Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/I76f7S0N88ky3FTnvwxMVR7WZBs.roa
File: I76f7S0N88ky3FTnvwxMVR7WZBs.roa (raw, json)
Hash identifier: FBI3JSml9oNScQTMFrcjENxEJblIVVlNa13WWnu9Yqk=
Subject key identifier: 23:BE:9F:ED:2D:0D:F3:C9:32:DC:54:E7:BF:0C:4C:55:1E:D6:64:1B
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 018CC2DB312C3A6C7809F41F8D5E0C82ACB6
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/I76f7S0N88ky3FTnvwxMVR7WZBs.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203505
IP address blocks: 185.146.225.0/24 maxlen: 24
185.146.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:31:2c:3a:6c:78:09:f4:1f:8d:5e:0c:82:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23be9fed2d0df3c932dc54e7bf0c4c551ed6641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:f3:97:fd:14:7b:bf:0f:2c:59:e1:43:0b:
78:31:3a:b3:32:37:5c:f2:5a:51:35:22:f8:c8:4e:
da:67:1a:d6:62:ae:08:a7:d3:4a:5d:9c:4b:85:aa:
e9:b0:f6:3a:1e:8c:2e:84:0b:01:dc:d3:a4:d9:a0:
e2:20:23:de:e9:b2:bc:c9:a5:ac:a2:4a:fd:ae:b6:
92:24:50:12:4e:38:fc:ce:5d:6c:b9:8b:f9:6f:c1:
26:2d:3d:b9:e8:19:73:2b:2a:52:b3:3e:fe:55:88:
53:78:3c:ab:f7:e0:1b:c6:b0:e3:cc:fc:d0:b3:2b:
bb:31:24:02:c8:71:90:2e:77:ab:4e:c6:b5:41:dd:
0d:e7:c6:3f:5c:28:6b:3c:3f:db:ea:84:50:70:25:
c6:01:f3:16:0f:12:f3:36:44:30:30:18:b8:9a:f0:
c9:f4:f8:36:e2:39:1e:e3:4c:b6:c8:ab:c6:f1:c5:
32:36:26:08:de:ed:ab:50:13:66:03:61:1f:87:aa:
64:d4:ad:5b:ba:d4:6d:0e:c9:fd:09:3a:52:6e:a7:
17:e9:47:54:86:62:8b:62:7d:fa:5f:87:c8:07:25:
a1:5f:61:71:5f:e7:aa:5f:e4:d5:71:fd:d1:aa:72:
ad:52:5c:d6:b1:34:76:f0:1d:53:a8:7c:84:db:ee:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:9F:ED:2D:0D:F3:C9:32:DC:54:E7:BF:0C:4C:55:1E:D6:64:1B
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/I76f7S0N88ky3FTnvwxMVR7WZBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:31:a9:94:1f:2d:8e:58:91:46:c9:e9:0f:d9:21:dc:fc:ad:
da:e0:c2:fa:87:9e:bf:f4:9b:fb:8a:3f:c9:b8:73:94:f0:83:
a8:08:3c:4c:a1:46:fd:84:46:40:09:75:11:60:c8:73:20:5a:
1b:b1:f4:f5:2f:64:bf:2b:0d:16:40:66:39:4a:43:60:69:57:
24:5b:09:8f:bb:e9:e5:7a:40:6a:e1:d0:98:99:16:8a:a9:ad:
95:d9:60:41:70:0a:3d:3a:a6:80:2a:21:22:2d:95:39:89:d5:
62:d8:83:a7:e1:16:5d:a2:93:f4:9d:cf:01:4e:ae:f8:8a:bb:
54:59:4b:07:18:97:91:dc:f5:da:f8:57:c0:4e:d1:e9:e9:5f:
35:24:70:19:8c:0a:2a:9f:27:cc:11:ed:4a:a2:a8:2b:81:0e:
a7:51:f6:77:d9:33:cf:70:2c:99:c6:f7:6f:b8:1f:dd:2b:45:
fe:eb:b9:69:bf:9a:d3:87:00:9a:b4:99:6a:44:1f:7e:f2:cc:
1b:a7:11:22:57:08:ab:80:51:3e:83:fb:4d:df:a1:26:9b:37:
59:48:06:57:44:a0:0a:91:81:b7:c5:fd:1a:10:ef:25:e9:d8:
59:24:78:67:93:a3:d1:8e:b9:bd:47:eb:2d:ea:75:39:d4:39:
0e:a0:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:27:23 2024 by rpki-client on console-fra.rpki-client.org