Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/srABLMmz2rzeAqpEy-qoWyPOpZY.roa
File: srABLMmz2rzeAqpEy-qoWyPOpZY.roa (raw, json)
Hash identifier: ebTIaDbdoAi7ZD3FueJ7eCJUyN04/8kXhUV78cag0oc=
Subject key identifier: B2:B0:01:2C:C9:B3:DA:BC:DE:02:AA:44:CB:EA:A8:5B:23:CE:A5:96
Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial: 018CC56E5A8435AC4150CAB75663C3EC227B
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/srABLMmz2rzeAqpEy-qoWyPOpZY.roa
Signing time: Mon 01 Jan 2024 14:29:52 +0000
ROA not before: Mon 01 Jan 2024 14:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.43.192.0/24 maxlen: 24
185.43.193.0/24 maxlen: 24
185.43.194.0/24 maxlen: 24
185.43.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5a:84:35:ac:41:50:ca:b7:56:63:c3:ec:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2b0012cc9b3dabcde02aa44cbeaa85b23cea596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:3f:18:a6:1b:81:22:94:9f:35:f5:58:8c:
64:2f:6b:cb:6d:17:dd:d8:42:d2:67:2e:48:60:89:
d9:81:76:d8:99:aa:f8:e7:d0:29:d2:b3:ec:62:4f:
09:52:ca:3d:59:a3:50:3d:e1:a9:66:b2:3a:92:9f:
a4:a2:d3:2b:0e:a4:ef:f2:f5:2b:30:98:5f:1e:59:
b4:2f:9b:c5:c6:6c:23:f6:b2:a3:29:37:37:9a:2d:
65:d8:b4:f9:0b:f8:c2:ff:24:ca:e1:12:f2:ca:09:
f1:7c:f4:ba:1b:fd:93:1d:d7:de:60:39:30:b8:63:
33:7a:1b:5b:d2:44:86:a5:4d:0a:e4:4c:f1:2d:33:
7f:a7:52:96:08:ad:c6:a7:f1:1f:25:c9:d5:f7:3d:
05:ca:65:20:10:68:c2:83:da:b2:9e:d0:65:b5:ee:
a5:0d:a2:6a:a9:c3:56:4d:29:29:ad:31:f1:de:2b:
43:18:20:a6:49:9b:b4:28:de:5c:6b:e0:37:86:2c:
04:8d:30:06:bf:7d:b4:da:11:1f:71:42:3f:40:5b:
4b:1e:e9:30:ee:fd:a3:f3:5a:5f:49:46:21:29:a0:
04:85:47:b0:85:e1:0f:3c:38:8e:04:03:d6:35:84:
1d:37:44:b5:72:63:8b:e9:cb:e8:e9:c0:c4:ff:6a:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B0:01:2C:C9:B3:DA:BC:DE:02:AA:44:CB:EA:A8:5B:23:CE:A5:96
X509v3 Authority Key Identifier:
keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/srABLMmz2rzeAqpEy-qoWyPOpZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
29:4a:95:33:23:aa:db:c4:30:29:19:b5:49:02:ba:f4:c1:c5:
56:8b:15:87:4f:8f:b9:bd:3b:98:c9:ba:52:e3:fd:db:60:9f:
87:02:bf:65:7e:0f:79:e2:63:76:2c:38:16:19:ae:f9:c1:0e:
f0:32:11:54:6f:1d:71:e2:93:53:e0:32:d3:e6:1b:71:d3:cb:
d2:55:22:57:bb:37:1a:b7:d1:91:2f:18:18:b6:95:99:0c:ce:
1e:89:19:e3:5b:3c:15:9b:9c:58:07:eb:cc:9e:f8:cf:f6:ec:
fe:12:55:61:ed:e8:95:60:2d:3f:cc:10:1e:bd:a2:a9:54:9a:
7c:fe:09:1b:1c:29:31:88:16:00:9b:f4:7c:0f:4b:4f:3e:5f:
bc:c9:70:ba:3b:28:f4:63:10:71:c5:32:c3:86:f4:a3:87:c0:
9e:57:a5:b1:0b:9c:dc:e9:ea:2b:28:13:e3:23:c3:a8:d9:0e:
68:dc:c2:df:e5:6f:5b:16:60:c5:13:9b:55:09:b8:af:a9:96:
93:b1:fe:28:e7:e4:e4:4f:31:53:21:4b:2f:cd:08:fb:fd:a4:
a8:0f:9a:42:c3:a1:01:ed:67:72:cf:0a:1a:89:5a:b4:15:1b:
23:4b:71:a5:d7:74:f2:5e:dd:d2:d2:c4:51:cf:c1:d7:8c:e8:
2e:33:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:40:53 2024 by rpki-client on console-fra.rpki-client.org