Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/KojLdVy2VAoCFKD7QRsrQpg1GDY.roa
File: KojLdVy2VAoCFKD7QRsrQpg1GDY.roa (raw, json)
Hash identifier: P5w40DctDhp+vNw57dyKISU4yNHTgm4ImH5nMaUALDk=
Subject key identifier: 2A:88:CB:75:5C:B6:54:0A:02:14:A0:FB:41:1B:2B:42:98:35:18:36
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 018CC9BCAFB4E8E2D47511D2E5763A247D6B
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/KojLdVy2VAoCFKD7QRsrQpg1GDY.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212217
IP address blocks: 185.206.123.0/24 maxlen: 24
2a10:ca00:4::/48 maxlen: 48
2a10:ca00:2::/48 maxlen: 48
2a10:ca00:3::/48 maxlen: 48
2a10:ca00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:af:b4:e8:e2:d4:75:11:d2:e5:76:3a:24:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a88cb755cb6540a0214a0fb411b2b4298351836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:ee:62:11:1c:ed:26:41:70:c7:ec:1c:29:
8b:1a:3f:ee:ab:5d:69:1f:29:1e:ca:03:6a:16:47:
f7:3b:b6:c5:11:68:cd:af:2d:5f:6b:d2:f1:33:eb:
f7:0f:98:08:0f:17:2f:b7:3d:aa:ff:42:26:1d:ab:
fb:9d:a2:6b:0b:53:7f:c4:17:0f:88:13:b4:2a:0d:
7c:2f:a7:c8:c1:f6:4e:b6:bf:4e:e4:c5:0c:d5:f4:
3d:e8:6b:c9:b7:5c:e5:f0:8d:15:eb:fe:f1:c1:03:
56:ca:c3:78:f4:c8:88:9b:1e:c3:71:75:67:06:25:
70:65:5f:67:42:62:55:c7:18:c5:58:78:1c:1c:51:
56:78:97:aa:62:58:f0:d0:19:b9:d3:bd:cd:5f:79:
0c:26:3e:49:e0:5d:eb:d9:f3:73:7c:71:ab:75:af:
ae:24:2a:2e:b0:f2:5f:f2:57:d0:94:48:ba:99:8f:
23:4d:55:ba:ca:5c:b9:e5:4c:91:f5:c4:68:94:cb:
36:d5:60:3b:bb:bc:aa:1b:57:d8:a6:fb:2b:e1:33:
4d:19:46:ec:01:6f:dc:d7:36:d8:bd:81:78:fe:41:
86:ad:37:80:b2:15:a4:f1:dd:b0:f6:d2:a8:06:47:
6a:d1:92:a0:c3:ed:01:85:c6:88:30:20:76:57:f4:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:CB:75:5C:B6:54:0A:02:14:A0:FB:41:1B:2B:42:98:35:18:36
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/KojLdVy2VAoCFKD7QRsrQpg1GDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b6:7e:fb:24:f5:41:cb:c0:92:4f:75:93:a2:0a:b7:7e:60:fc:
c7:8f:67:fa:82:b2:69:d3:fc:ef:1e:c1:26:70:fa:79:c3:9e:
27:ac:cc:cc:b2:2c:4e:13:0e:27:e3:11:37:63:9a:d6:e2:1a:
89:7f:ad:61:c4:5e:e7:cf:14:fb:14:5d:f8:03:ac:9f:4f:19:
e8:33:0e:9f:8d:09:11:d6:b9:e6:4e:2f:2d:36:34:3e:76:fc:
42:70:bc:f1:82:47:9a:b5:9b:ba:75:46:27:9d:83:5a:66:f6:
83:2e:46:04:34:97:3b:28:d6:08:d2:a9:bd:81:88:71:03:35:
96:d0:8e:fd:6a:6b:5b:35:94:b7:d5:0a:48:3e:37:64:84:35:
ae:68:da:60:f1:6b:2c:23:59:f5:93:89:b7:40:8c:69:73:48:
55:3d:fa:1a:e0:9a:96:b0:e4:71:ab:1d:cc:6c:0f:9c:35:c2:
7e:b9:04:06:d8:bd:db:e5:ac:6f:bb:ae:00:d4:bf:54:1a:cd:
cd:ae:64:57:c5:fb:3d:6d:a7:ce:f4:74:a4:07:1e:26:89:28:
ed:bc:fb:65:23:07:6c:8b:8e:71:d4:90:9f:b3:35:43:3a:e1:
48:89:21:aa:79:a9:90:75:17:a5:5e:72:8f:dc:5a:c8:2f:d6:
27:e3:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:17:16 2024 by rpki-client on console-ams.rpki-client.org