Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/2KDkXFIu2aUyzk_AphXcvEFFe9U.roa
File: 2KDkXFIu2aUyzk_AphXcvEFFe9U.roa (raw, json)
Hash identifier: 6bYlXzaIjo2ulaMUVP1//6NvmMs19zuugDPjF1Y222k=
Subject key identifier: D8:A0:E4:5C:52:2E:D9:A5:32:CE:4F:C0:A6:15:DC:BC:41:45:7B:D5
Certificate issuer: /CN=6d5be666d804d0f8b387fc62209d13006c6644aa
Certificate serial: 018CC26CEE87F7D8A8D10C6AE46A4A601669
Authority key identifier: 6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/2KDkXFIu2aUyzk_AphXcvEFFe9U.roa
Signing time: Mon 01 Jan 2024 00:29:27 +0000
ROA not before: Mon 01 Jan 2024 00:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43442
IP address blocks: 185.224.188.0/22 maxlen: 22
2001:678:424::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:87:f7:d8:a8:d1:0c:6a:e4:6a:4a:60:16:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5be666d804d0f8b387fc62209d13006c6644aa
Validity
Not Before: Jan 1 00:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a0e45c522ed9a532ce4fc0a615dcbc41457bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:3a:56:1e:90:6a:51:94:e1:24:00:77:d0:
f8:53:aa:b7:52:a7:c6:04:21:55:e3:3f:12:d5:c1:
08:bd:1d:6a:20:b2:0a:90:e9:40:94:33:15:2a:34:
6b:74:65:6c:90:9c:de:0a:3b:05:2b:59:86:f7:af:
34:cd:2e:82:cf:c0:be:cc:57:7f:cb:45:3a:83:35:
fa:1b:fb:65:ff:a2:df:3a:17:99:7b:f2:e5:c8:40:
cf:b9:30:7b:2f:4e:7f:b6:d4:c0:2a:be:f0:c9:c5:
3e:04:f7:e3:7d:c4:55:61:23:d0:5b:c9:01:1c:e4:
e7:4c:1e:4b:ed:95:38:5d:ee:5f:dc:bd:b1:45:30:
f9:9b:c4:54:8d:4e:24:74:79:8e:d1:a0:f2:bb:78:
22:f4:42:2f:72:fd:b2:d0:8b:86:4a:18:b3:9b:2e:
d2:88:fa:83:a4:a3:7f:cf:ca:d4:a2:09:f3:db:08:
03:6c:2e:8a:b1:9a:b3:66:3b:05:59:6d:52:ad:e6:
1d:99:af:45:ec:ea:a4:8d:a9:a7:31:77:23:06:32:
1e:71:c8:37:d0:88:e3:f4:4a:8b:ee:4a:37:b9:fd:
fd:b6:68:26:47:52:ee:ce:a1:84:05:b8:19:d3:35:
35:57:6c:42:b9:c7:ea:54:52:1a:21:d6:41:a6:c3:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:E4:5C:52:2E:D9:A5:32:CE:4F:C0:A6:15:DC:BC:41:45:7B:D5
X509v3 Authority Key Identifier:
keyid:6D:5B:E6:66:D8:04:D0:F8:B3:87:FC:62:20:9D:13:00:6C:66:44:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/2KDkXFIu2aUyzk_AphXcvEFFe9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/523ef6-2743-413d-b41d-6af655a5494b/1/bVvmZtgE0Pizh_xiIJ0TAGxmRKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.188.0/22
IPv6:
2001:678:424::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ff:0b:fa:b4:66:18:73:a5:8e:e3:b6:7a:b0:80:98:cc:37:
f8:57:00:91:a4:b4:9c:92:3b:c9:fe:52:06:1d:73:6b:4b:f9:
bb:e7:78:15:69:d3:d4:ef:c4:5a:31:28:14:b3:e0:c5:cf:b9:
c2:69:90:4c:3f:38:40:4c:0f:48:b6:d9:31:ee:84:ff:cc:cf:
c2:9b:23:a4:77:5c:2e:22:7d:0e:62:17:10:6a:16:82:c6:4e:
6f:c7:24:2e:94:38:51:7e:a2:1e:76:e7:f3:87:e8:80:b5:2a:
15:57:e1:ed:49:75:44:9d:99:2f:ad:71:3c:49:97:c6:51:d9:
bd:31:88:b5:7b:ff:fa:82:f6:9e:12:66:ea:38:6b:44:1d:6c:
0b:ef:e8:11:74:16:4f:f3:61:e5:b4:d8:65:c8:a1:03:05:d5:
e7:3b:9b:60:1a:8b:0c:e2:8e:f4:52:c1:d8:12:7e:b2:59:e3:
43:1d:af:46:84:4c:4d:b6:59:41:aa:b2:84:00:7d:b2:45:93:
b3:e1:12:1f:f2:80:c5:94:8c:96:3c:80:47:9a:e3:3a:1c:af:
55:9a:fe:bd:dd:d2:27:12:3a:b3:4f:73:13:9b:6a:e8:70:80:
4f:7a:21:5d:8b:6b:96:d1:9e:33:6b:c1:22:55:1d:a4:46:9a:
66:e9:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 23:09:31 2024 by rpki-client on console-fra.rpki-client.org