Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8qViCiKE7iygXEoBGAXXwkLoEiE.roa
File: 8qViCiKE7iygXEoBGAXXwkLoEiE.roa (raw, json)
Hash identifier: nNhaAZ8OxYeaBlSY4uRxU0Lhx3osUEpfABC/CL++fEU=
Subject key identifier: F2:A5:62:0A:22:84:EE:2C:A0:5C:4A:01:18:05:D7:C2:42:E8:12:21
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0192BA6FB9E8C8009E11F49436FD1E04C14E
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8qViCiKE7iygXEoBGAXXwkLoEiE.roa
Signing time: Wed 23 Oct 2024 17:32:17 +0000
ROA not before: Wed 23 Oct 2024 17:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41720
IP address blocks: 185.122.184.0/23 maxlen: 23
185.122.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:6f:b9:e8:c8:00:9e:11:f4:94:36:fd:1e:04:c1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Oct 23 17:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2a5620a2284ee2ca05c4a011805d7c242e81221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:26:ce:49:ae:18:23:3f:f5:fe:74:3a:91:
be:99:bb:00:ce:21:20:48:ba:15:d7:06:2d:6c:4b:
85:1a:27:85:ee:20:8f:71:0a:fd:f3:37:43:51:0d:
4e:e5:b9:ca:e2:d3:26:a5:74:b5:19:dd:fb:ed:21:
36:70:07:c0:31:ee:bf:e1:6a:5e:dd:5b:56:4e:47:
2f:a0:27:4f:a8:67:15:f3:15:e1:4f:93:b3:25:b6:
4a:15:be:d3:d8:ca:51:51:af:57:fd:81:4a:88:8e:
6d:59:14:30:09:ea:cd:34:f9:df:11:27:96:02:1b:
5e:50:7b:85:90:63:5d:d0:5a:fd:ad:63:eb:0c:9e:
1a:89:a3:16:0b:96:f6:e2:31:61:ed:4e:d8:ef:92:
de:e4:3d:ed:06:18:e6:03:99:a5:49:4f:21:ff:58:
dc:14:0f:57:27:bb:26:09:08:88:93:24:b5:36:69:
5e:39:3c:2e:c7:e1:71:a8:d4:68:9e:0d:07:e3:4e:
e1:1d:3e:46:14:7d:f9:95:f9:89:eb:0f:74:77:d5:
5e:8d:4c:c5:3f:4b:95:df:e3:17:e7:2a:b5:09:ff:
fe:2d:b0:11:db:2f:ef:cb:94:14:6b:76:b8:6a:a1:
28:38:c9:95:0e:43:7e:3b:1c:9d:ce:65:1c:d0:a8:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:62:0A:22:84:EE:2C:A0:5C:4A:01:18:05:D7:C2:42:E8:12:21
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8qViCiKE7iygXEoBGAXXwkLoEiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:92:99:5d:78:b6:5a:9f:09:ae:1a:39:35:02:75:99:fe:68:
e6:cf:b8:5d:6e:a5:28:f0:ae:40:1b:08:9c:59:c3:8f:9c:6a:
63:dd:31:da:70:2e:ec:93:a5:93:a1:5b:95:9f:9a:0f:8c:c4:
c0:1b:29:fc:8b:32:dc:ab:0e:96:f5:a9:3c:ce:cc:8a:e4:2d:
c6:2b:4b:66:40:f9:a1:28:6c:2a:f4:6a:9c:7c:e8:5a:4e:07:
58:4e:6f:e7:af:ae:46:7f:c5:44:f8:13:81:26:e0:07:d9:c9:
79:3f:1f:c3:fa:9a:7c:07:20:79:97:b0:b6:67:55:62:14:fb:
9e:05:69:be:db:7d:73:d7:f9:fa:44:82:47:31:7d:be:c3:3c:
1c:f3:f3:54:09:ee:62:e7:f4:b4:f9:5c:d1:07:c3:8d:54:c4:
d7:ac:de:30:79:e2:f5:91:51:40:bf:05:7b:75:82:71:83:b8:
fe:5a:8d:3e:83:46:8e:f0:f8:ec:d1:cd:22:32:f3:e6:75:f1:
c1:99:ce:83:1d:ef:dc:df:45:b9:9c:ad:11:ac:3a:11:3c:5c:
e4:18:9b:6f:e1:20:ea:72:dd:9a:c9:08:ad:92:b2:32:93:8e:
9a:90:34:c1:49:db:a0:ed:81:d1:d0:d4:c2:dd:41:e7:6d:a4:
83:ff:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:59:08 2024 by rpki-client on console-fra.rpki-client.org