Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/oJ2FVBoWxTkWX5m99HQyi_LgJsc.roa
File: oJ2FVBoWxTkWX5m99HQyi_LgJsc.roa (raw, json)
Hash identifier: UPHjOzjK9jLJLj9OSVOEJNcm4+JahIhITIb4Zx9ej+c=
Subject key identifier: A0:9D:85:54:1A:16:C5:39:16:5F:99:BD:F4:74:32:8B:F2:E0:26:C7
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018FA0A201285056742478E46FDC3FFDABC6
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/oJ2FVBoWxTkWX5m99HQyi_LgJsc.roa
Signing time: Wed 22 May 2024 14:08:42 +0000
ROA not before: Wed 22 May 2024 14:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:a2:01:28:50:56:74:24:78:e4:6f:dc:3f:fd:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: May 22 14:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09d85541a16c539165f99bdf474328bf2e026c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:82:80:a3:72:29:bf:dc:b0:22:1d:fd:65:
ac:53:5e:76:af:05:09:cb:b2:39:e0:dd:73:1a:be:
a9:c6:2f:c0:9e:75:0a:ad:7d:ab:87:1b:9d:05:c0:
56:9b:00:bf:ea:8d:47:17:2a:40:9e:f4:8e:08:ad:
28:11:b6:f7:ae:3a:51:41:62:09:b8:ce:7e:45:da:
05:2e:7d:87:1e:fd:c6:48:a6:dc:88:97:78:48:6a:
39:a4:8b:64:f6:ad:af:11:ae:80:8b:53:55:21:e2:
94:a7:36:9a:60:38:d7:6d:fb:c5:e2:61:0c:39:6a:
28:18:a0:de:92:e1:26:4e:dc:33:bd:a1:12:10:62:
44:7a:26:cb:97:0f:d3:a1:bd:a0:b8:63:c5:dd:15:
b3:47:a8:d0:05:4a:10:f3:66:82:fa:17:02:92:42:
88:26:20:2b:69:76:c4:be:d2:2f:27:9d:bd:f1:94:
f4:90:d2:75:f2:f0:51:52:de:62:ae:ab:b9:34:27:
d8:bc:86:29:5f:d6:e8:28:29:46:d4:9a:45:e6:32:
c3:86:e0:3a:d6:9a:c4:1e:f4:d2:ca:20:b8:48:cc:
e8:88:bb:63:9f:b3:bd:26:e8:b0:a5:03:0b:8c:a5:
0a:81:85:b6:df:42:c6:a0:c8:f4:12:fe:44:40:24:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:85:54:1A:16:C5:39:16:5F:99:BD:F4:74:32:8B:F2:E0:26:C7
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/oJ2FVBoWxTkWX5m99HQyi_LgJsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.245.0/24
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
1f:26:5a:d0:39:c6:92:45:6c:d7:3d:1f:7d:94:c2:56:b0:ee:
b8:95:b4:d1:67:9a:fb:7a:ea:30:60:cf:a4:75:13:d8:19:c3:
d3:28:30:ee:18:08:f0:7a:ad:08:b3:31:a1:62:53:c5:0b:9d:
01:cd:c2:34:a5:05:ed:90:63:f9:d6:a8:22:98:3e:13:49:c9:
04:42:86:5d:6f:10:03:fe:b1:8c:64:62:c1:6b:c9:19:0a:4d:
c1:4c:25:f3:40:20:60:95:21:cc:78:76:2b:e1:79:01:54:67:
19:28:6e:fb:46:26:69:8c:e0:a1:ef:be:68:b5:0b:44:86:2c:
9e:87:3f:2d:d4:c4:a2:ed:2c:1e:ac:dd:11:22:37:c4:21:e5:
8f:87:b9:d2:9e:e6:dc:b7:7a:31:75:d1:d9:df:4a:bb:02:b9:
17:ba:5d:8a:ff:e2:ab:e9:d8:af:3c:72:27:38:0a:a4:2e:d4:
29:04:f1:8a:cb:2f:84:7b:00:cb:af:55:4f:29:dc:b2:69:ca:
a1:8b:d4:34:b2:9f:ec:96:af:79:17:32:ef:ff:ed:64:98:cf:
a6:8f:78:03:72:b5:67:92:b3:dc:11:ac:2a:8e:ac:16:36:ca:
9b:fc:16:8d:15:4f:8e:c9:fd:7c:b9:55:43:18:de:f9:10:1d:
4d:c0:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 03:54:15 2024 by rpki-client on console-fra.rpki-client.org