Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/2vUzxj6T-ZJD9fuqP_UkHqhiyiQ.roa
File: 2vUzxj6T-ZJD9fuqP_UkHqhiyiQ.roa (raw, json)
Hash identifier: HnPct6IXrcHnIksaRwYbAXR87En8xJCQfTb2oDZRk8I=
Subject key identifier: DA:F5:33:C6:3E:93:F9:92:43:F5:FB:AA:3F:F5:24:1E:A8:62:CA:24
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 018CCA99CC7D05D5A21C413183759231F46F
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/2vUzxj6T-ZJD9fuqP_UkHqhiyiQ.roa
Signing time: Tue 02 Jan 2024 14:35:26 +0000
ROA not before: Tue 02 Jan 2024 14:35:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202005
IP address blocks: 185.26.136.0/24 maxlen: 24
185.26.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:cc:7d:05:d5:a2:1c:41:31:83:75:92:31:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Jan 2 14:35:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf533c63e93f99243f5fbaa3ff5241ea862ca24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:c1:20:ca:1f:91:de:10:c0:ec:bb:b2:64:
e9:7d:08:cd:94:a5:f9:15:91:05:cb:1d:f2:c5:e0:
f1:4c:89:2b:e3:e7:4e:3d:c1:d8:a6:05:0b:d9:c0:
46:c0:91:b1:73:5a:74:1c:45:fc:43:96:c4:27:87:
d1:aa:bc:f7:60:6f:92:7c:4d:6e:aa:37:bf:f0:c5:
6c:02:3f:28:9c:53:3f:a5:4d:c2:c1:a3:3b:1d:ea:
07:73:5d:3d:21:36:45:2c:fd:87:94:b7:cb:2c:99:
e1:75:02:ac:0d:52:d6:6b:d6:8e:fe:e6:c9:4c:42:
0b:0b:f7:3b:cd:85:6d:44:88:62:dd:ef:ac:07:d3:
18:fe:b6:83:89:ab:46:19:3c:15:84:36:ff:07:88:
08:ff:0c:3e:16:fc:09:e5:3c:6c:fd:1d:45:da:8b:
35:cf:c9:b4:c1:dd:8e:a7:09:e7:af:33:93:de:fb:
a0:6c:9f:33:4b:6c:24:ff:93:8a:45:60:72:c8:e9:
8d:34:09:7d:69:ef:1f:92:43:81:4f:8d:0e:e1:b7:
b0:9e:e1:bb:7d:a4:e5:1b:8d:e1:6c:14:bb:9b:cc:
05:69:91:42:b5:06:87:bd:39:9b:23:6b:b9:df:3d:
80:75:ee:c4:d8:bb:58:2a:2a:79:5e:ff:e0:65:f0:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:33:C6:3E:93:F9:92:43:F5:FB:AA:3F:F5:24:1E:A8:62:CA:24
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/2vUzxj6T-ZJD9fuqP_UkHqhiyiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c1:1b:39:ba:e5:dc:74:0d:01:65:4e:c3:35:83:c9:81:52:
62:f3:c4:f8:d2:cd:2d:af:10:fe:4d:6c:ba:18:74:18:01:6c:
c7:8e:14:92:8a:c2:aa:3a:13:92:a6:b7:a2:db:81:4d:f6:88:
1b:cd:d9:c5:c5:26:8e:b9:8f:31:04:35:ec:ef:ce:6c:41:14:
d4:79:90:40:f2:d8:df:a2:4f:b2:d3:97:15:99:c7:8f:a8:a3:
2b:5f:42:8b:16:97:4b:a3:f4:d4:09:33:77:47:61:65:e3:a5:
93:56:a0:8d:3b:c3:be:68:55:aa:b0:12:14:1b:c2:4e:86:67:
c8:c7:7d:73:10:8c:17:c1:8b:cc:16:23:51:ba:f4:ca:21:f4:
e6:59:f4:e1:9c:92:77:82:a3:d1:f9:0d:d3:87:99:aa:c4:73:
a4:cb:ea:44:f1:28:b1:9c:07:a2:fa:ba:c8:f3:cf:be:f0:ac:
90:59:dc:e7:9a:68:37:aa:13:63:10:e6:3b:28:cb:af:dc:82:
31:02:d8:92:40:0d:b1:63:9e:1e:4e:fa:64:23:1a:fe:01:1a:
4f:b5:97:5c:0a:6c:e0:f0:97:1e:73:3a:70:6e:26:cf:57:9c:
3a:22:5a:47:47:43:b8:03:22:54:e7:cb:eb:7c:d2:4f:fc:48:
c2:25:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:35 2024 by rpki-client on console-ams.rpki-client.org