Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/rAEX6nGTwNJurp-RUgVDao7uToM.roa
File: rAEX6nGTwNJurp-RUgVDao7uToM.roa (raw, json)
Hash identifier: ZAnTW0JNdixu4RS2ao95jS3IFKAqbPupWix5gerhZiI=
Subject key identifier: AC:01:17:EA:71:93:C0:D2:6E:AE:9F:91:52:05:43:6A:8E:EE:4E:83
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 018CC8011FF32DCF4399CBEABDD2EAD05C6F
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/rAEX6nGTwNJurp-RUgVDao7uToM.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206472
IP address blocks: 185.185.177.0/24 maxlen: 24
185.185.176.0/24 maxlen: 24
185.185.176.0/22 maxlen: 22
185.185.179.0/24 maxlen: 24
185.185.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1f:f3:2d:cf:43:99:cb:ea:bd:d2:ea:d0:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac0117ea7193c0d26eae9f915205436a8eee4e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:16:1c:07:b3:69:df:20:99:7f:9b:2a:29:
f6:c2:73:a5:f8:03:e7:43:f1:63:fd:0e:60:5e:90:
de:36:e7:6e:de:14:b2:25:a0:46:05:ec:c4:3f:c9:
e4:00:4f:2f:32:9b:d5:1c:fc:97:9a:8f:60:31:d4:
74:f4:98:4f:33:fa:8d:ea:37:87:a6:da:88:50:00:
c8:a2:df:26:8d:44:47:6b:c4:c8:49:53:96:ec:dd:
61:ea:0f:86:06:58:86:51:c3:ef:3f:e1:e1:47:57:
fe:a8:02:32:fc:e8:f5:4c:05:96:c5:70:18:81:66:
ce:31:93:74:1f:23:60:be:55:f5:e8:29:ef:8c:67:
1b:9b:1d:9a:14:20:25:ab:d8:19:8b:11:c0:27:fd:
b9:9a:c5:3e:ff:2f:70:24:eb:31:98:17:f6:c6:7e:
6d:0d:ed:fc:d7:e1:92:ff:6b:25:b0:62:11:27:55:
d6:5a:aa:40:0b:aa:1c:19:38:c8:13:6d:c1:0e:c9:
bc:82:c1:06:6d:61:d0:cf:33:22:16:61:0d:cf:2e:
d0:27:2e:f1:36:11:a0:44:a3:c3:e7:c6:d1:32:18:
0c:8e:68:03:dc:ee:a3:ad:88:61:4a:fc:0f:2b:38:
64:87:e9:71:14:f5:f2:36:09:b2:8e:9f:8c:6f:b1:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:01:17:EA:71:93:C0:D2:6E:AE:9F:91:52:05:43:6A:8E:EE:4E:83
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/rAEX6nGTwNJurp-RUgVDao7uToM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.176.0/22
Signature Algorithm: sha256WithRSAEncryption
79:12:67:60:da:7f:b5:e9:8f:3a:82:0b:c6:ff:48:cb:b6:ae:
e5:2c:29:18:de:49:86:e4:0e:98:01:18:80:e0:d7:b5:fe:11:
1e:81:1e:14:a0:8f:4d:30:a5:97:be:6d:a1:a2:b9:2f:b8:0a:
86:36:7e:a2:d0:aa:f3:1a:0e:60:2a:7d:b5:28:ef:b9:ed:08:
0a:9f:bf:da:21:3e:18:7e:05:3a:0a:23:3f:d0:2a:e0:ad:6d:
8f:3f:0e:4d:24:f8:c4:f2:e1:3e:32:05:87:83:b4:07:dc:93:
be:7c:21:48:91:5a:54:86:5b:05:d9:f7:f5:ea:f1:a5:67:03:
cb:21:57:a1:c9:6e:93:7d:2d:43:61:ae:b2:66:c6:ca:7c:16:
49:ae:c3:a1:cf:6d:9f:c7:b5:01:02:a1:6b:c3:b7:2b:92:d1:
42:7e:a5:77:0b:55:ea:2a:91:37:3a:8e:b0:15:6a:ea:6b:87:
f9:d7:bf:59:7e:8d:90:bc:1e:ac:85:fc:e0:16:7e:93:42:cd:
8e:6d:9b:ee:26:18:cf:df:9c:89:e7:b3:5a:68:c2:2a:ad:68:
7e:f1:4c:fd:f2:24:e9:76:ab:f9:45:c6:3e:9c:82:41:ae:30:
49:a7:60:21:e4:4a:1d:1a:b1:5e:7a:6b:5f:10:f3:ac:b2:01:
57:cf:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:52 2024 by rpki-client on console-ams.rpki-client.org