Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/vo8puqlaWL0K1N_HNafDLKK6SfU.roa
File: vo8puqlaWL0K1N_HNafDLKK6SfU.roa (raw, json)
Hash identifier: amk/uLNQzQY4e9zIBLF7DR3Np13lKEFS01t1o36L2pk=
Subject key identifier: BE:8F:29:BA:A9:5A:58:BD:0A:D4:DF:C7:35:A7:C3:2C:A2:BA:49:F5
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 018CC4930AB017C3221EC0490D5127A72F00
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/vo8puqlaWL0K1N_HNafDLKK6SfU.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30148
IP address blocks: 185.93.228.0/22 maxlen: 24
193.19.224.0/22 maxlen: 24
2a02:fe80:16::/48 maxlen: 48
2a02:fe80:21::/48 maxlen: 48
2a02:fe80:11::/48 maxlen: 48
2a02:fe80:15::/48 maxlen: 48
2a02:fe80:2010::/48 maxlen: 48
2a02:fe80:1010::/48 maxlen: 48
2a02:fe80:20::/48 maxlen: 48
2a02:fe80:13::/48 maxlen: 48
2a02:fe80:19::/48 maxlen: 48
2a02:fe80:14::/48 maxlen: 48
2a02:fe80:17::/48 maxlen: 48
2a02:fe80:12::/48 maxlen: 48
2a02:fe80:22::/48 maxlen: 48
2a02:fe80:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0a:b0:17:c3:22:1e:c0:49:0d:51:27:a7:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be8f29baa95a58bd0ad4dfc735a7c32ca2ba49f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:d5:26:85:cf:33:a3:a6:ec:93:ef:a4:0a:
2a:ac:da:51:b6:03:2c:07:38:00:1a:a6:91:20:81:
64:98:94:5c:71:5e:cd:46:f9:32:91:06:0b:a1:ac:
02:54:d3:cb:2d:31:1c:1e:0c:d1:fc:ff:89:2f:8d:
31:e9:6b:55:24:bd:b3:d3:02:c2:9a:d1:3b:4a:52:
52:fe:07:98:cb:14:56:30:4e:a3:e8:08:d6:1b:48:
a2:09:18:e0:fc:eb:fd:95:44:e6:ea:6d:18:bf:1a:
20:5c:ae:c6:95:f8:72:05:a3:e8:29:2b:e4:da:86:
fa:64:49:38:36:34:6e:e8:07:cf:29:e9:ad:90:4d:
ba:0a:e5:b1:c2:5a:4d:d6:9c:91:94:bb:e0:6c:63:
fa:f6:c3:8a:e2:d8:36:58:28:67:d0:c5:e1:dd:1e:
75:03:48:c1:75:14:c4:c4:d4:0b:74:3a:df:fe:d9:
cb:94:87:9a:ea:19:fe:f8:ba:14:0a:a9:87:99:1b:
de:32:83:74:ad:ae:4e:1a:8c:05:99:95:18:19:12:
03:3f:ed:95:29:2f:54:66:8e:08:0d:3e:cf:c3:53:
19:2a:69:90:5f:c1:94:d4:2d:f7:f2:7a:4e:37:68:
d4:45:4c:c8:75:25:f0:5f:ff:d9:55:af:f8:8d:e1:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:29:BA:A9:5A:58:BD:0A:D4:DF:C7:35:A7:C3:2C:A2:BA:49:F5
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/vo8puqlaWL0K1N_HNafDLKK6SfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/22
193.19.224.0/22
IPv6:
2a02:fe80:11::-2a02:fe80:19:ffff:ffff:ffff:ffff:ffff
2a02:fe80:20::-2a02:fe80:22:ffff:ffff:ffff:ffff:ffff
2a02:fe80:1010::/48
2a02:fe80:2010::/48
Signature Algorithm: sha256WithRSAEncryption
54:3e:79:7a:e3:c6:ce:34:0e:59:bd:79:3b:78:6d:56:e5:d3:
cc:4a:39:4a:32:2e:40:fa:f4:6c:68:7d:53:d9:1a:9c:40:46:
c4:1f:39:43:9d:b8:ab:8e:d1:68:68:38:6a:5f:7c:57:0c:11:
bd:80:71:7f:7d:cd:14:cd:be:d3:0e:25:08:b7:f7:8d:e5:ea:
a2:e6:ce:df:25:7b:22:5e:05:1d:5a:d8:e2:66:9b:8f:c2:3e:
37:f6:8c:62:78:19:ce:a9:11:16:e1:e9:cb:e7:1a:5c:fa:ce:
2f:c5:ad:87:05:cc:e1:63:f8:1a:fc:b0:cf:4e:1b:15:55:05:
53:9e:43:74:db:c9:26:65:a9:a0:d1:b3:8f:2a:86:f8:f7:05:
fd:01:6d:d8:59:1b:19:1c:ce:50:be:a4:d3:89:11:21:bd:4d:
a1:31:70:a3:5d:a4:52:bb:14:08:76:21:c0:38:3c:b4:da:0d:
6b:57:13:22:68:97:92:59:db:a3:3d:72:46:d6:36:35:eb:91:
81:fb:7d:11:f7:2b:a6:2f:2a:97:75:1b:65:22:11:20:33:15:
9d:f9:44:3a:d1:c2:6d:54:5a:8c:8e:82:b0:81:89:8e:1c:5d:
fc:6d:2d:65:96:46:29:95:c3:84:2e:f2:fd:4f:45:e5:45:03:
51:00:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 12:40:31 2024 by rpki-client on console-ams.rpki-client.org