Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/q4J3dhxiudlZHYxoLN0Ed93d50Q.roa
File: q4J3dhxiudlZHYxoLN0Ed93d50Q.roa (raw, json)
Hash identifier: mXQz6eL6JwM8f/sbta9e7txX1hsF8dS8Z04OEW27AHw=
Subject key identifier: AB:82:77:76:1C:62:B9:D9:59:1D:8C:68:2C:DD:04:77:DD:DD:E7:44
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 018CC2DABE06288D0CC3E01A63EC0D062FFA
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/q4J3dhxiudlZHYxoLN0Ed93d50Q.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202970
IP address blocks: 185.148.232.0/23 maxlen: 23
185.148.232.0/22 maxlen: 22
185.148.234.0/23 maxlen: 23
185.148.234.0/24 maxlen: 24
185.148.235.0/24 maxlen: 24
2a07:62c0::/29 maxlen: 29
2a07:62c0::/30 maxlen: 30
2a07:62c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:06:28:8d:0c:c3:e0:1a:63:ec:0d:06:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab8277761c62b9d9591d8c682cdd0477dddde744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:c0:74:52:df:09:40:ec:35:71:5a:1b:08:
4f:92:7e:e4:0f:98:48:cd:c8:dc:7a:19:fd:83:15:
6e:ea:80:ac:0a:c8:56:23:84:55:70:c7:1e:1a:8e:
4a:ca:12:06:4a:fd:64:03:fa:dc:09:94:d8:9a:f7:
53:aa:e6:36:ec:67:35:a7:96:ac:bc:7b:e3:54:20:
c0:c7:d9:89:f8:68:4a:13:8b:7c:1d:da:33:09:39:
a2:d9:35:2d:e2:0c:e3:d9:e7:e4:04:7a:be:d2:83:
30:cb:38:8a:74:f4:dd:dc:78:da:3c:03:b2:d7:ce:
be:94:80:c7:a3:24:4d:ed:3f:21:ad:dc:f3:5c:89:
ee:53:5c:f7:53:fb:62:e9:86:80:0c:82:a7:6f:40:
9c:a0:a4:af:d5:06:21:59:16:f5:63:60:b3:f3:97:
ea:bf:cf:e1:ba:6d:a1:b4:93:cb:84:c4:4f:5c:a1:
1a:b1:2b:6f:07:be:c0:a8:51:30:d2:db:29:9f:89:
b4:9e:dd:58:2b:46:27:37:6c:a5:9a:aa:a2:d8:9e:
41:19:97:38:88:45:21:95:f8:76:88:16:2d:24:90:
c1:27:dd:00:82:13:35:e7:ff:cb:8c:21:be:ff:9c:
a7:93:3e:6e:16:39:29:73:97:07:59:82:fc:a6:b6:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:77:76:1C:62:B9:D9:59:1D:8C:68:2C:DD:04:77:DD:DD:E7:44
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/q4J3dhxiudlZHYxoLN0Ed93d50Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.232.0/22
IPv6:
2a07:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
17:fe:36:3d:d8:0a:c0:b3:70:0f:52:59:2e:ec:1f:3e:4e:96:
3f:a8:94:40:ee:28:5d:6d:97:6b:da:c8:a7:4e:31:89:26:8e:
76:32:66:2c:34:09:b8:ba:88:ac:b9:ca:cf:5b:8a:3d:cb:93:
04:88:ab:af:d3:37:6e:7c:47:72:46:44:ba:be:6f:de:25:d3:
0d:bf:9c:c4:43:6d:7c:3f:a7:3d:9a:6e:75:07:16:75:81:d2:
b0:26:86:8d:e7:f3:ab:4c:82:27:04:48:a5:80:83:9e:d2:87:
da:b4:2e:6f:6b:af:ad:ba:6c:f0:ac:56:8b:3a:60:67:bb:e4:
8d:bb:d5:fc:d5:da:7d:0b:9f:6d:3e:e6:82:76:3d:99:2c:93:
f5:5f:36:16:8a:06:9a:44:00:20:7c:5b:9c:ae:05:29:45:9f:
53:1b:c3:eb:50:05:74:cc:2a:79:2d:c4:0d:d7:52:f6:ac:f0:
df:4b:32:84:eb:a4:8a:48:98:1e:b0:62:c1:8c:c4:b6:a5:54:
fa:bd:3c:9f:26:76:ae:a2:3d:24:9a:87:07:33:1b:30:2a:97:
7d:45:eb:ca:d6:c2:98:7d:c7:f6:39:75:94:89:14:c3:a6:98:
10:af:12:f1:a0:7c:e0:f5:2f:3a:ff:9a:8c:c2:5b:99:8e:b7:
80:86:8d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:37:26 2024 by rpki-client on console-ams.rpki-client.org