Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/0O7Twe2r1fydOKfu9ni1bOpXdtQ.roa
File: 0O7Twe2r1fydOKfu9ni1bOpXdtQ.roa (raw, json)
Hash identifier: YS/yzbHMCPkMo7y4Wr8Txe3bDnQWg0yjc6svGkXc1pg=
Subject key identifier: D0:EE:D3:C1:ED:AB:D5:FC:9D:38:A7:EE:F6:78:B5:6C:EA:57:76:D4
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 018CC3B72776A34506CD48A54E846EFB7334
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/0O7Twe2r1fydOKfu9ni1bOpXdtQ.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3215
IP address blocks: 185.42.233.0/24 maxlen: 24
185.42.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:27:76:a3:45:06:cd:48:a5:4e:84:6e:fb:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0eed3c1edabd5fc9d38a7eef678b56cea5776d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:7c:33:cf:4b:a4:73:90:41:db:3a:72:f5:
b2:2d:f1:3d:52:ae:40:f4:94:66:a0:19:44:a5:1a:
a3:7c:98:e5:d7:9d:63:93:04:f4:69:5b:74:21:8f:
01:67:e4:3c:1f:70:f4:d5:35:52:ef:5f:31:b3:4b:
30:2a:ce:39:58:30:e6:14:2e:f6:44:24:c0:c7:eb:
79:ba:52:d3:d9:61:6c:a0:6d:41:ba:ae:a7:2f:63:
f0:73:63:d9:5b:8a:a5:cb:4d:ca:c9:fc:5c:7a:cb:
ed:13:ed:b4:50:6a:61:3c:37:55:4e:5f:e4:a5:5d:
df:5f:50:e5:c7:71:02:40:b1:4f:be:ee:88:5a:94:
33:86:f8:cd:a3:22:0f:8a:57:56:cf:22:d3:7a:b6:
1a:05:ce:99:0a:3a:dc:bd:9a:c5:e6:69:28:b0:9d:
c5:04:5c:f7:db:e8:39:c3:e6:ef:d0:5b:1b:4e:43:
98:f8:af:09:b9:1f:b7:07:51:03:ea:53:2c:dc:c2:
fd:52:9e:5b:22:65:4b:21:55:0d:a5:6e:63:b8:ed:
93:0d:da:30:d5:59:a6:c2:fb:04:19:cd:10:dd:64:
71:49:32:75:be:bd:a4:fa:9a:16:67:04:be:14:c9:
e2:25:e0:67:dd:7f:b8:24:77:d0:ee:bd:e5:8c:a5:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EE:D3:C1:ED:AB:D5:FC:9D:38:A7:EE:F6:78:B5:6C:EA:57:76:D4
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/0O7Twe2r1fydOKfu9ni1bOpXdtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.232.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f8:95:14:16:6d:07:8d:3d:89:e8:e8:6e:16:17:d2:da:bb:
85:b8:84:fc:99:c9:04:f6:fd:1a:85:0b:64:1e:dd:e5:68:b8:
57:5e:32:72:2e:3b:c6:dc:da:c7:41:6e:da:a5:14:99:6e:e6:
74:9a:f3:78:3b:6b:3b:ce:66:6e:80:d8:c4:e3:35:b6:36:fa:
46:95:44:3e:21:a5:1b:b8:ab:c5:86:28:77:86:ea:01:60:5e:
c2:42:a5:2f:48:24:30:c8:75:9b:e5:5e:6c:26:dc:e8:5a:50:
a4:92:9b:e8:41:e6:84:5f:51:a4:94:5e:84:4e:7e:1a:70:bd:
10:83:89:ba:66:cb:e8:35:ed:4e:74:9a:0b:58:79:05:2a:4f:
9c:ac:e8:58:1a:a3:49:d8:48:7a:48:26:75:b8:66:1b:79:fb:
c6:35:0b:06:7f:62:d3:2d:9a:d8:4d:62:31:e4:f4:0e:4c:31:
13:53:bd:8c:54:eb:c0:22:51:b5:6c:72:92:44:7c:3a:d5:aa:
62:01:53:54:c2:55:c0:ff:aa:eb:29:38:c1:b2:a2:68:ed:3f:
d7:64:97:90:05:31:4d:9e:ec:93:8e:6c:5a:9d:14:65:88:a0:
2c:5d:26:e4:09:aa:db:45:3c:9e:2e:74:0a:b1:e3:8c:d7:5f:
54:10:9d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:27 2024 by rpki-client on console-fra.rpki-client.org