Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/K8PoSbKBi_PkCHdQ9WHEl57SZok.roa
File: K8PoSbKBi_PkCHdQ9WHEl57SZok.roa (raw, json)
Hash identifier: G9XYUxccVko+3HNTLAsjihRkKEaojlL8Xg8RBqdEmVw=
Subject key identifier: 2B:C3:E8:49:B2:81:8B:F3:E4:08:77:50:F5:61:C4:97:9E:D2:66:89
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CCA2871C78B2B2362D055660CEF2B4D77
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/K8PoSbKBi_PkCHdQ9WHEl57SZok.roa
Signing time: Tue 02 Jan 2024 12:31:37 +0000
ROA not before: Tue 02 Jan 2024 12:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48944
IP address blocks: 185.243.50.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
178.239.144.0/22 maxlen: 22
185.212.50.0/23 maxlen: 24
178.239.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:71:c7:8b:2b:23:62:d0:55:66:0c:ef:2b:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 12:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bc3e849b2818bf3e4087750f561c4979ed26689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:78:58:7b:55:0d:73:fe:29:ef:16:7f:1a:
fa:75:14:95:d3:74:26:43:1b:95:fc:5e:43:86:9e:
5f:a8:31:e8:6b:7a:1f:80:3a:7b:78:1e:21:76:c3:
33:e7:67:76:b0:67:b2:5c:0d:18:78:32:70:95:96:
6b:54:4c:dd:35:aa:4a:f8:37:58:93:54:fd:e3:d5:
76:77:d0:fd:a3:d8:65:d4:87:6f:10:d4:d6:43:c6:
6b:5d:1f:a7:91:83:84:5b:db:dc:d1:bf:b2:d3:b3:
8b:a4:d7:dc:ec:d1:54:6f:82:5c:df:cd:a5:86:95:
d7:a4:3b:f8:fb:1d:b5:fa:1b:f7:0d:7d:eb:59:6a:
79:5a:07:0f:6d:46:85:05:cd:e9:cf:50:35:93:ea:
bb:8f:b5:45:dc:92:bd:e2:6c:1e:c8:e6:e5:d5:26:
d3:9a:32:d4:16:ad:f3:c7:7e:f1:71:9d:c5:d3:36:
64:99:3e:ad:85:8a:a8:12:ff:c3:b2:71:5e:40:2a:
44:50:e5:fd:ab:68:97:bc:01:36:36:81:bc:84:3f:
92:e7:95:98:37:29:cd:92:84:e9:22:62:c6:14:dc:
32:8e:85:69:07:55:50:1a:5b:99:bd:fa:96:27:48:
fd:06:cf:4a:0b:9c:e6:b6:03:3b:f5:a9:6e:2d:56:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:E8:49:B2:81:8B:F3:E4:08:77:50:F5:61:C4:97:9E:D2:66:89
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/K8PoSbKBi_PkCHdQ9WHEl57SZok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0-178.239.149.255
185.212.50.0/23
185.215.228.0/23
185.243.50.0/23
Signature Algorithm: sha256WithRSAEncryption
75:d6:d5:4a:0a:b1:8a:75:82:d9:ec:27:f0:5b:0f:f1:8a:d2:
56:52:a5:1b:8c:fb:f6:b1:66:58:de:d6:b6:1c:73:2e:2b:0e:
38:f6:ad:9b:21:56:d8:f1:bf:5a:b4:bd:a6:39:18:33:a5:ba:
02:f8:af:6d:d7:e2:82:04:74:4e:78:ac:f3:8b:ae:30:22:bd:
80:ec:07:04:69:93:ce:d6:8b:47:67:0e:d4:01:c7:42:17:eb:
a7:46:b2:04:ff:68:63:47:5d:e0:33:8b:cb:52:06:d3:af:43:
d6:ab:78:82:0c:e7:0e:f8:87:4c:34:7c:a6:a0:8e:11:21:d0:
cd:90:41:4f:45:da:78:28:1d:df:c4:2b:2c:70:7a:4f:5f:f0:
37:42:14:fb:61:14:51:96:ae:ee:40:69:fa:9f:12:ff:5b:25:
fd:f6:82:bb:85:66:4d:23:72:7a:ab:e1:80:d6:3c:ae:de:32:
a8:b0:48:2a:ba:12:9f:30:b5:01:30:6e:63:f0:7e:6c:d4:47:
d0:fd:eb:46:48:d5:0a:3d:42:2e:31:8d:a8:d0:e1:95:15:62:
9b:89:55:c6:48:95:5b:3d:1f:22:0c:be:f0:01:99:23:04:2e:
07:1b:61:1d:e3:83:58:ca:f6:30:d0:4b:71:86:05:c0:d4:f5:
da:ff:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:19 2024 by rpki-client on console-ams.rpki-client.org