Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/yIuXMr0EHMoWhzvBjLuRJNlxW8w.roa
File: yIuXMr0EHMoWhzvBjLuRJNlxW8w.roa (raw, json)
Hash identifier: v2XEBzkZbBcAdMkEZQkZBnyvte3vrzfSqbBUluYhRAA=
Subject key identifier: C8:8B:97:32:BD:04:1C:CA:16:87:3B:C1:8C:BB:91:24:D9:71:5B:CC
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 018CC493181285E67A65D49A10D27B24CBA1
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/yIuXMr0EHMoWhzvBjLuRJNlxW8w.roa
Signing time: Mon 01 Jan 2024 10:30:23 +0000
ROA not before: Mon 01 Jan 2024 10:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204634
IP address blocks: 185.248.130.0/24 maxlen: 24
194.31.171.0/24 maxlen: 24
185.248.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:18:12:85:e6:7a:65:d4:9a:10:d2:7b:24:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jan 1 10:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88b9732bd041cca16873bc18cbb9124d9715bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:91:ab:c9:11:ad:f3:84:bd:4e:c8:b4:9b:
25:ec:67:94:42:41:5e:40:7d:c4:79:36:83:42:8f:
2a:bd:e4:17:e4:1d:2f:68:3a:86:69:e2:d3:ae:a6:
e7:f0:fc:20:95:f9:37:45:2d:fa:bf:91:d5:91:45:
56:1d:20:d5:8f:63:13:0e:4a:ea:a7:46:6c:23:0d:
da:ee:64:37:7c:30:c7:bd:65:51:ea:e2:4d:7b:53:
dd:a8:7a:c4:17:0e:a3:1d:32:94:ef:03:0f:f2:21:
a1:f3:51:3f:26:dd:51:d2:c1:d7:21:04:71:09:92:
f5:3b:bd:17:f6:8a:57:90:90:53:c4:fc:5f:22:b2:
eb:2a:88:c8:9d:7c:cd:bc:f1:cb:de:54:ad:4c:b6:
44:ff:65:56:f6:37:66:65:3f:da:c2:45:04:ab:a5:
2f:67:70:65:22:a5:58:f7:3b:28:36:70:1e:aa:62:
a3:94:b4:63:d3:1d:26:70:9b:a7:23:ee:a2:e2:bf:
17:8f:fe:48:44:4f:12:94:5c:5a:9a:f2:66:e3:eb:
e8:61:33:5a:63:eb:e1:9b:8c:f1:50:1c:7d:4f:f9:
66:6e:69:77:e7:79:a9:c5:4b:a3:a8:7a:00:f8:d8:
9c:1f:79:0d:14:31:3d:ae:a4:e8:e0:2a:0e:ff:a0:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:97:32:BD:04:1C:CA:16:87:3B:C1:8C:BB:91:24:D9:71:5B:CC
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/yIuXMr0EHMoWhzvBjLuRJNlxW8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.130.0/23
194.31.171.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1a:a8:3f:8e:f4:47:a7:70:83:b2:98:b5:d1:b3:36:ec:d4:
f3:fe:96:1c:77:81:2d:a0:c1:20:45:91:b2:77:6c:89:ee:6b:
19:98:99:67:24:95:9a:5c:aa:10:6c:dc:e0:25:30:44:3e:9e:
07:2e:e3:e3:d2:2d:c7:cb:24:77:67:c1:c1:72:68:38:c8:bc:
ff:74:d1:f0:73:18:0e:63:a4:48:d6:b2:2c:9d:ca:ca:19:29:
b1:bc:10:fe:5c:c3:f6:ab:73:0a:a8:56:d4:eb:63:a2:87:aa:
67:f0:29:d3:44:d5:2a:ad:93:65:b3:2c:73:70:6c:de:45:01:
b8:a9:b4:b2:3e:0a:13:93:50:64:a9:ed:79:fd:b2:d7:2b:db:
61:cc:eb:a7:f8:7c:56:aa:bd:ba:54:55:02:11:17:52:6c:50:
ea:d8:bb:75:6c:93:f6:3b:6e:c0:69:9e:e3:35:65:64:dd:7d:
c6:65:d9:12:ae:93:3b:95:ce:0b:76:8f:41:79:65:25:f8:4c:
19:a2:d2:92:8d:05:43:66:68:46:ea:83:42:0d:f0:4d:c4:4d:
d8:eb:f6:b3:c6:c5:22:63:60:fd:60:81:f5:e9:0c:9c:de:72:
40:9a:ff:0f:f4:6f:0a:c1:49:fb:80:bc:c0:6c:07:7b:58:ec:
51:ba:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:07:05 2024 by rpki-client on console-ams.rpki-client.org