Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/52Lh5-9fYa38RJ311JsUORaf9YU.roa
File: 52Lh5-9fYa38RJ311JsUORaf9YU.roa (raw, json)
Hash identifier: TEyyJnM3ilreagZSVvVHsTMm4rNZ9Pq0YzagoTm6gK8=
Subject key identifier: E7:62:E1:E7:EF:5F:61:AD:FC:44:9D:F5:D4:9B:14:39:16:9F:F5:85
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 018E099CB3F2CD4872DE2D7BEA2F0A231CAF
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/52Lh5-9fYa38RJ311JsUORaf9YU.roa
Signing time: Mon 04 Mar 2024 13:17:28 +0000
ROA not before: Mon 04 Mar 2024 13:17:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201237
IP address blocks: 185.81.20.0/24 maxlen: 24
185.81.21.0/24 maxlen: 24
185.81.22.0/24 maxlen: 24
185.81.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:9c:b3:f2:cd:48:72:de:2d:7b:ea:2f:0a:23:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Mar 4 13:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e762e1e7ef5f61adfc449df5d49b1439169ff585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:f2:1b:2d:4b:fd:c0:1f:9d:74:65:be:e6:
2c:c6:9f:cb:ce:bf:7c:45:96:5d:72:33:85:2b:88:
8d:1b:d1:29:8a:a3:e6:a6:02:33:cd:05:0e:5a:6f:
f5:fe:d0:80:1e:99:32:7f:41:a2:3a:4d:cf:a2:4b:
53:08:16:07:5c:00:7b:42:94:ca:87:9d:1e:e0:bc:
62:36:c4:17:a7:cd:cc:eb:62:71:ce:54:e1:23:12:
0f:58:51:94:cd:77:c2:17:c0:08:1d:50:fa:32:78:
7f:04:b5:b8:02:cd:15:55:d9:45:57:2d:4b:68:cd:
8b:a2:1f:0d:a9:94:4b:3a:fe:e7:c9:c5:8e:f9:fd:
21:92:a3:fb:84:67:88:b8:b3:78:95:e9:cf:ed:2c:
1a:c6:c0:ec:c6:8e:e3:87:f9:89:f9:ab:c8:da:66:
82:26:89:33:d6:e7:19:54:bf:f0:a0:f0:7c:95:91:
86:51:e5:ff:5e:9b:f0:fa:93:f2:72:e7:b5:95:ba:
ea:f5:39:be:9a:f3:8d:f4:85:17:f8:5e:de:d0:c1:
31:e7:37:8a:fc:12:23:97:ba:b1:ea:78:a4:c5:7c:
02:75:02:f9:de:73:18:30:32:46:9c:e3:ae:30:30:
1d:4a:f8:56:93:3f:c6:21:e3:eb:b6:5b:8c:10:a0:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:E1:E7:EF:5F:61:AD:FC:44:9D:F5:D4:9B:14:39:16:9F:F5:85
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/52Lh5-9fYa38RJ311JsUORaf9YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:84:68:b1:cb:e0:be:b8:d7:c2:81:a7:d3:ab:dd:a9:c6:eb:
af:8a:d4:ff:2e:58:f9:7e:58:53:aa:a4:f8:bb:ae:09:ab:94:
88:ac:34:26:10:2b:5c:ae:52:d4:e0:80:dc:22:2f:03:db:62:
1a:f8:2f:65:63:b5:75:7d:0f:c5:b7:09:b1:64:b7:62:c3:59:
dd:b8:23:99:de:e0:ab:bc:0f:29:53:48:8b:01:97:eb:db:5d:
e3:31:bb:52:ae:91:51:09:33:06:17:65:29:67:fc:5f:06:f4:
14:f2:54:99:c4:c3:88:de:a4:7a:00:9b:67:46:d2:7d:8f:cc:
c6:8d:a5:f9:f6:b3:2f:02:a8:f1:49:27:14:11:60:60:d9:3a:
b9:45:93:19:c1:91:d5:52:c5:e1:34:ae:7d:32:28:29:d7:db:
94:ad:a5:59:ca:58:b1:b1:ee:9e:b0:5f:8f:df:54:0c:2b:bb:
a6:7a:09:2c:74:79:98:e2:fe:0a:c2:71:47:22:e1:0d:74:d0:
ea:48:3a:3a:9a:8d:f4:a3:d3:3d:94:42:b9:15:d2:d5:22:21:
bd:11:d7:f3:e0:00:b9:7d:e8:be:60:cf:36:01:2a:11:cf:7c:
0c:2b:27:7b:b4:3a:58:70:6b:57:94:b0:b1:d6:e4:64:5b:4d:
04:a3:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:22:38 2024 by rpki-client on console-ams.rpki-client.org