Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/I7EJChINvuemdodbMdFrbOw59wM.roa
File: I7EJChINvuemdodbMdFrbOw59wM.roa (raw, json)
Hash identifier: NrUM1MJs60AG6YvsitzqPG4Y0w0qlqPBGJsUmHE6sEk=
Subject key identifier: 23:B1:09:0A:12:0D:BE:E7:A6:76:87:5B:31:D1:6B:6C:EC:39:F7:03
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 018CC727391DB265A29A2F9EFD37EC36E644
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/I7EJChINvuemdodbMdFrbOw59wM.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49709
IP address blocks: 185.172.180.0/22 maxlen: 24
185.193.0.0/22 maxlen: 24
2a0b:1d00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:39:1d:b2:65:a2:9a:2f:9e:fd:37:ec:36:e6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23b1090a120dbee7a676875b31d16b6cec39f703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:e1:e8:ac:48:fc:59:6b:1f:3a:68:a2:24:
c0:1f:a1:e3:88:00:84:af:3c:ae:bf:8d:ab:7a:d9:
13:27:cf:39:91:e1:90:99:a7:8a:03:ba:49:bd:35:
a2:23:d4:21:ec:a2:f6:29:14:0a:76:2f:aa:ef:11:
4e:a1:4a:3e:92:83:4e:56:c6:e8:02:c1:bf:6f:87:
a8:50:1a:55:67:c5:ff:e6:d4:91:52:87:d2:0e:0e:
f1:e8:9a:1c:52:5e:b4:31:f1:23:55:b5:70:44:eb:
b8:1c:4c:86:95:7a:a1:0d:bd:3d:b8:8b:2e:71:e8:
82:c2:13:ab:02:93:a5:dd:7c:51:25:ba:53:59:21:
71:18:c2:fe:4e:1d:7c:cd:7b:4e:26:bf:3f:ef:af:
fc:fb:ba:2f:c6:d0:9f:79:56:9b:8b:98:7d:1a:0f:
01:27:37:50:ed:91:e4:ee:d2:a0:aa:44:b0:88:be:
36:2d:ec:5d:56:c9:b4:2e:cf:02:1d:0b:db:b6:b3:
b0:8b:fa:e6:e6:e8:93:96:92:e9:f6:8b:05:5d:b1:
92:0e:cc:21:95:76:60:9f:c5:ab:f3:cc:ac:84:10:
1f:88:6d:08:75:3f:92:1d:de:3f:f9:0c:40:55:43:
05:c8:1f:50:3a:0a:a9:bc:85:5a:01:2f:34:4d:24:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:09:0A:12:0D:BE:E7:A6:76:87:5B:31:D1:6B:6C:EC:39:F7:03
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/I7EJChINvuemdodbMdFrbOw59wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.180.0/22
185.193.0.0/22
IPv6:
2a0b:1d00::/29
Signature Algorithm: sha256WithRSAEncryption
3a:15:4c:29:61:13:f5:70:1b:23:d6:97:b3:5e:b4:ca:b1:28:
0d:fb:c2:be:a0:a9:84:ea:90:66:fa:e7:28:42:1a:e4:e7:9a:
74:99:a7:97:60:58:63:db:92:7d:8e:7f:f2:c4:6d:f6:de:c7:
10:4c:97:f3:39:96:07:cc:6f:f7:9e:99:e1:bb:13:aa:d0:d6:
89:81:bb:03:94:6c:3a:e6:c4:74:7a:80:77:d6:f0:31:c7:9e:
6e:8d:de:65:35:20:b9:ad:e9:21:fc:e4:d6:ee:e1:9f:22:cd:
f0:a7:26:cb:47:39:83:64:74:60:57:42:06:3b:78:39:71:f0:
76:da:6e:90:40:37:5e:00:9b:a1:72:f1:80:9e:d1:a7:ca:21:
bc:8a:91:61:47:30:62:f2:f2:93:87:f8:e2:60:8f:f2:bd:e9:
2e:f0:cf:05:88:d6:30:a4:11:9f:3b:aa:c8:a8:eb:d1:46:8f:
4e:e6:77:27:a1:19:b2:00:fe:ad:10:c4:0f:6a:3a:d5:39:84:
f1:9a:85:6c:b5:9a:62:88:57:56:63:6b:c9:ef:f4:09:01:de:
bb:10:82:d9:b2:bc:b4:15:2e:08:0e:bd:a6:36:83:c4:0d:5d:
88:97:b7:11:d8:b2:ce:d9:9d:7d:9b:e7:c3:53:fa:98:5b:2a:
62:24:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:26:43 2024 by rpki-client on console-ams.rpki-client.org