Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/2PgdO0M1s0eETxuYCOqGuvBKMJc.roa
File: 2PgdO0M1s0eETxuYCOqGuvBKMJc.roa (raw, json)
Hash identifier: H7be8bBQu3vuXAIdvAx0J5bHPhIMhVltGxO/P5mKjP0=
Subject key identifier: D8:F8:1D:3B:43:35:B3:47:84:4F:1B:98:08:EA:86:BA:F0:4A:30:97
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 018CC64AA110C9219FA29115ABF7F101B077
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/2PgdO0M1s0eETxuYCOqGuvBKMJc.roa
Signing time: Mon 01 Jan 2024 18:30:28 +0000
ROA not before: Mon 01 Jan 2024 18:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42695
IP address blocks: 185.141.152.0/22 maxlen: 22
2a07:2440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a1:10:c9:21:9f:a2:91:15:ab:f7:f1:01:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Jan 1 18:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f81d3b4335b347844f1b9808ea86baf04a3097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:7f:10:96:36:a6:62:53:21:5a:48:2e:8c:
87:75:39:43:b5:de:95:d6:c2:dd:97:f9:1c:24:84:
b7:b1:90:37:36:fd:c2:5a:d4:69:ec:bb:78:fb:cc:
54:b8:6d:11:01:32:e8:87:56:69:4d:4d:31:65:b4:
76:58:2a:7d:ed:14:a6:c7:98:a6:77:2f:20:8b:02:
33:c7:5b:dc:83:ea:96:a0:67:8e:44:c4:ac:ee:69:
07:11:62:6a:cb:67:7c:31:1a:37:89:d6:02:5f:6f:
38:99:f0:ba:4c:0b:1a:48:bf:99:a9:20:58:b1:4f:
39:cf:af:a0:ba:09:61:0c:6f:d5:52:61:3f:fd:cf:
9a:5d:3b:67:85:32:38:b4:a8:04:fa:f6:1d:3b:80:
6a:dc:8a:7e:1a:46:95:92:8c:da:a5:9a:8c:bc:7f:
59:3b:d8:43:50:a5:85:f9:82:44:b8:81:17:db:7b:
4c:24:5e:30:3b:19:77:a5:ee:c3:b7:84:62:dc:bf:
c6:f1:ab:fa:27:f9:ca:49:f1:1b:22:e8:48:a1:cb:
56:dc:de:4b:34:6b:8b:37:0d:d0:f1:01:c9:40:17:
92:7c:57:ea:a0:9a:07:22:c9:27:17:69:d9:74:0e:
d1:c8:d8:43:e3:8d:f5:e1:3c:bd:e6:68:b3:6a:b7:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:1D:3B:43:35:B3:47:84:4F:1B:98:08:EA:86:BA:F0:4A:30:97
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/2PgdO0M1s0eETxuYCOqGuvBKMJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.152.0/22
IPv6:
2a07:2440::/29
Signature Algorithm: sha256WithRSAEncryption
15:0a:2d:3c:6f:c2:da:14:2f:a2:2c:b1:b7:21:c7:fc:fb:09:
ee:9c:a2:08:38:da:e2:cc:2c:c2:3f:30:7a:4b:8c:13:f7:eb:
bd:5f:c7:d8:ac:cd:85:02:ea:eb:2f:ba:46:7e:ae:53:99:96:
98:9d:e9:94:52:9f:33:48:31:ea:82:06:a2:0e:a9:5a:03:82:
7c:94:d6:25:99:e5:fa:44:af:ab:50:20:57:f7:f3:65:8e:82:
f7:b4:db:ab:89:19:13:51:7a:cc:33:63:6a:33:77:8a:c6:8a:
58:07:f3:0a:51:14:19:fb:b1:64:e5:d6:16:9a:57:39:51:ad:
73:ca:58:60:e0:d2:d4:2e:cf:f1:1a:08:c8:de:91:6c:25:8f:
fa:00:22:c4:3c:97:6c:a6:c6:70:f6:aa:70:eb:3d:57:3e:92:
f4:ef:c3:b9:2b:3d:2f:6e:69:bb:ad:64:11:82:99:fc:0a:6c:
20:34:44:7f:22:28:00:38:86:58:cf:47:b8:89:23:48:23:be:
8d:d9:c9:f4:2d:64:7c:cd:76:d4:bf:04:d5:43:f6:1f:b7:60:
17:d3:cb:7e:f8:f6:8a:73:1f:24:11:91:aa:b1:db:ef:06:bc:
8a:0d:bd:8c:23:24:3e:31:28:72:c0:0b:7c:6f:a8:22:46:12:
51:3e:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:10:38 2024 by rpki-client on console-ams.rpki-client.org