Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa
File: sbb2gq46AubH1oC8WOJfvB_zhrk.roa (raw, json)
Hash identifier: dAnOBf1EJPCk/xRynmWu8Gx3phAWywzfQkR9lv9sUgo=
Subject key identifier: B1:B6:F6:82:AE:3A:02:E6:C7:D6:80:BC:58:E2:5F:BC:1F:F3:86:B9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012046403CF6EE29A5913CFE7B25B2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 94.176.110.0/24 maxlen: 24
185.241.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:20:46:40:3c:f6:ee:29:a5:91:3c:fe:7b:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1b6f682ae3a02e6c7d680bc58e25fbc1ff386b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:ec:67:61:5a:f1:3a:5f:24:65:da:c1:bf:
f6:03:94:23:0b:45:2b:2e:3f:2e:77:77:9d:b7:f6:
87:1d:12:9d:13:4b:01:b6:6c:b4:02:7e:26:1f:6d:
34:7e:71:7f:6d:47:20:22:83:3c:1b:b6:ee:5f:c2:
66:da:45:82:00:c9:ff:ea:d5:92:16:68:9f:83:62:
f2:b9:56:5e:4c:dc:91:76:98:4a:a7:88:fc:d0:98:
e8:80:73:f4:e1:00:90:2b:f3:03:c6:df:59:10:6a:
7d:6f:de:cb:12:44:2d:71:39:80:75:c7:c6:8e:1e:
06:56:aa:57:d8:6b:b5:e4:b3:36:e9:5a:8c:c9:50:
93:5c:a5:20:6b:3d:1d:87:c1:6a:23:7d:a6:9d:50:
15:bc:5c:d0:de:aa:ad:dd:0d:5a:df:ff:c5:05:a7:
30:09:99:89:51:70:ab:d7:1a:b1:61:aa:83:04:c6:
12:a8:16:e2:8b:be:70:f2:bc:1f:cc:05:4c:31:81:
d8:48:02:98:58:6e:5c:b9:ec:dd:ae:87:94:6d:af:
59:d5:78:ca:f0:e7:fe:9f:ef:fa:80:98:8a:65:0f:
49:f1:70:0a:1c:14:70:d0:11:6a:21:ee:68:96:53:
7c:2e:5e:6a:99:53:e2:82:86:69:68:8d:76:72:f4:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:F6:82:AE:3A:02:E6:C7:D6:80:BC:58:E2:5F:BC:1F:F3:86:B9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/sbb2gq46AubH1oC8WOJfvB_zhrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.110.0/24
185.241.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:38:f5:14:18:b5:a8:f9:3a:d4:7d:ed:73:4a:fb:3c:f8:86:
f5:c9:5d:72:13:03:ee:cb:f6:95:0f:8d:9a:2f:ba:53:54:d9:
5f:4c:0a:e7:94:05:98:81:63:6e:01:10:55:29:fa:f4:02:46:
ca:72:57:4f:61:8a:5e:88:9c:64:ad:69:e0:bf:1f:2d:1b:44:
1d:d0:30:7e:ee:60:0f:f6:99:49:83:04:f5:3d:02:59:38:e1:
e4:83:27:07:ca:78:8a:99:cd:2e:01:d2:e2:69:16:94:ca:12:
a9:c4:95:4f:28:89:f6:c1:7b:be:36:72:c6:39:ab:84:13:3e:
28:26:1d:84:b0:a3:a5:eb:d2:14:f5:5b:1b:73:15:13:de:1e:
ff:6d:a7:e7:44:e3:55:6c:64:7b:37:a9:ac:0e:f7:ee:58:92:
ff:70:5a:e4:9e:59:d2:ac:3c:da:13:7a:c2:03:37:d5:02:94:
da:2a:57:d7:a8:ae:6e:4d:0c:ec:39:c1:c2:e7:f7:35:2e:fb:
6e:a7:e4:f8:a2:5d:6b:db:8e:ce:b7:df:92:b6:44:14:eb:a2:
59:80:08:f4:d8:3e:66:6c:9d:a4:b6:43:ab:08:07:7f:57:2a:
36:19:3d:9f:75:f4:8c:09:2c:4a:28:a4:05:2b:88:b2:46:ae:
0f:21:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:03:56 2024 by rpki-client on console-ams.rpki-client.org