Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/KuZbHeb6Oi5sqDd-on6od8lfbEw.roa
File: KuZbHeb6Oi5sqDd-on6od8lfbEw.roa (raw, json)
Hash identifier: 1hwxrAcP5V4ILX42bINTqntD13MPVkSFHqOfJx1f/mI=
Subject key identifier: 2A:E6:5B:1D:E6:FA:3A:2E:6C:A8:37:7E:A2:7E:A8:77:C9:5F:6C:4C
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 018CC794684BEDF48A2DB135C56A160F842B
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/KuZbHeb6Oi5sqDd-on6od8lfbEw.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203221
IP address blocks: 185.141.248.0/24 maxlen: 24
185.141.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:68:4b:ed:f4:8a:2d:b1:35:c5:6a:16:0f:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ae65b1de6fa3a2e6ca8377ea27ea877c95f6c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:d0:c8:d3:8b:ea:1e:36:e3:51:9a:c8:cf:
15:7a:a8:01:cd:96:6b:fa:39:2e:d6:62:84:f7:55:
12:bd:f7:a1:2d:c8:f3:0a:b7:23:7f:e4:86:88:73:
25:a4:50:60:c8:87:4e:74:90:9f:7c:ec:cc:02:82:
b9:ee:22:5a:83:a6:6b:d8:91:42:61:6f:a8:62:83:
e8:b4:c9:55:2b:b9:94:89:5c:7e:98:62:80:ce:f8:
70:7e:c2:20:9a:79:17:f7:84:ae:dd:38:00:b3:19:
3e:7a:d1:8b:0d:20:76:2d:fe:86:e7:9e:50:27:6b:
58:6f:94:5b:d7:38:1e:7a:cf:e1:ca:f6:7f:bf:b0:
7b:f2:4a:a0:77:25:de:70:a2:dd:d6:34:75:e0:64:
0f:13:b7:4c:14:45:ea:68:a3:50:3d:69:af:a5:01:
64:5b:56:c1:ea:12:a5:70:78:5b:d5:a1:8e:1a:00:
36:75:b9:01:b9:b9:0c:c1:bd:13:de:72:9d:4b:e8:
d5:54:8f:f3:38:56:72:4a:0b:9f:ce:1d:39:f8:80:
d9:cc:ba:44:a9:29:cc:05:a5:cf:c4:8e:81:c7:41:
27:92:87:87:ba:ee:bc:c8:6f:3f:a0:1d:fc:37:5b:
ac:48:e6:0e:e8:b5:cb:e3:8a:7f:52:47:f7:0b:a5:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:5B:1D:E6:FA:3A:2E:6C:A8:37:7E:A2:7E:A8:77:C9:5F:6C:4C
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/KuZbHeb6Oi5sqDd-on6od8lfbEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.248.0/23
Signature Algorithm: sha256WithRSAEncryption
85:1c:46:b7:13:3a:b0:e9:8b:89:96:93:12:d1:9e:63:41:d6:
bc:83:73:40:d0:0e:c5:0f:85:06:33:a7:72:20:94:ca:12:68:
b7:55:d7:66:72:9e:b5:a3:b1:08:0a:09:d7:c1:b0:49:23:a2:
bf:fb:81:33:ad:b2:1c:1e:f4:73:88:10:77:0a:a7:f2:d8:db:
1b:3c:a8:ac:9a:b3:83:c6:86:f2:86:e1:a3:b2:63:e4:1f:43:
2b:e4:e7:82:1a:1b:3b:09:82:57:5d:2c:1a:18:85:4b:93:43:
f2:f8:e5:7c:17:73:4f:60:88:2b:ed:bf:fb:1b:b0:8b:ad:71:
60:ed:a0:89:64:04:29:69:2d:1c:65:a8:8d:db:68:37:21:42:
3c:20:ff:6a:59:69:39:0f:88:fe:21:c0:ee:b4:2a:8a:86:22:
7a:ef:0a:0d:7e:d3:76:0b:ec:b0:25:5c:f2:fe:5b:0c:0c:de:
7d:4b:fd:9e:a9:f9:f8:f3:42:e5:da:3b:ad:fd:03:d4:4b:e2:
69:85:70:a4:d5:29:81:e5:42:67:39:db:75:5f:d7:41:23:90:
ec:4b:40:84:cd:5a:08:f3:ba:c2:70:ab:22:eb:9f:82:00:2f:
01:a2:bd:36:df:28:19:88:73:fe:26:b4:22:84:c1:1d:84:1b:
68:14:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:56 2024 by rpki-client on console-ams.rpki-client.org