Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/rbGJu-19FyYCfFpBw5Oxao96RdU.roa
File: rbGJu-19FyYCfFpBw5Oxao96RdU.roa (raw, json)
Hash identifier: QZmOGlhNQO0zk4vlG0w6wLC0NhdZHV8cLHMUA7ZbECQ=
Subject key identifier: AD:B1:89:BB:ED:7D:17:26:02:7C:5A:41:C3:93:B1:6A:8F:7A:45:D5
Certificate issuer: /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial: 018CC9BBAE768EFE5F0AA25502E7760109E2
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/rbGJu-19FyYCfFpBw5Oxao96RdU.roa
Signing time: Tue 02 Jan 2024 10:32:49 +0000
ROA not before: Tue 02 Jan 2024 10:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207020
IP address blocks: 185.203.138.0/23 maxlen: 23
185.203.136.0/23 maxlen: 23
2a0a:e740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ae:76:8e:fe:5f:0a:a2:55:02:e7:76:01:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
Validity
Not Before: Jan 2 10:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adb189bbed7d1726027c5a41c393b16a8f7a45d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:ff:d3:3a:da:c8:6a:01:c9:3e:b1:d4:a2:
4b:23:11:e8:7e:02:ec:b7:ca:22:ee:d2:d3:9b:ad:
c9:2b:c9:29:c5:f2:bc:9f:af:97:fd:15:bb:5a:be:
b2:ab:4b:ea:97:44:0e:a2:6a:68:8b:4f:ff:b3:07:
6a:6d:67:23:93:82:3c:64:a9:1c:61:6d:f6:95:fb:
b3:85:d6:d6:d4:e2:d1:e6:ba:c9:99:2b:6b:ab:1b:
82:d0:ff:c9:4b:3d:24:9b:3c:74:1a:97:7c:4c:8d:
6a:c7:92:da:3d:46:13:31:4e:70:84:fc:1e:0f:d1:
e7:89:73:0f:96:87:cf:b9:34:be:90:de:6f:d1:07:
62:c1:0c:a7:a6:3d:6c:ad:d0:b7:38:2b:b2:13:58:
68:31:c7:7a:b9:6b:5d:84:c8:9d:02:bc:00:c7:c7:
2c:63:62:74:bc:fb:f3:b1:2d:85:30:81:ed:06:e8:
b5:31:c8:cb:4c:0c:30:6e:26:24:78:e2:15:90:15:
c5:a1:72:bc:33:46:42:54:f8:85:6e:6d:c7:d0:db:
71:a3:8e:1b:83:c6:85:9d:0c:37:a2:ec:31:f3:19:
09:67:8d:f5:98:25:29:61:2b:b1:1d:a6:b5:6f:1e:
d9:ec:1d:c2:9c:e2:9b:46:75:ab:31:be:b0:3e:26:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:89:BB:ED:7D:17:26:02:7C:5A:41:C3:93:B1:6A:8F:7A:45:D5
X509v3 Authority Key Identifier:
keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/rbGJu-19FyYCfFpBw5Oxao96RdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.136.0/22
IPv6:
2a0a:e740::/29
Signature Algorithm: sha256WithRSAEncryption
05:56:30:dd:ee:e6:4d:c0:ff:25:1a:14:4f:08:f0:5c:af:38:
8c:aa:28:32:5d:b7:c0:7b:90:9f:07:f6:ef:c1:b1:b1:46:ef:
c3:24:45:02:5d:c7:ea:2e:bc:56:64:9f:52:ee:21:d0:32:c4:
a0:82:90:3c:ee:47:8b:7b:10:dc:5e:e4:91:a9:d2:30:58:16:
a6:af:00:46:3a:fa:4a:1e:77:97:5a:e3:d7:f9:85:6e:1e:9e:
ec:14:89:17:e4:28:ab:ef:fc:aa:f6:28:b6:35:56:98:c5:48:
39:45:3b:ab:1d:79:eb:f5:f9:2a:df:0b:55:46:3b:7d:56:0e:
2d:10:e1:58:d1:be:03:67:72:5e:26:df:2f:33:60:1e:35:18:
2b:9e:34:76:01:f8:d8:6c:a3:78:fa:b3:a0:ac:b4:ad:9a:37:
45:4c:56:db:74:87:8f:a8:8a:ea:e8:cb:24:36:31:44:b6:ec:
2f:90:10:38:07:98:61:24:53:8a:e1:d3:a1:ba:67:b5:38:4f:
8b:e4:b2:18:63:13:1e:c4:cf:84:07:10:66:2c:04:1d:8f:26:
fa:33:87:d1:73:fb:8a:a3:b9:a4:2e:b3:9f:ae:44:44:d2:72:
7a:99:28:40:47:5b:48:d9:d6:6c:e5:51:7c:52:00:e2:5c:a2:
f9:5f:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:15 2024 by rpki-client on console-ams.rpki-client.org