Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/AgJepwHNoihvRpIm7zuZNx0O9vI.roa
File: AgJepwHNoihvRpIm7zuZNx0O9vI.roa (raw, json)
Hash identifier: iS0R9+qxxTYOnMb6AodUvQp98VJlGQwfqSRgzfqb8Eo=
Subject key identifier: 02:02:5E:A7:01:CD:A2:28:6F:46:92:26:EF:3B:99:37:1D:0E:F6:F2
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 019293DF35574B44AF4C49F3B34F41B764AA
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/AgJepwHNoihvRpIm7zuZNx0O9vI.roa
Signing time: Wed 16 Oct 2024 05:48:51 +0000
ROA not before: Wed 16 Oct 2024 05:48:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273163
IP address blocks: 185.240.212.0/23 maxlen: 23
185.240.212.0/24 maxlen: 24
185.240.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:df:35:57:4b:44:af:4c:49:f3:b3:4f:41:b7:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Oct 16 05:48:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02025ea701cda2286f469226ef3b99371d0ef6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:7d:9d:64:e7:88:16:ca:94:b0:59:5d:93:
f1:f0:92:af:0f:0d:34:7e:39:69:63:5d:f8:4f:91:
2e:21:11:91:f4:ed:8c:f3:b0:1c:e1:8a:01:2f:ca:
f3:fd:af:a6:df:18:ee:d5:59:f7:1f:1c:f0:7f:c3:
16:a2:ec:f8:3d:8a:4e:6d:c4:d3:2f:fa:d8:1f:15:
ea:ac:ab:fc:1f:5a:fb:b9:38:96:6a:b6:7a:9d:28:
32:a5:29:35:b1:1d:5f:87:41:c2:74:4a:9c:bb:cf:
0a:03:bf:be:af:c9:5d:12:8a:49:d4:d0:7d:67:a9:
c9:6b:28:25:4e:7e:1f:63:90:67:21:ca:f4:77:a2:
9c:53:c8:81:1e:02:8b:19:f8:cc:eb:5f:13:3e:c1:
9d:7f:53:b5:bf:da:7f:c5:dd:fb:e6:03:46:80:61:
30:da:75:82:ba:ba:1b:10:59:95:59:88:84:19:5f:
84:10:37:ac:44:bc:74:ec:94:c2:65:4b:da:2f:74:
f7:c4:04:ed:cd:72:ec:1d:3d:bd:91:5b:83:c0:ab:
7c:9f:7e:46:9c:39:3b:12:74:63:38:85:c9:0b:d9:
32:a4:22:99:2a:ae:41:85:a7:d0:bb:ea:3a:e8:e7:
b5:b5:b4:ba:eb:ff:f8:04:1d:ed:82:e3:cd:1e:a0:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:5E:A7:01:CD:A2:28:6F:46:92:26:EF:3B:99:37:1D:0E:F6:F2
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/AgJepwHNoihvRpIm7zuZNx0O9vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:66:0b:ba:da:b5:b3:64:64:d9:c8:2d:ab:2e:b8:0a:5b:03:
7d:f3:e8:2f:ca:7c:6a:1b:d1:7d:9b:d8:8e:44:f1:77:f9:9c:
a8:cc:ef:da:18:a9:f9:ea:12:b6:75:f9:22:25:eb:f2:43:d7:
06:7f:2c:ad:4d:d4:60:a6:41:9d:ea:41:a2:92:79:a1:11:cc:
20:bb:2b:60:de:c4:05:be:52:d0:f9:61:15:e8:50:45:56:05:
75:5f:81:8d:9b:e3:79:a5:8c:4e:e1:7f:75:55:44:c3:7f:ce:
21:e1:6d:d7:d9:41:54:6c:3e:46:3b:70:4e:cb:75:b6:c1:14:
19:38:f4:51:48:17:86:46:16:85:1d:8d:56:16:fe:de:5b:44:
02:7a:70:d0:0b:dd:4c:65:45:13:5a:31:f7:5e:20:32:65:ea:
b4:58:22:34:95:6a:2d:a2:01:b9:42:38:b3:b8:04:d0:e2:f1:
17:e9:00:a5:36:69:4c:78:20:b7:23:53:d7:a8:8a:57:60:a7:
e6:c9:d7:c6:63:f1:b6:3d:e5:7a:77:8b:05:e9:d2:48:60:e4:
b5:d1:82:2e:d0:86:64:7d:4e:fe:84:2e:6c:18:c7:94:2e:95:
76:6d:b4:40:00:35:b4:8f:1a:86:87:ce:94:86:f2:62:0d:ad:
7f:65:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:46:33 2024 by rpki-client on console-ams.rpki-client.org