Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/0eTNEvkCDFbrirQxYmL6pJxslQI.roa
File: 0eTNEvkCDFbrirQxYmL6pJxslQI.roa (raw, json)
Hash identifier: R4xZ+6mOpgKlDSk6XzC/EuD3DSkmTwlIEhFwHp/eRx4=
Subject key identifier: D1:E4:CD:12:F9:02:0C:56:EB:8A:B4:31:62:62:FA:A4:9C:6C:95:02
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 018CC8DECC2E61125542B7C2E5ED17B35812
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/0eTNEvkCDFbrirQxYmL6pJxslQI.roa
Signing time: Tue 02 Jan 2024 06:31:33 +0000
ROA not before: Tue 02 Jan 2024 06:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44545
IP address blocks: 185.212.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:cc:2e:61:12:55:42:b7:c2:e5:ed:17:b3:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Jan 2 06:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1e4cd12f9020c56eb8ab4316262faa49c6c9502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:aa:eb:35:33:18:9d:ce:18:90:30:05:fe:
4d:4f:42:44:de:35:27:06:f5:50:db:fb:f3:99:e7:
2e:da:26:27:3a:8f:c3:60:e6:38:84:bb:00:00:28:
6e:53:ed:a4:cd:0d:b3:b7:05:81:0f:1d:d6:41:85:
2d:a5:89:48:f6:0a:c4:b7:7e:75:39:b3:1f:cd:67:
4b:2d:2f:38:d7:6a:d6:58:f0:78:b2:f7:52:b2:4f:
54:e5:10:0f:e9:f7:7d:ec:87:26:9c:6b:13:39:00:
be:38:a5:4f:4b:53:05:3f:3c:fa:27:4b:cd:c2:91:
b5:b8:cc:77:c9:f7:ca:53:a3:6b:d8:66:b7:7a:71:
a0:99:b5:ea:17:1c:78:1b:2e:33:d9:00:d5:0f:f2:
2c:8f:9d:c2:4d:bb:87:24:b1:c8:4d:f8:e5:a1:a2:
b2:d3:aa:42:47:ea:ef:e7:4e:c2:c2:06:05:34:65:
f2:73:9d:f9:cf:94:39:03:2c:ba:d9:91:7d:67:db:
51:66:69:13:ab:79:f3:7c:75:7a:f4:b8:9b:12:c4:
e0:3e:97:e8:7d:94:69:08:58:b0:8c:4d:54:51:a8:
82:80:5c:26:19:91:1c:9c:33:1f:e2:69:f2:44:d8:
74:9d:4b:41:a3:ff:8f:c1:bd:3b:0e:09:b4:41:22:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:CD:12:F9:02:0C:56:EB:8A:B4:31:62:62:FA:A4:9C:6C:95:02
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/0eTNEvkCDFbrirQxYmL6pJxslQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.92.0/22
Signature Algorithm: sha256WithRSAEncryption
57:b4:55:c6:9d:7a:06:08:01:86:d1:25:4e:49:ed:26:ed:96:
bf:b0:70:b7:9d:1c:f6:30:7b:bc:b4:c0:ac:c2:0d:71:f7:1b:
43:69:55:6d:d7:e9:1a:f5:ce:db:7b:ae:f1:8d:cc:4a:57:40:
33:15:94:72:0f:c7:84:82:45:1c:4f:18:bc:0e:3e:19:67:2c:
87:57:82:fd:ed:f6:b4:38:06:44:89:15:3f:82:27:7d:e9:75:
41:0f:fa:ba:ec:7e:11:c5:46:ae:e6:40:3e:cd:a0:10:05:a2:
84:fd:2c:02:1c:44:e1:43:7a:67:75:f1:bd:73:e1:99:64:c0:
75:a9:0d:c2:1e:63:16:4d:c4:01:f7:69:f3:a5:62:47:c2:32:
03:2e:06:c6:41:72:9a:e6:45:2a:4d:2c:92:1e:da:cf:2d:61:
b6:f7:73:90:2c:79:0e:ee:d1:03:09:6b:5f:e6:d9:52:a1:00:
a8:60:03:be:aa:69:ce:78:0a:0a:23:42:e7:d4:2a:14:8d:0e:
43:cb:ae:a3:14:5f:ce:2e:c4:e8:ed:b7:d6:ee:86:b6:d6:7a:
78:93:17:82:97:8f:ae:55:d5:40:97:36:16:26:d4:75:95:ac:
46:7a:53:42:68:ba:4c:a1:b4:38:79:5f:66:d4:47:4e:de:a7:
dc:bd:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:54:44 2024 by rpki-client on console-fra.rpki-client.org