Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/g2OwKzGJNKjvR4pC4wNjeJkXXew.roa
File: g2OwKzGJNKjvR4pC4wNjeJkXXew.roa (raw, json)
Hash identifier: hOBYZLW2IZ12xqBnz8K29Zae0KNmggCyO04JGWYM5kw=
Subject key identifier: 83:63:B0:2B:31:89:34:A8:EF:47:8A:42:E3:03:63:78:99:17:5D:EC
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 018CC26D0F564B30F7754DAB1FA6AB675B3D
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/g2OwKzGJNKjvR4pC4wNjeJkXXew.roa
Signing time: Mon 01 Jan 2024 00:29:36 +0000
ROA not before: Mon 01 Jan 2024 00:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52195
IP address blocks: 185.12.20.0/22 maxlen: 23
46.149.208.0/20 maxlen: 23
2a02:ea80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0f:56:4b:30:f7:75:4d:ab:1f:a6:ab:67:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jan 1 00:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8363b02b318934a8ef478a42e303637899175dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:98:9d:95:59:a0:1e:9a:80:b6:12:85:b2:
f4:18:8c:7a:5f:44:0a:51:82:1b:29:39:9e:28:70:
e8:d4:a8:2b:29:d1:b1:9a:3c:4b:d3:bb:c1:44:0d:
f2:4e:8a:19:1c:d4:5f:bb:1b:3c:ee:36:5d:c0:e2:
d2:36:31:d5:40:f7:49:84:d0:21:a7:58:b1:26:6e:
08:a4:db:3d:a0:b3:a8:e9:07:9f:46:ed:77:88:20:
87:f7:fe:89:62:71:7f:8c:70:a3:69:6a:7f:27:c7:
2e:38:61:79:b7:1b:2a:c5:24:28:1e:ea:60:46:59:
0e:03:74:e0:f1:44:2f:40:f2:53:f0:e0:0f:a2:dc:
6c:2d:3c:a6:74:69:a5:c1:a7:18:eb:8e:51:a0:63:
10:fe:47:68:5b:e6:4c:6b:82:ca:56:45:e0:e9:ec:
7d:7b:b7:f5:96:24:2f:2e:a4:42:39:3f:bc:46:32:
a8:5c:e5:02:91:fa:57:c4:7e:ec:bb:dc:b6:bf:ea:
5d:4a:ce:b8:d7:cc:c4:b0:5c:21:b0:cf:be:5c:c9:
ba:87:7f:c9:68:55:67:3c:b0:7c:2e:23:6a:cb:18:
14:3e:7b:02:84:8b:66:be:df:cb:8a:54:df:4d:f4:
a8:5a:d8:dc:d0:12:6e:5e:0c:2a:ab:1a:91:b7:a7:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:B0:2B:31:89:34:A8:EF:47:8A:42:E3:03:63:78:99:17:5D:EC
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/g2OwKzGJNKjvR4pC4wNjeJkXXew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.208.0/20
185.12.20.0/22
IPv6:
2a02:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
92:45:57:a7:e0:4c:db:3f:bd:71:a8:1c:c8:ee:57:c1:9c:e3:
78:25:7b:22:b6:e6:37:f7:a6:07:1f:d9:e3:d8:12:dd:f0:2c:
62:f4:37:e9:2b:a7:80:28:c7:af:3d:1e:02:dc:09:1c:c8:2f:
ab:ff:04:fd:81:60:bb:8e:9d:25:f0:b6:3e:72:b5:9b:43:28:
1c:8b:43:7a:4d:f0:e5:96:d7:7a:de:01:80:f7:95:56:53:95:
83:91:f1:eb:74:7b:4a:ea:a7:22:40:87:ce:3e:b0:15:37:b6:
ea:8c:70:3a:a7:2e:dd:2c:65:74:17:f2:f5:33:2b:8c:12:18:
ba:db:47:f4:a5:8b:a6:55:4c:fe:5d:80:b9:4d:de:3d:df:95:
92:ea:dc:63:86:aa:c2:87:1c:cc:46:58:e3:bd:e4:9e:76:84:
f0:f5:cd:fc:40:9f:76:15:14:ad:ac:0e:fc:8e:98:ef:48:30:
42:c7:a6:af:ef:ae:be:21:33:e1:fc:4a:eb:01:ff:31:03:bc:
57:6e:7d:74:48:30:75:5b:02:65:89:34:2a:82:9b:d8:6e:73:
7d:52:e3:65:e7:9a:9e:1d:bf:6a:3b:ba:96:4a:4d:5a:03:a9:
be:e0:8c:68:d0:f3:c8:c3:3b:90:05:d7:25:37:c4:c9:78:8a:
14:01:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:11:00 2024 by rpki-client on console-fra.rpki-client.org