Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImUXx_PmHGN1a2bR4yuhV-_EBRI.roa
File: ImUXx_PmHGN1a2bR4yuhV-_EBRI.roa (raw, json)
Hash identifier: jHYXmNMd9lEmdjxxM3jEZPDQWiT99fHB+GSaeyXAJkA=
Subject key identifier: 22:65:17:C7:F3:E6:1C:63:75:6B:66:D1:E3:2B:A1:57:EF:C4:05:12
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 018CC6B8C83EC291CEE1509075B638420E5E
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImUXx_PmHGN1a2bR4yuhV-_EBRI.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 185.51.184.0/22 maxlen: 22
2a01:b460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c8:3e:c2:91:ce:e1:50:90:75:b6:38:42:0e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=226517c7f3e61c63756b66d1e32ba157efc40512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:7b:a1:85:b1:5f:99:7f:72:64:fa:f3:8f:
bf:9b:d0:dc:96:3c:2a:48:f0:e6:bd:bf:1b:5d:42:
57:e9:61:5a:a7:e8:3d:80:ef:61:80:9e:e8:75:dc:
45:ad:cb:df:0a:63:4d:a0:40:f9:7a:75:d4:83:fa:
7b:99:b7:ce:8b:84:f0:d9:f9:7c:e5:36:9e:fc:d1:
f5:9d:06:5b:c9:bc:b0:9e:10:ca:e5:e5:6f:6c:f7:
f8:06:cf:d7:5b:8b:cb:41:bf:f9:e2:17:58:68:8c:
89:77:30:50:a6:62:b9:51:ad:ae:5c:20:99:e6:c0:
ea:f6:d0:f8:ba:e0:16:f7:83:8a:6b:d9:6f:cf:98:
f9:46:95:1e:b0:41:b4:a9:65:1a:83:32:99:3d:be:
4d:fc:55:57:f9:11:99:cb:b3:38:32:43:33:bd:21:
77:66:e3:bf:e7:e7:35:a1:d0:d6:1b:bc:6a:0c:a2:
f9:1a:d5:4a:27:37:96:f6:f7:8a:9d:ae:93:d1:b4:
91:5c:0a:ed:c9:b0:89:92:b9:ce:90:99:1f:56:34:
ed:98:78:3d:78:23:85:94:dc:6b:09:9e:c6:d7:ef:
75:f1:41:01:95:2f:5c:27:65:f1:1a:7d:db:ae:3e:
36:54:25:ce:3b:d3:9a:3f:c7:01:51:c4:68:d2:79:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:17:C7:F3:E6:1C:63:75:6B:66:D1:E3:2B:A1:57:EF:C4:05:12
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ImUXx_PmHGN1a2bR4yuhV-_EBRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.184.0/22
IPv6:
2a01:b460::/32
Signature Algorithm: sha256WithRSAEncryption
06:fc:ba:13:96:20:cd:4a:43:18:8b:bc:f5:b3:8d:b5:59:d7:
ee:20:00:42:d2:f6:d4:0b:93:8a:f1:91:8c:90:75:b0:7f:a2:
a5:72:1d:f0:5a:4e:49:69:60:4c:97:56:a9:6d:a1:ba:60:52:
39:c3:20:34:98:32:9a:7e:47:9b:48:17:35:3e:39:5e:70:4e:
a8:f4:51:b2:b2:0e:36:5f:da:9d:11:6b:ba:48:d3:1b:91:7c:
3e:5b:2d:eb:29:d1:cb:2b:7d:fb:59:2e:c9:19:a9:e4:f3:0b:
6a:02:a6:e1:76:43:b9:59:3a:79:63:51:a2:48:67:d9:36:32:
04:5a:a0:64:6c:a5:55:a4:1e:cf:20:dd:1d:23:9d:05:f1:2d:
18:2c:c1:72:53:e2:5d:7a:3d:d3:5f:7a:f6:70:c8:a7:e2:74:
fd:8a:6b:06:48:db:71:b8:68:7c:df:fb:d0:44:ed:6b:a9:5a:
55:93:8c:b8:02:7e:88:aa:0a:84:da:a1:c2:56:50:50:d8:d7:
01:5f:3a:05:b6:30:69:f2:e6:c2:bb:67:f6:2e:ce:74:74:21:
2f:e6:b4:db:c4:19:e7:bb:13:21:78:23:56:1e:a6:cb:79:34:
3a:94:ec:30:cc:d1:9a:80:87:9d:ef:d8:f1:e3:65:ca:c8:5c:
26:6b:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:11:18 2024 by rpki-client on console-fra.rpki-client.org