Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/9J8IIIUf5gbHg2GirykrOAPVPTY.roa
File: 9J8IIIUf5gbHg2GirykrOAPVPTY.roa (raw, json)
Hash identifier: Nhx05aj4Z94KY8CGpaWMUAxXqJLNyEFXODhII4mU9G0=
Subject key identifier: F4:9F:08:20:85:1F:E6:06:C7:83:61:A2:AF:29:2B:38:03:D5:3D:36
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 018CC8017C92F173F290CA9F0EA8195C81D3
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/9J8IIIUf5gbHg2GirykrOAPVPTY.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62141
IP address blocks: 185.38.92.0/22 maxlen: 22
2a04:74c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7c:92:f1:73:f2:90:ca:9f:0e:a8:19:5c:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f49f0820851fe606c78361a2af292b3803d53d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:20:0d:f1:b0:37:e3:e9:47:48:dd:ad:9a:
6e:cd:57:c9:0d:df:6a:26:ce:7d:a2:c5:c1:67:2e:
7e:09:97:dc:58:f5:f9:ed:13:87:be:22:03:b7:51:
32:22:4c:5f:63:60:22:17:3a:04:43:9e:08:7f:54:
80:e9:2d:e4:60:76:7c:c7:ee:d1:48:c9:3f:57:f7:
8e:3f:ce:42:e0:83:b4:a2:3c:a2:32:b8:ca:06:d3:
53:75:f1:25:5f:44:a0:fc:78:51:cd:be:d2:aa:a2:
c4:ba:5a:0a:51:a7:50:b9:8b:7d:0f:f2:2f:3f:6c:
21:7b:da:57:c9:fb:27:33:17:f5:63:c3:49:44:31:
8e:7e:95:c3:ee:7a:d4:ca:0e:87:12:96:d9:37:e7:
63:58:ae:2d:79:7a:6b:f8:a9:34:a9:51:a7:25:94:
88:99:c7:02:92:c4:28:8f:1d:12:e9:99:a2:c1:a4:
51:71:c8:09:9f:67:e3:94:f5:af:a4:4c:c7:f8:7e:
c0:a5:e4:1c:3b:5b:66:c8:5d:f2:e9:61:4b:68:f9:
bc:73:da:96:89:43:45:d0:b4:76:5f:14:31:2e:de:
95:6b:f1:d7:06:a7:9f:f0:a7:e3:de:24:3e:b0:f9:
5b:54:b8:aa:57:af:5e:73:cb:2e:cb:e9:ec:43:01:
98:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:08:20:85:1F:E6:06:C7:83:61:A2:AF:29:2B:38:03:D5:3D:36
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/9J8IIIUf5gbHg2GirykrOAPVPTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.92.0/22
IPv6:
2a04:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:cb:42:af:ad:7c:65:e7:4c:5d:cd:c3:22:05:f6:a2:79:e0:
07:62:ba:8f:da:a8:10:32:30:cf:2f:3d:cd:37:fe:4b:a1:8a:
64:d7:d3:3c:a1:ea:3f:28:a1:e0:d4:3e:3a:c2:8c:b2:ab:d1:
45:a5:99:61:d1:24:43:bd:04:aa:5b:4c:c7:d2:2a:f0:f6:bd:
10:e0:31:54:f2:b3:71:b2:ec:6e:59:e3:61:b3:32:0b:6c:20:
ac:71:d8:1a:43:5e:28:f0:ab:d3:ca:78:ee:0c:0f:49:91:e0:
7d:2c:4b:a3:3c:f6:8b:f2:aa:c3:dd:99:8d:26:30:0c:52:9d:
43:fe:94:da:ac:e2:9d:a5:3a:5a:b1:33:3b:e7:39:0e:23:17:
a6:19:23:99:a2:34:8b:87:3c:73:66:74:f4:e3:85:68:16:ed:
eb:82:fb:fc:b2:d6:c5:57:24:38:22:2c:cc:f6:fb:db:26:6f:
8b:b6:0d:3e:b0:79:bb:a6:03:46:27:86:31:1e:0b:68:28:cd:
9a:45:27:4e:a5:5b:e3:a9:af:95:a7:0d:45:04:11:72:91:76:
d9:a2:29:9f:55:34:3a:fd:0e:c3:a7:8e:c4:c9:de:78:f8:e6:
07:d5:d5:6d:96:9a:42:02:77:e2:b4:a8:5f:f7:bd:28:53:0a:
17:2c:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:49:41 2024 by rpki-client on console-ams.rpki-client.org