Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/bGYXMPsCKvMeMNwk1LwdH3awgsY.roa
File: bGYXMPsCKvMeMNwk1LwdH3awgsY.roa (raw, json)
Hash identifier: VnvBHlu5mayO0Kb+NWQ5br5pgdNIEGL5g7FrJw6J2Eo=
Subject key identifier: 6C:66:17:30:FB:02:2A:F3:1E:30:DC:24:D4:BC:1D:1F:76:B0:82:C6
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 018CC26D11ABD19DB9179907CC49B1D3428B
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/bGYXMPsCKvMeMNwk1LwdH3awgsY.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213068
IP address blocks: 185.237.152.0/24 maxlen: 24
185.237.155.0/24 maxlen: 24
185.237.153.0/24 maxlen: 24
185.237.154.0/24 maxlen: 24
2001:678:da8::/48 maxlen: 48
2001:678:da0::/48 maxlen: 48
2001:678:dac::/48 maxlen: 48
2001:678:da4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:11:ab:d1:9d:b9:17:99:07:cc:49:b1:d3:42:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c661730fb022af31e30dc24d4bc1d1f76b082c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:11:73:49:bd:a7:92:e8:ba:52:ef:f4:65:
2d:72:b9:01:e7:eb:a3:3e:b4:f4:9c:37:bc:72:20:
c7:c5:5a:c8:a0:49:30:1e:1e:f3:28:d1:aa:8f:fe:
97:9d:17:1d:0f:59:f0:53:1e:49:99:28:c4:8c:b4:
dc:7d:d8:e9:9e:50:c0:0f:3a:c1:db:0d:5b:5a:91:
4c:c7:9b:54:48:48:a2:01:0a:f2:1b:96:47:99:a9:
56:17:8a:bf:56:e8:58:f6:39:46:f4:35:cd:18:b6:
18:e7:69:d1:84:56:45:a0:82:59:93:e0:4c:4a:72:
18:aa:07:55:09:32:19:c2:61:71:c9:a5:43:45:c1:
b8:4a:88:d8:83:bb:ac:c1:13:ea:cf:31:55:bf:4c:
d6:61:b3:c8:c6:08:df:f7:0a:18:9e:cb:5f:10:84:
05:03:e2:b0:5b:25:47:18:99:20:5f:c4:2a:03:1b:
84:25:90:67:a9:c4:db:de:07:12:4e:44:06:25:67:
74:99:7d:1b:43:0a:c9:43:95:97:5a:8f:ec:95:60:
a6:f1:c1:b0:17:84:77:f9:d1:bd:87:f0:c2:e8:6c:
31:03:1b:e8:0b:75:39:6c:83:f0:a7:be:5b:8f:a5:
31:1d:50:8c:89:bb:58:79:ed:41:65:78:eb:02:70:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:17:30:FB:02:2A:F3:1E:30:DC:24:D4:BC:1D:1F:76:B0:82:C6
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/bGYXMPsCKvMeMNwk1LwdH3awgsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.152.0/22
IPv6:
2001:678:da0::/48
2001:678:da4::/48
2001:678:da8::/48
2001:678:dac::/48
Signature Algorithm: sha256WithRSAEncryption
68:21:a6:3b:4d:7e:29:d2:fa:6b:38:07:74:b9:d6:db:aa:c0:
de:f1:cc:d8:4b:49:85:0c:3f:7c:05:0e:df:86:c0:71:c3:10:
ac:75:7e:97:86:5a:d2:bb:c6:dd:fa:2e:17:d7:db:00:50:9e:
93:6a:fa:12:e8:1a:ac:80:94:be:38:e6:43:ec:d7:12:a5:a3:
d6:a9:23:90:08:ee:15:59:8e:da:73:6b:7d:30:ce:b3:ba:02:
bc:46:1e:d7:9a:f0:44:49:6a:4e:99:7e:83:27:e9:41:47:62:
9e:db:ca:25:47:47:0c:ca:d1:8e:ef:7a:67:b1:c2:19:2a:9c:
f0:0b:c7:06:6e:85:ce:1b:19:f6:4a:85:2d:b1:3c:2a:c1:ed:
3e:cd:66:e7:6a:79:7d:ce:a3:cf:87:05:65:64:fa:8d:3c:e5:
25:c5:81:80:74:02:7a:82:bf:b1:a3:18:56:2b:25:a9:3d:7d:
cb:5e:11:1c:76:a3:47:fb:02:c7:07:71:00:fe:dd:82:f7:5d:
3b:fd:86:53:fe:d8:ee:1b:5b:81:16:5e:6f:0c:2b:fa:37:98:
c8:a1:c8:11:93:af:64:8a:ca:eb:dd:4d:df:6e:32:4c:5f:b7:
d3:2b:39:fb:42:85:c5:de:a2:ba:fb:23:3d:36:7e:82:ad:8e:
a3:a4:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:36 2024 by rpki-client on console-ams.rpki-client.org