Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/FoEK8J5BxzpneHMAKHDobBjLsVE.roa
File: FoEK8J5BxzpneHMAKHDobBjLsVE.roa (raw, json)
Hash identifier: V707aoQPAhDqKKP6lgiTbIWz0oYhRXdignZlR8oH7U4=
Subject key identifier: 16:81:0A:F0:9E:41:C7:3A:67:78:73:00:28:70:E8:6C:18:CB:B1:51
Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial: 018CC26D55C3A8F29FD151156B733B52F7A9
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/FoEK8J5BxzpneHMAKHDobBjLsVE.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200183
IP address blocks: 185.28.78.0/24 maxlen: 24
185.28.77.0/24 maxlen: 24
185.28.76.0/24 maxlen: 24
185.28.79.0/24 maxlen: 24
2a02:ce80:2::/48 maxlen: 48
2a02:ce80::/48 maxlen: 48
2a02:ce80:3::/48 maxlen: 48
2a02:ce80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:c3:a8:f2:9f:d1:51:15:6b:73:3b:52:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16810af09e41c73a677873002870e86c18cbb151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:92:95:fd:67:14:0c:01:5b:01:15:3c:59:
1d:5f:1f:fa:c8:86:c2:e4:67:27:51:af:f8:e7:aa:
15:4a:5d:8e:ba:85:75:a2:9d:df:42:a3:bc:b9:08:
95:f8:6b:09:00:29:c8:2f:16:83:88:00:27:2c:06:
88:b3:ec:48:49:5a:08:b4:17:6e:08:e6:65:a1:33:
d7:4f:52:3f:8b:a8:7d:49:02:d7:c5:dd:d5:f4:47:
8f:bd:51:8a:b8:5e:0d:d0:0a:04:5d:91:1f:f7:83:
02:7f:a2:c3:0d:3c:79:3b:da:b6:de:34:88:bb:66:
ad:68:07:3d:59:13:7f:7f:c6:cf:68:a4:d4:1f:3c:
4a:73:1c:17:39:99:aa:8f:67:4d:1b:6e:6e:dd:53:
88:12:89:8c:b3:e2:2e:1f:eb:20:df:1a:45:93:ce:
d5:a6:79:ed:51:80:d2:ac:86:30:6d:dc:3e:4b:c6:
7f:78:77:56:61:2e:9f:fc:5f:b5:5f:ff:f3:78:ee:
76:3f:bc:68:f0:40:6e:1b:50:f1:21:95:f1:c2:36:
b2:60:c5:1d:7a:6a:17:aa:b9:39:54:cc:48:dd:fc:
42:e5:42:7a:49:95:b9:50:76:e3:33:eb:21:ad:81:
17:34:10:76:3c:b6:d4:56:54:ae:31:d5:af:e7:3f:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:0A:F0:9E:41:C7:3A:67:78:73:00:28:70:E8:6C:18:CB:B1:51
X509v3 Authority Key Identifier:
keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/FoEK8J5BxzpneHMAKHDobBjLsVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.76.0/22
IPv6:
2a02:ce80::/46
Signature Algorithm: sha256WithRSAEncryption
0c:30:3c:03:2d:1e:ef:1a:b3:44:5b:14:53:a9:f2:f1:b3:b6:
5a:0a:6d:bf:70:f9:ac:34:8d:50:d3:03:35:7a:4e:81:ae:63:
da:7a:60:f8:f0:30:6d:b8:fb:68:4f:4a:24:86:fd:a3:57:bb:
87:98:e3:ef:4a:25:9c:6a:17:bb:3a:e1:d3:42:12:8f:01:e3:
cb:0b:58:7e:3c:fb:ff:f6:8f:2f:5c:2c:f9:ca:c9:d4:7b:7d:
92:17:00:e6:66:3e:09:02:e5:71:d4:ba:26:eb:a2:71:c0:cc:
03:5f:58:6c:dd:17:af:c8:7d:10:82:ab:3c:68:fa:16:d2:63:
63:a3:c8:c2:85:fd:29:72:ca:39:a9:c0:42:54:ea:e1:d2:5f:
2d:fd:45:21:89:54:58:53:55:33:e7:39:d1:08:6f:3f:27:6d:
e6:5b:ca:56:ce:12:80:34:0b:7f:2d:fe:42:a9:7e:8f:af:74:
be:18:88:93:a7:56:df:79:71:e3:e1:12:6f:7a:0c:18:15:b0:
a7:65:a0:ca:10:d5:a4:1e:81:d8:36:b0:40:8d:02:42:fe:ab:
54:39:6e:ab:18:2e:16:79:0f:e3:88:ce:2a:78:ec:c9:1f:83:
07:6b:de:89:17:64:3c:ed:fc:1f:49:cd:15:03:6b:21:cd:43:
54:5e:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:09:58 2024 by rpki-client on console-ams.rpki-client.org