Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa
File: bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa (raw, json)
Hash identifier: hmPm6ijITvgkAMuVXFKWvViNfsI54a7uN1RwdUKJvn8=
Subject key identifier: 6E:8D:C0:BB:F2:52:F3:45:2E:53:95:CF:81:55:5C:53:85:00:97:64
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC49307A394A753FA24CD94575778A736
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13008
IP address blocks: 185.86.27.0/24 maxlen: 24
217.175.205.0/24 maxlen: 24
185.86.26.0/24 maxlen: 24
217.175.204.0/24 maxlen: 24
185.86.25.0/24 maxlen: 24
185.86.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:07:a3:94:a7:53:fa:24:cd:94:57:57:78:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e8dc0bbf252f3452e5395cf81555c5385009764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:05:4d:7c:b7:77:0f:bb:c5:3e:1e:04:9e:
ac:8c:f6:aa:9c:c0:b3:b9:57:81:29:a3:0c:2f:33:
fe:ac:5c:21:94:9b:66:9c:77:51:9a:a0:7a:46:99:
03:98:d2:07:cb:bd:0a:77:04:71:56:43:b8:00:cf:
76:40:56:85:f5:46:2e:6c:d3:23:93:b2:41:4b:06:
53:0d:fa:f1:7e:06:28:fb:35:2d:ae:66:57:40:b1:
78:dd:74:ff:cb:bf:02:68:5c:4b:79:99:cc:ee:28:
3b:db:2c:6a:ae:10:dd:e1:77:81:09:d6:0c:66:80:
79:9f:6a:1f:ba:01:02:80:be:63:99:10:ba:94:5e:
2e:49:64:71:82:49:8a:66:5f:fc:11:7d:be:13:2d:
ad:c1:27:1f:57:fe:7f:03:d2:79:1f:47:ee:28:dc:
25:5c:1f:86:0c:24:83:38:c8:c5:bc:b5:5f:b2:02:
e8:e3:f7:ae:9e:bf:54:f2:10:72:e5:a7:5f:b0:e6:
23:29:c7:81:2c:4a:82:f0:03:68:0d:57:85:1a:79:
04:d8:3f:06:d2:05:5b:25:82:dc:a3:68:3d:16:3c:
db:40:77:94:70:cf:c4:07:86:16:4a:cc:56:6f:01:
ba:a0:f5:ba:b0:6c:93:d4:28:1b:25:4a:fc:39:8e:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:C0:BB:F2:52:F3:45:2E:53:95:CF:81:55:5C:53:85:00:97:64
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.24.0/22
217.175.204.0/23
Signature Algorithm: sha256WithRSAEncryption
e2:71:54:07:16:72:fb:0a:c8:aa:00:4c:ff:a7:6b:2c:ea:5f:
77:70:d2:6b:e3:5a:d1:fb:17:66:40:07:b7:38:f2:0a:78:41:
05:a5:8b:a4:11:fb:f4:d7:40:fb:e3:36:24:87:eb:3e:15:00:
25:a5:68:e4:1b:04:58:eb:15:9c:fc:f4:ef:fa:79:32:ba:78:
b7:d3:e9:4e:59:2b:f8:31:f1:5e:6a:ec:c2:c0:e3:c7:ff:79:
b2:c5:60:05:a7:e9:9c:ed:38:43:f7:b3:d7:15:88:06:5e:c7:
fc:ba:6c:a7:56:5b:76:eb:cd:90:51:7e:c9:51:17:fd:21:e9:
db:8a:d3:dc:11:8d:6a:38:94:22:40:d4:32:bb:26:c9:f6:07:
76:c9:bb:d6:39:5f:92:1d:9d:3d:2a:68:36:38:e7:13:3e:dc:
50:21:40:e8:de:f7:49:f7:a4:cc:7d:1c:85:2c:8e:43:85:f0:
74:7a:9a:fd:3f:28:51:f5:96:42:92:56:2e:e2:f7:2e:b9:9f:
93:0f:d9:cc:3b:6f:f8:0b:08:5d:4d:40:e1:a9:de:0d:cd:34:
07:93:b2:b8:cb:95:b7:fa:1c:f7:87:c1:e8:66:72:a6:08:81:
6f:fe:2f:a7:f3:f3:d9:11:e5:cc:1c:8c:98:eb:23:1f:73:e2:
bf:cf:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 20:46:38 2024 by rpki-client on console-fra.rpki-client.org