Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa
File: l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa (raw, json)
Hash identifier: J+7DUYbCZAAmeT4Qc+mXxkaSdm1CHQ9oYUSUIcnP79o=
Subject key identifier: 97:CB:BD:C7:75:45:5F:95:E0:D0:57:87:F0:82:C3:D5:22:0D:BE:9C
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018CC7270507C2DCB0B27F7C3F6DD67C5867
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa
Signing time: Mon 01 Jan 2024 22:31:12 +0000
ROA not before: Mon 01 Jan 2024 22:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44984
IP address blocks: 185.175.84.0/22 maxlen: 22
2a0b:df00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:05:07:c2:dc:b0:b2:7f:7c:3f:6d:d6:7c:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 1 22:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97cbbdc775455f95e0d05787f082c3d5220dbe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:97:a6:6d:69:ae:cb:d3:1a:54:76:16:4c:
ac:ca:4b:b8:cc:15:2a:66:84:65:5d:fc:6c:2c:56:
a3:2a:8b:e4:c8:f2:00:fe:50:e4:df:6d:4b:8d:96:
61:da:2b:ed:bc:73:02:5e:cc:9a:ed:91:7a:25:29:
b9:49:80:ea:8a:63:a5:65:08:4a:85:37:a1:30:f3:
2d:d9:55:27:1d:ca:4d:9b:ee:85:c9:e2:80:88:65:
f7:9d:a5:57:0a:74:cc:c8:40:d2:3a:95:6b:02:ff:
c7:fb:8d:3c:6f:d4:0a:87:b0:4d:90:ff:e7:32:cb:
5e:c2:78:6a:3b:8e:36:a4:56:3b:b2:b6:ac:1b:8f:
0d:6f:d4:3b:e2:c5:f4:ef:7a:69:e5:9f:30:05:cc:
f5:08:0d:ad:d6:38:a7:ea:54:07:ca:4a:bd:41:6e:
22:ec:af:7a:60:0a:05:43:7c:c5:f2:18:fb:eb:ff:
aa:49:95:9b:70:e3:eb:a7:af:a3:d7:aa:d0:57:df:
96:fa:61:77:82:f0:ca:45:36:3a:78:a9:c8:85:f0:
ab:fc:6f:93:ef:b0:4a:cb:bf:d3:1b:48:1e:78:21:
ec:f3:a6:bf:ef:ed:29:af:c3:fd:61:f7:37:6c:4e:
e8:ee:b5:8c:55:f9:13:69:6c:21:cd:eb:93:4e:5d:
8c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:BD:C7:75:45:5F:95:E0:D0:57:87:F0:82:C3:D5:22:0D:BE:9C
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.84.0/22
IPv6:
2a0b:df00::/32
Signature Algorithm: sha256WithRSAEncryption
cb:6c:dc:52:5f:b0:5f:77:ce:94:4f:69:d9:0f:7b:f2:cf:12:
02:9d:ef:22:ca:cb:fa:4c:8f:41:54:9a:05:d7:f1:8e:0a:f2:
8b:67:fc:1e:8d:db:34:76:f0:1f:66:2a:d5:2d:8a:30:ae:36:
76:47:97:ae:fe:88:26:35:70:a7:d4:89:71:7d:eb:3d:82:aa:
51:fe:76:7e:4d:22:14:11:96:77:60:3b:c1:d1:08:6d:f3:4f:
41:63:e0:74:11:b0:22:86:59:ac:dc:a4:78:a5:9e:53:73:1a:
9e:6c:08:ae:17:7a:99:cc:24:19:b7:d3:49:6a:46:f0:0b:18:
d8:36:c6:7d:e4:cf:14:c6:93:93:32:34:5f:5c:4f:a6:0e:94:
07:30:00:2d:e6:35:50:d7:33:6f:c3:ac:ff:9e:d2:ad:d4:a9:
98:da:df:d2:9d:88:7f:d1:70:10:82:f2:e6:a9:00:2f:9e:83:
5a:03:8e:c9:b4:8b:03:48:33:05:1c:c6:dd:d9:59:b3:0c:e4:
46:4a:dc:54:52:40:38:b8:81:2c:bb:79:47:69:c9:d0:2c:26:
5e:00:71:21:7b:a8:da:2d:3e:1a:95:8d:a7:f0:ab:62:1f:19:
08:50:dd:ff:96:2d:05:b0:96:7e:6a:ec:6c:37:ee:c3:71:77:
e8:81:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:07:13 2024 by rpki-client on console-fra.rpki-client.org