Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/2gbqNR-Mv2mEnzK22M-CQ8WoNi4.roa
File: 2gbqNR-Mv2mEnzK22M-CQ8WoNi4.roa (raw, json)
Hash identifier: FS8biBetAnY548ABb+Jx2ElN1VjFbmeF9j+zuU63w4k=
Subject key identifier: DA:06:EA:35:1F:8C:BF:69:84:9F:32:B6:D8:CF:82:43:C5:A8:36:2E
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 018CC500C6FF91B2D75964BCD44290142120
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/2gbqNR-Mv2mEnzK22M-CQ8WoNi4.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59962
IP address blocks: 185.64.178.0/23 maxlen: 23
185.64.176.0/23 maxlen: 23
2a04:fb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c6:ff:91:b2:d7:59:64:bc:d4:42:90:14:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da06ea351f8cbf69849f32b6d8cf8243c5a8362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:e7:58:7a:92:a0:4b:c3:de:ef:a5:b2:e1:
3c:63:93:bf:f5:80:7f:bf:37:fa:cd:ab:dc:55:4f:
d9:09:91:30:55:90:2c:3e:12:a7:a2:5a:14:4f:54:
c5:e5:54:72:d2:85:dc:c5:e9:bc:c2:cd:39:4f:22:
57:e9:6c:fd:ff:a6:80:eb:fa:e0:65:68:5c:3a:a6:
31:85:3b:ef:5d:d0:6c:1a:87:17:27:1e:43:ae:bc:
bb:4a:d8:9b:48:85:01:f9:78:c4:4e:a8:3a:db:4c:
82:a2:a8:26:ab:ee:00:01:c2:2f:0a:aa:b6:31:f7:
87:6d:9e:e1:a3:4e:e8:ba:25:36:98:fc:34:de:cd:
33:44:af:56:b6:78:23:cc:22:be:3b:7f:19:01:d9:
21:f7:bf:78:a4:02:8d:40:42:0a:74:f3:3f:bf:81:
c1:d6:b1:c6:e6:39:82:8c:0a:2d:4b:01:e0:f3:9c:
07:9c:cf:4f:f6:ab:3f:50:55:51:b7:0b:53:52:e3:
01:f4:a9:30:d5:f8:6a:5c:fd:0a:be:09:da:4d:da:
a5:c1:19:40:de:91:fc:88:9f:a6:a7:8b:4c:a1:df:
e1:d4:f6:d0:3d:5b:94:90:f4:56:72:6f:89:a0:d6:
ba:cd:3b:b3:97:7c:cc:95:10:b3:b7:60:01:9a:69:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:EA:35:1F:8C:BF:69:84:9F:32:B6:D8:CF:82:43:C5:A8:36:2E
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/2gbqNR-Mv2mEnzK22M-CQ8WoNi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.176.0/22
IPv6:
2a04:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
11:6a:3f:39:7e:05:cc:3a:82:c5:72:cf:a2:48:41:76:cb:e2:
af:e7:9d:45:95:b9:d3:8d:c3:de:98:99:ba:47:d9:94:86:ad:
c8:e4:b2:f2:c2:f4:b6:dd:58:d4:de:2b:00:56:6c:b2:b8:eb:
38:b5:1e:c4:f0:68:c3:cf:99:cb:90:ec:a8:b4:54:a3:06:7c:
95:34:20:3c:7d:0c:df:42:48:ff:00:d4:f3:5c:22:9f:e1:a7:
f7:11:db:39:ce:3f:15:d1:c0:1d:da:cb:f4:2e:1f:31:b0:c9:
d1:4e:2a:9f:09:67:3e:da:32:0e:2f:ae:b9:ae:34:76:5e:7f:
a8:26:26:bd:02:fd:88:7f:61:37:e5:05:eb:d6:f7:b7:3d:70:
d1:5b:fd:80:0f:86:ed:14:5f:9b:d6:70:f8:07:4f:e4:cd:83:
cd:2e:4c:a3:11:53:54:f0:5d:c6:61:e5:da:8b:08:32:73:bb:
5b:1a:a5:a0:63:77:76:9a:4b:6d:e5:24:f6:d8:ed:aa:c3:e4:
7f:5e:ed:88:56:6d:3b:ab:4e:47:86:64:f5:59:e6:49:c1:a7:
e9:b8:75:42:dd:a2:4b:4c:c4:fa:8b:db:54:a4:d8:01:fd:99:
4c:f3:16:e7:22:7a:cd:73:c7:16:d8:c5:6c:f8:f4:69:09:df:
d8:bf:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:41 2024 by rpki-client on console-ams.rpki-client.org