Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/gn52MfuRmi0pTJTc512HTtDILqE.roa
File: gn52MfuRmi0pTJTc512HTtDILqE.roa (raw, json)
Hash identifier: GvIV/OJLtxSXR7rlggxSoTma5886O7dG5+cnCdsOZQM=
Subject key identifier: 82:7E:76:31:FB:91:9A:2D:29:4C:94:DC:E7:5D:87:4E:D0:C8:2E:A1
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 018CC64B0159464BE6098C835DFF476CF272
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/gn52MfuRmi0pTJTc512HTtDILqE.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202735
IP address blocks: 185.155.238.0/24 maxlen: 24
185.155.237.0/24 maxlen: 24
185.155.236.0/22 maxlen: 22
185.155.236.0/24 maxlen: 24
185.155.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:01:59:46:4b:e6:09:8c:83:5d:ff:47:6c:f2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=827e7631fb919a2d294c94dce75d874ed0c82ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:af:ae:a5:6d:d0:79:f8:ac:ed:f8:ce:b1:
b2:04:0b:7a:96:75:4e:ca:e5:b5:4c:ae:32:13:00:
71:d8:50:c7:87:b5:96:5b:5d:02:d0:6c:32:30:22:
2c:b0:56:46:aa:f4:91:92:9f:72:3c:e5:6b:ab:dd:
ff:9a:75:3c:90:4a:97:fa:0d:ef:e3:5d:a4:41:49:
eb:bb:35:db:9e:3c:ef:ae:90:1b:52:99:36:e4:db:
1f:62:99:18:4c:7b:7a:0a:83:54:2c:d0:b5:3d:46:
6c:34:7f:73:eb:c2:6b:d9:24:82:6b:3b:7a:cb:36:
df:a8:f9:f4:76:ff:67:0c:7f:80:1a:e7:f8:99:26:
c6:7a:31:f9:da:73:41:dd:d4:40:f6:41:85:5f:59:
d0:40:28:71:a6:68:95:49:23:17:1e:b1:93:fa:57:
4e:6b:5e:41:21:12:43:bb:70:dd:88:9a:0a:ac:2f:
c9:0e:c9:18:27:e3:b6:52:cd:0b:92:5c:2e:1d:49:
f0:b0:89:7f:d0:ab:65:0c:6c:d9:76:91:d7:85:25:
e1:bf:66:06:13:47:8e:67:34:66:23:5c:6b:7c:e4:
3b:4b:3c:90:c7:9b:6c:a2:22:cf:b8:2c:92:3a:7d:
e5:c7:f0:35:9b:0a:49:9d:08:fe:26:d9:a3:f6:6b:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:76:31:FB:91:9A:2D:29:4C:94:DC:E7:5D:87:4E:D0:C8:2E:A1
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/gn52MfuRmi0pTJTc512HTtDILqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:da:14:39:88:34:96:09:86:e1:9d:f9:f9:b0:b9:c2:28:d8:
64:b8:c2:b9:aa:a2:15:d4:4e:0b:a1:cc:64:e4:84:3f:f5:ad:
8c:1b:e6:83:8e:f0:75:84:fc:17:c9:65:50:2e:6b:90:fd:bf:
cb:18:65:10:c3:75:11:f5:31:70:d2:8b:16:92:93:d4:e9:2e:
f9:ba:fa:d8:8e:ee:2a:46:34:44:93:f1:d3:d6:70:41:87:45:
71:43:87:53:f9:4f:4c:dd:30:e9:6a:c6:e7:06:ef:47:15:11:
1f:b7:ec:3d:19:50:d2:e5:ac:fd:78:ed:0f:d5:03:73:4d:14:
6d:d2:b5:ce:67:fa:7d:84:83:4f:56:53:b0:f3:e3:96:ad:3b:
37:4e:fe:9a:f2:c6:b0:07:c8:52:31:3d:5b:33:e1:9b:1b:df:
67:9a:ad:7f:b3:34:43:8a:00:54:3b:7c:b7:12:67:e2:1d:46:
15:87:a0:14:64:2a:85:50:89:eb:d9:b0:76:55:47:3f:4f:b4:
11:d1:49:a3:4f:10:6b:f0:90:a7:7e:a7:25:7d:01:96:7f:ab:
6d:ff:31:c8:d1:a6:88:83:1b:14:71:d8:cb:38:bc:02:ad:14:
4a:71:88:b9:df:63:ea:01:9d:a4:f4:8f:1f:67:eb:ad:6e:d9:
fb:10:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:19 2024 by rpki-client on console-fra.rpki-client.org