Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/GoJwob8o4Kjnd9zul3v7L5NEqd0.roa
File: GoJwob8o4Kjnd9zul3v7L5NEqd0.roa (raw, json)
Hash identifier: t00Qs1yQpyf1EF1Qb/gtUdJfH7U83UoPyFzcHLFtAK0=
Subject key identifier: 1A:82:70:A1:BF:28:E0:A8:E7:77:DC:EE:97:7B:FB:2F:93:44:A9:DD
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 018CC793359304772CA5CCC86DDEA86A5731
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/GoJwob8o4Kjnd9zul3v7L5NEqd0.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210619
IP address blocks: 185.137.223.0/24 maxlen: 24
185.137.221.0/24 maxlen: 24
2a0a:a501::/48 maxlen: 48
2a0a:a502::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:35:93:04:77:2c:a5:cc:c8:6d:de:a8:6a:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8270a1bf28e0a8e777dcee977bfb2f9344a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:bf:f4:d5:6d:5f:c9:a8:e3:09:55:46:4f:
81:9f:9e:a1:06:dc:26:0a:32:b5:eb:61:d4:4b:68:
a7:1d:4a:01:26:68:92:db:00:f3:65:70:45:bf:7b:
66:f9:61:52:dd:be:d9:0d:f7:3d:db:de:b3:d5:34:
dc:cf:22:1a:a5:ba:78:91:49:e1:9e:6b:f7:86:8d:
03:ed:d3:96:62:6f:b5:50:21:9f:aa:26:da:60:ce:
b8:50:f0:a5:32:ff:9c:85:73:9a:ba:71:df:3c:74:
6d:61:e2:48:7b:70:3a:2b:0e:f4:e8:67:1b:eb:2e:
6f:4f:56:44:d2:2d:91:e3:24:ef:95:95:b2:75:80:
22:9a:c0:42:95:a4:82:d7:6d:e4:28:53:d2:e3:9b:
29:c1:11:aa:5e:b8:00:91:bc:56:d5:65:82:8f:82:
59:e5:31:8b:11:d9:e2:c5:98:93:16:c3:f8:b5:5f:
4c:71:49:fe:97:16:2f:66:d4:ff:64:a4:cc:06:4e:
6a:70:72:60:f0:d9:23:3f:27:c7:5a:39:cd:cb:e3:
3e:59:af:31:b3:34:66:90:a9:a0:87:84:34:7e:5c:
ea:b4:61:1e:3f:42:fe:b9:0b:d6:c4:ff:72:1f:99:
8d:7b:e8:a6:85:5c:23:b4:85:ff:0c:73:9f:77:db:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:70:A1:BF:28:E0:A8:E7:77:DC:EE:97:7B:FB:2F:93:44:A9:DD
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/GoJwob8o4Kjnd9zul3v7L5NEqd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.221.0/24
185.137.223.0/24
IPv6:
2a0a:a501::/48
2a0a:a502::/48
Signature Algorithm: sha256WithRSAEncryption
51:b7:cc:76:60:c1:cf:16:a6:82:a4:9c:cd:b6:1f:9f:30:96:
ef:7c:a7:b5:21:ce:02:61:90:04:c1:09:53:8c:fd:e3:4c:f5:
50:4a:be:68:5d:f0:1a:72:d0:c0:7a:b4:87:23:87:ea:2b:6a:
4e:a9:41:89:5f:d4:bd:7b:47:0b:65:1d:cd:64:d3:5a:2a:8e:
01:1e:64:b7:40:ee:ad:2d:c4:4c:21:5d:a4:2b:74:d1:74:b3:
5e:cb:9e:24:ab:41:0b:16:dd:30:a9:d5:c1:a7:93:32:06:af:
1b:8d:c0:3b:d9:e0:f3:91:ef:13:c1:ee:0e:91:d3:6a:f5:11:
0b:56:56:ef:3c:b2:73:49:1b:9d:98:c9:cb:12:71:a0:4f:ea:
93:cb:cf:e0:f5:44:65:13:73:31:49:39:a8:18:3f:a1:88:4b:
cc:6c:54:21:29:45:96:af:a5:b0:b5:79:89:13:24:f8:3d:a1:
3f:1c:2e:23:d7:78:62:6b:27:55:47:c0:87:d9:8b:9a:31:6d:
a4:c0:b4:53:dd:ab:c7:17:c2:9e:33:0e:e4:1a:3a:69:9b:61:
12:1d:27:1d:33:01:e4:ac:db:6b:74:e6:c3:b7:8f:86:02:31:
99:92:72:a0:aa:c7:b5:e0:e0:01:c3:73:80:d6:05:c0:d1:17:
6e:d1:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:35 2024 by rpki-client on console-ams.rpki-client.org