185.182.96.0/22 maxlen: 22
2a0a:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c1:11:64:7b:51:35:81:e7:55:fd:a3:19:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Jan 1 22:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c3f32dc2ae51e674fd03f2099b574ab66c4ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:b8:c0:7b:d6:ee:d3:ef:13:c3:c5:0e:d7:
73:59:ee:92:e3:23:d0:09:45:c3:b9:3b:12:84:44:
fc:f3:a1:25:83:52:09:62:16:88:31:6b:e6:ba:46:
31:18:d9:c8:e9:35:43:00:23:3d:e3:1f:f4:ea:94:
26:d6:c6:cf:34:7c:13:ce:4f:5f:ce:19:9d:58:41:
64:64:a8:72:19:6a:3f:67:cc:ec:31:2a:5d:41:e0:
d8:a3:93:ad:b6:eb:0e:62:10:ae:61:e8:b2:ff:28:
49:d9:e7:1c:45:b5:b7:ab:77:a1:76:0b:4a:73:62:
4e:24:ac:06:55:fe:8e:98:d4:91:59:79:2f:d9:83:
f6:68:65:8b:0d:a6:32:9c:b8:ff:34:96:0d:c0:11:
e0:66:ca:11:4d:f6:bf:4b:6e:82:50:35:64:c9:98:
fd:22:c1:a0:df:75:e8:d9:20:b7:e1:95:3e:8e:6a:
f5:1e:86:7a:ac:c6:e2:7b:a1:b1:13:70:4f:fb:09:
ac:c1:bb:6a:f4:0f:25:09:0f:ff:06:f7:58:86:a5:
86:12:65:75:88:f9:8d:62:b0:2d:ae:74:42:37:8a:
5b:21:57:bd:f4:a7:2d:c1:dd:a3:4a:17:40:c6:10:
c7:1e:3b:53:6f:b2:2a:68:1b:08:48:8b:22:a5:e5:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:32:DC:2A:E5:1E:67:4F:D0:3F:20:99:B5:74:AB:66:C4:EC:C6
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.96.0/22
IPv6:
2a0a:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
83:b2:be:54:16:08:f1:48:3b:6b:41:66:3c:f4:be:97:5c:b8:
72:33:fd:0d:32:ea:a3:30:9e:36:e7:b8:9d:2d:a8:19:cc:ea:
bd:c7:ba:f7:e7:33:f4:ea:54:01:5d:22:32:ed:19:40:f8:ef:
aa:1b:c0:d1:b2:73:28:aa:32:e5:b0:e2:79:b0:a3:e9:d7:b5:
5d:20:6e:38:fa:73:78:2c:d2:b1:49:d4:03:d2:bc:60:4c:27:
8d:38:3b:bd:c1:53:82:60:f4:82:c7:f9:0a:56:db:e7:a3:d6:
66:a2:a8:a0:00:e2:8e:cc:e0:71:87:da:88:31:0d:cf:f5:1b:
09:1e:6d:57:86:e6:30:4f:88:a8:2b:8e:77:d1:40:b6:d2:64:
bf:fb:fd:8a:b4:e3:47:72:2c:5b:52:00:96:e7:d2:17:b1:bd:
ff:9f:56:89:ee:40:cd:a2:82:9f:c0:3f:55:f2:ea:7f:95:43:
6c:44:75:41:e1:45:dc:9f:fd:16:27:3a:53:95:1e:2d:6c:20:
07:67:f5:52:b4:f3:e9:88:40:8f:0b:40:7c:fd:e1:94:80:8c:
89:69:aa:dc:83:d2:ef:ac:42:ea:ce:47:02:3c:1b:ec:6a:65:
94:8d:e1:d0:be:b5:86:e8:57:82:bf:33:13:c4:c4:7a:88:a4:
73:5d:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:05 2024 by rpki-client on console-fra.rpki-client.org