Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/n3w6qu823sxf8Bha7ZDY_gPi7JA.roa
File: n3w6qu823sxf8Bha7ZDY_gPi7JA.roa (raw, json)
Hash identifier: eMFuo0S951X+CJxQhqBLxdTCjIRsSD7fV6BDqFJzhTg=
Subject key identifier: 9F:7C:3A:AA:EF:36:DE:CC:5F:F0:18:5A:ED:90:D8:FE:03:E2:EC:90
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 018CC86F18DC4245682E8A6D2807E5A04AE5
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/n3w6qu823sxf8Bha7ZDY_gPi7JA.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60558
IP address blocks: 185.56.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:18:dc:42:45:68:2e:8a:6d:28:07:e5:a0:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f7c3aaaef36decc5ff0185aed90d8fe03e2ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:eb:e8:c3:d9:68:d5:1f:6d:d6:5e:87:e3:
ac:97:22:8e:3b:4a:d4:70:54:af:b2:c7:26:e1:5d:
40:a4:8c:34:61:b8:2a:17:a6:d8:81:aa:6d:89:1a:
7d:67:34:2d:1f:73:fe:96:3e:79:1a:5a:2a:16:02:
af:69:24:5f:8b:2c:55:e4:60:42:ce:e4:9c:11:b0:
3b:12:3c:41:96:b3:00:f6:44:9f:5f:5d:3a:15:62:
3c:2c:43:9d:0b:95:6a:58:57:fc:c6:e5:11:b8:cf:
c3:0f:1d:f3:a9:63:b8:78:3d:2a:d9:37:3d:1f:7b:
fb:09:05:65:1f:92:2e:56:ac:61:23:64:6a:25:eb:
0f:62:2b:f5:73:37:14:7e:b5:38:66:7c:9d:89:ee:
85:1b:90:c7:9d:18:0c:15:61:9c:8c:29:22:aa:6a:
55:0e:b1:ba:5e:c7:04:76:b9:63:9d:77:d7:a7:ec:
2f:89:ec:1a:98:fe:e2:52:a3:64:75:63:f4:1d:15:
3b:fd:fc:7a:81:97:a3:55:67:f4:2b:d7:ad:d6:9c:
f1:97:d5:be:41:fe:6e:08:80:3c:6e:58:e4:42:2c:
49:01:15:29:d1:79:6b:61:fb:d1:1b:f4:d8:4a:b8:
d2:80:01:d5:34:5b:20:5f:65:03:8a:46:b9:cc:41:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:3A:AA:EF:36:DE:CC:5F:F0:18:5A:ED:90:D8:FE:03:E2:EC:90
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/n3w6qu823sxf8Bha7ZDY_gPi7JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.136.0/22
Signature Algorithm: sha256WithRSAEncryption
44:20:a8:d6:0a:65:34:54:1d:7f:16:6a:4f:76:ca:c3:30:5a:
e8:c9:df:82:88:71:92:aa:a9:12:54:8f:d1:81:b9:c2:37:0c:
78:d2:5f:81:1a:c6:32:aa:67:25:95:ce:01:97:fe:da:53:0e:
d6:95:c3:65:37:f0:3a:6b:cd:ba:50:64:7d:25:19:ca:db:f8:
f1:34:6b:a6:59:23:e9:64:59:53:8d:73:be:d8:0c:e1:8f:bc:
bc:c5:42:46:d8:4c:83:6b:f5:0c:9d:cc:7b:5c:fa:64:e3:c3:
b0:82:4f:bd:66:1a:63:63:23:ff:cd:a4:1c:d2:3b:18:e7:ec:
3a:44:ea:6f:1c:c2:65:86:5d:5e:96:8f:cc:44:82:8d:9e:03:
e8:1a:4f:38:06:63:af:de:fc:f4:66:18:e6:f6:b2:a4:ea:b5:
31:ca:31:05:3b:e5:94:47:85:21:f7:60:58:87:a9:3a:40:5e:
f3:fb:2b:8e:05:c2:0a:37:d9:92:6a:c2:17:9b:1b:09:99:55:
1a:12:d7:34:8f:83:28:8e:58:ec:ab:06:ea:67:78:94:64:fa:
4f:95:32:28:cc:45:b9:d2:ca:11:10:ce:66:f1:51:88:77:e4:
83:34:79:d0:fc:78:fa:43:0b:36:e9:4f:6f:8e:1e:f9:a8:50:
e6:03:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:11 2024 by rpki-client on console-fra.rpki-client.org