Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/_hB4yXyzrYnB5RozGjZQShH_7v0.roa
File: _hB4yXyzrYnB5RozGjZQShH_7v0.roa (raw, json)
Hash identifier: AVg2cc51G3IQg2OenBo0sHyjjenHbuP7HF7dgeDu5O4=
Subject key identifier: FE:10:78:C9:7C:B3:AD:89:C1:E5:1A:33:1A:36:50:4A:11:FF:EE:FD
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 01901D6E1EC36402EA7DABE0F75E02063CC4
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/_hB4yXyzrYnB5RozGjZQShH_7v0.roa
Signing time: Sat 15 Jun 2024 19:44:34 +0000
ROA not before: Sat 15 Jun 2024 19:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200849
IP address blocks: 185.92.200.0/24 maxlen: 24
185.92.201.0/24 maxlen: 24
185.92.202.0/24 maxlen: 24
185.92.203.0/24 maxlen: 24
2a03:8d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:6e:1e:c3:64:02:ea:7d:ab:e0:f7:5e:02:06:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Jun 15 19:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe1078c97cb3ad89c1e51a331a36504a11ffeefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:22:08:86:7d:9a:f3:06:ee:71:bc:2d:dd:
87:b1:7e:f3:9b:59:35:f4:90:e2:94:31:07:17:65:
66:4d:8d:f9:d2:6c:ad:1d:fc:31:52:d3:bc:3d:cd:
d2:08:a2:67:e6:44:20:7b:15:03:3f:5a:56:9c:02:
1d:48:0d:2a:30:49:b2:60:59:18:b4:19:52:d7:bc:
4e:e3:4c:3e:f9:85:4e:91:46:84:6c:a5:f3:3f:c7:
96:3b:62:21:eb:ad:4a:88:f0:44:c1:46:45:99:0f:
64:87:98:6a:b9:42:69:05:b9:26:79:11:c4:d4:31:
cb:4c:27:cc:23:b1:b0:e8:8c:6d:bc:6c:c2:dd:ba:
6f:95:2b:5d:ec:74:20:08:15:90:79:3b:b2:15:05:
06:22:6d:a1:ec:4f:f1:e5:95:30:e6:51:54:7d:b7:
24:51:5a:aa:d2:d0:e6:1f:65:17:6e:19:fc:54:9e:
4b:34:8c:6d:dc:13:a7:da:0f:53:74:82:bc:f1:aa:
c2:6b:39:a5:b0:63:64:28:a3:c6:39:61:d4:b5:24:
57:ab:db:86:ae:9c:8f:14:0c:55:5e:04:31:ba:58:
93:1a:63:b6:cb:fd:e3:a9:99:0f:36:69:f4:91:85:
be:eb:d2:cd:e1:31:7a:0e:63:75:05:2b:ff:24:63:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:78:C9:7C:B3:AD:89:C1:E5:1A:33:1A:36:50:4A:11:FF:EE:FD
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/_hB4yXyzrYnB5RozGjZQShH_7v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.200.0/22
IPv6:
2a03:8d20::/32
Signature Algorithm: sha256WithRSAEncryption
ba:59:c4:e9:a7:8e:e8:0a:26:e4:71:54:08:89:e5:e3:17:8a:
50:4c:c9:29:99:49:59:b8:d3:7f:67:82:e1:9a:a6:cd:ea:8d:
30:e4:64:bf:fc:1b:af:cb:46:bb:80:57:db:7d:8f:d6:4a:ec:
2c:ae:c9:4f:66:c1:c4:82:66:83:5e:79:d5:6a:1e:e0:97:05:
2b:ed:ab:88:95:b5:cd:fc:48:ee:7e:5d:2a:ba:15:06:ae:8d:
35:a6:96:d0:c2:ad:3f:b5:a1:66:a0:62:59:8e:be:c4:08:fa:
74:28:2f:56:15:2d:70:5b:ee:a1:e0:d1:16:71:4d:95:6e:37:
fa:ad:31:5f:ba:75:59:93:86:44:9b:30:d8:f6:a1:3e:f1:3c:
50:af:c6:9d:d2:ea:3a:03:06:50:5c:50:e5:d4:ab:c4:0d:13:
b5:68:ed:78:8e:2a:cd:f0:b1:72:bd:f6:45:63:b0:75:72:91:
4c:7d:be:36:de:06:ce:1c:ed:57:16:93:65:46:3f:60:ee:95:
13:87:c0:58:15:b2:20:fa:ff:06:ec:cb:17:a9:5e:d0:b1:14:
11:5d:93:40:7e:0b:0b:30:47:f5:13:91:bd:c9:b7:ee:f2:ce:
29:0a:5b:66:c5:01:78:a8:87:11:aa:60:45:37:c3:f6:f8:a1:
a5:de:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:25:18 2024 by rpki-client on console-ams.rpki-client.org