Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/rXcrbHNIG9wGp2YCqEHSygWU7ko.roa
File: rXcrbHNIG9wGp2YCqEHSygWU7ko.roa (raw, json)
Hash identifier: PrA18qsN7tubObrms5v277PEKW7M+LzGRuEAtYNNRtg=
Subject key identifier: AD:77:2B:6C:73:48:1B:DC:06:A7:66:02:A8:41:D2:CA:05:94:EE:4A
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0190132C63FA92E2538F9A92803034A44C08
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/rXcrbHNIG9wGp2YCqEHSygWU7ko.roa
Signing time: Thu 13 Jun 2024 19:56:34 +0000
ROA not before: Thu 13 Jun 2024 19:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202561
IP address blocks: 185.200.36.0/22 maxlen: 24
198.145.118.0/24 maxlen: 24
198.145.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:2c:63:fa:92:e2:53:8f:9a:92:80:30:34:a4:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jun 13 19:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad772b6c73481bdc06a76602a841d2ca0594ee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a7:ba:5a:77:02:61:89:da:32:81:de:cd:91:
be:00:cc:ff:c6:e3:3c:82:66:3f:b7:44:bf:f3:57:
74:49:2c:90:c7:de:4d:62:15:6a:31:7b:6c:d5:47:
50:56:80:2a:00:27:f2:8b:d5:c9:75:25:16:12:c2:
9f:d2:1e:0d:31:4c:f3:19:04:cc:c2:9c:b2:ae:a7:
4d:07:85:21:80:04:1c:4a:e6:eb:14:2a:8e:c8:17:
43:7d:d0:c6:85:9f:55:1b:47:d4:e4:f4:8c:7e:d5:
59:ee:cb:72:d7:a4:33:38:de:4d:54:1d:12:0b:ad:
4d:20:18:de:70:3b:60:45:48:aa:4c:4f:66:e5:72:
9c:cd:fc:ac:82:d7:eb:8e:48:26:2f:fc:d9:bb:61:
28:3b:9e:85:d2:61:ee:09:d0:33:46:27:8a:12:7c:
17:28:cb:a0:72:eb:56:7b:13:4f:54:74:15:a1:1a:
a3:de:b6:54:d5:f8:ca:a0:56:de:b4:8f:23:8c:dc:
34:2d:d5:9a:bd:43:17:c6:d4:2c:0f:a2:0b:d1:ec:
09:4d:fc:f1:65:e6:59:9c:44:36:57:06:af:a4:96:
f4:2d:2a:88:8d:b5:76:ff:15:9c:77:24:c3:ba:66:
bf:4c:a4:92:43:f4:fb:ce:f0:7e:0a:63:3a:92:12:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:2B:6C:73:48:1B:DC:06:A7:66:02:A8:41:D2:CA:05:94:EE:4A
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/rXcrbHNIG9wGp2YCqEHSygWU7ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.36.0/22
198.145.118.0/23
Signature Algorithm: sha256WithRSAEncryption
80:65:47:68:1b:8a:eb:73:bf:7c:b3:de:cb:8d:23:8b:12:d1:
52:b0:52:1f:fe:66:6f:55:99:57:d4:b0:a7:b5:1d:15:e9:61:
51:14:d0:c0:bd:59:13:34:02:8f:cc:39:44:94:9a:2b:01:db:
f6:ab:d4:99:f0:99:ab:4b:86:56:39:f3:4e:16:c7:20:83:7e:
25:f4:02:9f:d6:90:4a:86:75:d1:d1:dd:53:c7:1d:3c:71:09:
52:2b:a1:6d:d3:31:b9:af:0a:23:79:f3:51:5a:d5:de:32:92:
23:a6:ed:f1:8c:27:2c:34:c9:45:e4:27:1f:3b:6e:89:f4:2e:
89:02:d6:29:46:fa:ce:ab:ad:62:68:fb:b1:4d:71:ea:c6:c1:
ad:66:8e:99:3b:40:23:6c:b3:61:9c:8a:ed:28:53:ca:52:78:
31:f6:a1:b1:06:dd:b1:8a:0e:e7:aa:bb:67:a8:b8:e2:e0:90:
41:e4:23:d7:4e:ba:5d:75:bc:1c:0a:d9:d3:fa:00:6e:93:f1:
66:15:78:46:f4:a3:5e:d1:27:28:75:94:39:b3:7c:e3:40:78:
8d:26:18:e4:fc:3e:ab:c6:6a:13:af:de:a4:af:36:50:85:66:
8a:da:d4:1b:3a:f8:de:20:72:4b:0b:b1:29:58:f0:db:07:0d:
8e:d8:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:49:20 2024 by rpki-client on console-ams.rpki-client.org