Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/2D65TNyuAkiQtPzAQ4KDh1dLGOg.roa
File: 2D65TNyuAkiQtPzAQ4KDh1dLGOg.roa (raw, json)
Hash identifier: SsFMsxcxdsk1Z0cRoRZ+lvKnvWDPPhV0H9cDPHTwphg=
Subject key identifier: D8:3E:B9:4C:DC:AE:02:48:90:B4:FC:C0:43:82:83:87:57:4B:18:E8
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 018CC3B6F490E24738B9B11911DECBFDDBD4
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/2D65TNyuAkiQtPzAQ4KDh1dLGOg.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208642
IP address blocks: 185.202.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f4:90:e2:47:38:b9:b1:19:11:de:cb:fd:db:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d83eb94cdcae024890b4fcc043828387574b18e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:d2:30:f5:40:ce:f2:7a:7e:3a:24:a9:b1:
6f:7b:93:fe:23:e8:81:4e:fb:03:2d:3b:fa:35:32:
4b:1e:59:fe:42:31:bf:8f:7e:94:96:8b:55:7c:c8:
9a:29:2b:98:84:da:d2:75:4f:6a:d0:69:cb:09:0e:
64:ed:06:42:06:81:e6:fb:c6:a3:14:1e:98:d2:31:
53:44:70:6b:45:56:f4:fd:5b:d2:00:38:38:71:6a:
c6:2b:96:b6:1b:14:04:4e:21:7d:78:f2:ce:3a:f5:
ac:d5:59:8d:93:47:e8:02:5a:d1:dc:0c:af:0b:92:
cc:66:6b:2c:a1:58:32:d9:29:d7:a9:e3:c6:f4:61:
c3:92:d8:a4:ca:05:8f:b2:10:0c:e2:d6:d7:7d:f7:
c3:4a:cf:31:a2:fd:a7:6e:d4:48:58:bc:e2:1b:49:
ff:d0:d2:45:5c:6a:35:f9:fb:94:92:94:66:3d:64:
9a:b0:7e:f2:12:3e:5d:03:59:32:02:e2:95:bd:9e:
c2:e5:7b:5f:26:bb:64:55:b9:53:51:fd:15:7f:ad:
1f:e1:c7:d0:91:22:93:3e:7a:03:e7:5a:d6:de:3f:
f0:d7:d6:74:cc:7f:05:15:40:2a:5f:73:e9:e3:f1:
e4:06:77:4a:48:70:6b:1b:46:55:d4:ca:ba:9e:a7:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:B9:4C:DC:AE:02:48:90:B4:FC:C0:43:82:83:87:57:4B:18:E8
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/2D65TNyuAkiQtPzAQ4KDh1dLGOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:75:48:82:b2:fd:d7:8c:ec:45:42:8d:55:32:28:9c:f9:17:
87:62:b5:59:ba:69:ba:c6:e0:1c:b8:82:81:59:3d:a0:76:ab:
1f:af:9b:6f:a4:51:3c:e4:f3:05:b3:f0:76:bb:ea:99:20:a6:
bf:86:36:09:4d:56:20:8d:54:5f:0e:78:47:1d:7e:26:84:1b:
76:0f:35:27:cd:71:54:90:70:ac:8e:91:8f:cf:29:fa:13:22:
5c:a7:51:b5:80:c6:be:88:f4:9f:8d:6b:cc:80:11:52:20:a3:
85:16:6d:1a:21:ac:10:0e:75:72:c1:98:50:b1:24:52:5b:ef:
d8:53:c4:82:0c:14:1c:50:ee:f0:2f:d2:07:51:b6:0e:2c:34:
ba:da:2d:0d:1f:35:20:d3:25:d7:01:7d:c2:c0:40:8c:62:17:
f0:90:a8:4d:44:b9:25:f7:be:9c:70:13:90:f3:17:6e:7f:1b:
2d:2a:96:ac:b3:cc:d5:ac:a4:55:42:79:46:21:27:83:f7:39:
fc:9e:b2:00:05:76:ca:85:d0:4d:fb:26:ea:d9:2e:d0:9e:57:
2e:5f:42:46:1a:41:aa:2a:57:0f:50:a1:de:bd:47:3b:71:77:
7d:e0:86:60:a4:6f:c9:cd:65:e4:f6:41:f9:9e:d9:49:40:b0:
c3:76:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:18:29 2024 by rpki-client on console-ams.rpki-client.org