Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/brmCkvn744hn9f8Mi95JshYrHVQ.roa
File: brmCkvn744hn9f8Mi95JshYrHVQ.roa (raw, json)
Hash identifier: cCMWWvAOQN9bkNQ1/W66SmaYceqmTI9o7CzK40XhB24=
Subject key identifier: 6E:B9:82:92:F9:FB:E3:88:67:F5:FF:0C:8B:DE:49:B2:16:2B:1D:54
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 018CC801973BD770FEFFA9ADAB41A5F0D923
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/brmCkvn744hn9f8Mi95JshYrHVQ.roa
Signing time: Tue 02 Jan 2024 02:29:56 +0000
ROA not before: Tue 02 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60917
IP address blocks: 185.23.36.0/24 maxlen: 24
185.23.36.0/22 maxlen: 22
185.23.38.0/24 maxlen: 24
185.23.37.0/24 maxlen: 24
185.23.39.0/24 maxlen: 24
2a00:6860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:97:3b:d7:70:fe:ff:a9:ad:ab:41:a5:f0:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb98292f9fbe38867f5ff0c8bde49b2162b1d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:2e:40:44:44:9e:3d:ec:3a:3a:20:ad:28:
4e:bf:27:f3:46:db:e0:a1:51:bb:20:87:2a:f2:09:
9e:57:a1:38:e7:76:7f:d6:74:29:94:e5:18:c9:b8:
6a:b5:40:1c:fc:66:4a:4d:6e:77:82:c1:ac:7d:96:
c0:6a:cc:b3:73:ad:d1:21:75:ef:b3:59:f2:c6:a0:
dd:58:fc:aa:3e:38:a2:ec:49:eb:0f:52:81:6c:18:
ef:e8:fd:a0:42:d9:a4:e2:a2:6b:c6:5e:4c:1b:42:
8c:a5:09:bb:e7:47:2d:2d:b0:b3:a3:28:ed:e2:b0:
85:01:4b:a9:d8:d4:85:2b:65:34:2a:ee:55:fc:5c:
a6:e4:b6:1a:fd:b0:bf:47:84:a5:6a:a8:eb:33:40:
ba:4d:3a:1d:33:64:7b:1c:71:a5:11:61:a1:57:2e:
94:64:67:18:bd:e7:85:a9:33:97:6e:48:38:73:ad:
a4:4f:8f:b4:43:fb:c0:de:21:a4:0f:f8:5e:01:80:
b0:63:ee:52:af:00:6a:4f:25:b1:20:0f:07:26:7b:
43:0d:90:a2:88:0f:cd:32:10:8f:4d:ce:3c:7a:09:
29:19:57:7b:b5:eb:cb:9a:37:00:e1:d3:c3:8b:16:
9f:56:bb:19:ea:b5:19:03:15:d9:cb:81:f3:cf:f5:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:82:92:F9:FB:E3:88:67:F5:FF:0C:8B:DE:49:B2:16:2B:1D:54
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/brmCkvn744hn9f8Mi95JshYrHVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.36.0/22
IPv6:
2a00:6860::/32
Signature Algorithm: sha256WithRSAEncryption
7d:a8:cd:60:da:4d:db:9a:db:1d:49:9a:72:35:b0:9f:47:46:
56:a5:64:8d:78:a0:f6:a2:16:8e:26:d7:de:b9:c2:a1:7f:1f:
89:1a:a8:6d:a3:5e:95:3f:a4:ed:5a:06:a1:b3:2a:5e:0e:75:
b5:9b:fc:48:84:45:11:55:f5:64:60:ec:20:f1:6f:6f:3f:0d:
d5:39:7b:06:b9:9b:4d:7f:79:28:b3:e4:bf:27:eb:34:00:b0:
00:94:83:40:e2:da:da:11:0c:50:aa:aa:f2:b5:b6:27:8f:7d:
5c:32:8b:8c:f5:8e:55:2a:68:1a:8d:a1:37:7b:00:4a:ec:8b:
fd:a2:33:95:b8:0b:cd:7c:08:e9:d2:a3:6d:1d:e5:7c:f2:96:
c6:e1:7d:d3:24:56:c3:41:5c:36:97:6e:7c:2d:90:a4:d5:a5:
f1:02:31:e9:1b:d1:37:ce:62:43:91:02:e6:88:cf:61:c3:16:
1f:b9:b9:7e:03:fa:bf:49:7f:bd:20:76:43:25:d0:a0:13:68:
99:20:39:1b:30:e5:8a:cd:bf:b6:7c:7e:ff:f7:4d:be:0b:ea:
eb:5b:79:01:bd:e4:d5:5b:a6:2b:d1:ae:a3:c2:dc:b5:a7:5e:
cf:3f:f4:17:d6:92:4f:63:49:ae:18:0b:ab:b9:7c:c4:99:7e:
66:d4:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:33 2024 by rpki-client on console-fra.rpki-client.org