Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Dm4lpiACFjPqryxH8KxAztRfvus.roa
File: Dm4lpiACFjPqryxH8KxAztRfvus.roa (raw, json)
Hash identifier: nYQshXLkd4/0UMv/V70oFmdenrOTOF2ReiR2NBCND38=
Subject key identifier: 0E:6E:25:A6:20:02:16:33:EA:AF:2C:47:F0:AC:40:CE:D4:5F:BE:EB
Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial: 018CC6B8B535BB18165FAEFA16CC4C96490E
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Dm4lpiACFjPqryxH8KxAztRfvus.roa
Signing time: Mon 01 Jan 2024 20:30:42 +0000
ROA not before: Mon 01 Jan 2024 20:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206602
IP address blocks: 185.181.238.0/24 maxlen: 24
185.181.236.0/22 maxlen: 22
185.181.239.0/24 maxlen: 24
185.181.236.0/24 maxlen: 24
185.181.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b5:35:bb:18:16:5f:ae:fa:16:cc:4c:96:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Validity
Not Before: Jan 1 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e6e25a620021633eaaf2c47f0ac40ced45fbeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:3b:f2:1b:2a:f5:55:c5:8b:45:70:48:ea:
6f:f2:a9:03:c9:21:44:54:e4:e7:17:01:be:31:60:
ca:67:66:8a:68:34:7b:fb:7d:10:49:15:f7:cc:1f:
94:fd:a3:82:03:cf:87:8c:ba:b9:06:74:8a:71:71:
23:8d:ba:31:28:97:e2:a7:62:f1:ac:3f:74:57:a9:
82:0e:05:4c:ad:31:c8:91:79:d4:be:df:c1:bb:e7:
94:2f:1a:5b:b5:9e:81:a9:53:02:f0:fa:dd:72:d8:
18:2c:99:e7:31:5a:34:f4:eb:60:5f:67:ec:5c:6d:
a8:9d:70:b5:49:e1:26:82:59:35:99:7d:1d:67:d0:
16:96:58:46:d8:de:81:91:1b:aa:f6:bc:ca:ad:10:
24:5d:36:ff:25:6f:0f:11:e1:c9:fa:c5:16:1c:7c:
03:b6:fc:34:2b:bf:dc:8c:08:00:85:12:5b:bb:78:
34:d4:80:d1:f0:22:61:d4:ae:95:cf:f8:51:b9:fa:
0f:ad:0a:08:82:0a:c9:e4:18:c7:45:74:de:9f:53:
17:5b:39:15:09:98:7e:35:13:00:df:f4:10:ca:7f:
1f:34:96:c6:4a:11:a2:18:f5:c8:d6:cd:4e:53:fc:
d2:b0:49:aa:d3:10:6e:52:6c:5f:d3:c0:04:22:b8:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:25:A6:20:02:16:33:EA:AF:2C:47:F0:AC:40:CE:D4:5F:BE:EB
X509v3 Authority Key Identifier:
keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/Dm4lpiACFjPqryxH8KxAztRfvus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:81:cc:57:42:9c:d4:a9:7f:e2:fd:3f:6d:eb:d9:94:ea:71:
54:3c:a5:a0:8b:f7:68:ff:d2:79:92:2e:6a:a1:3a:50:95:b0:
bc:d9:72:29:c6:95:74:8c:e8:53:5d:e7:8d:ff:13:9b:5d:57:
27:fa:ac:70:93:2d:50:b8:f5:ed:3a:b7:e8:c0:9e:f8:87:8b:
f1:1b:36:0a:dc:17:51:9a:12:91:fa:71:f2:f7:50:49:6e:c8:
d5:a2:28:0b:24:8d:09:ec:30:3e:59:fb:54:79:02:ed:68:e4:
a0:2a:36:8d:5c:28:b5:af:cd:fa:95:35:8c:8f:64:03:54:fa:
da:a2:a3:52:c0:d0:72:68:d8:17:2e:6e:2f:37:70:14:0a:5f:
fe:70:78:ad:aa:b6:0e:48:d7:d5:68:9e:85:b2:a1:9f:65:54:
f5:5b:c3:92:6a:c7:4e:ab:87:74:b3:da:0f:91:48:b6:c5:7d:
ff:d0:1a:68:d8:e7:54:a0:93:3c:8a:8d:4d:f9:84:a8:04:dd:
f7:e1:9a:c5:db:d4:d5:b6:fe:bc:8b:ae:70:ff:6f:52:ab:f4:
b6:07:7e:fc:26:e1:07:d4:c9:60:ea:d0:aa:ef:25:75:d7:5c:
52:fc:85:9c:9e:02:57:06:be:4a:29:d3:8b:c6:a6:f9:f5:42:
a5:5c:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:11:20 2024 by rpki-client on console-ams.rpki-client.org