Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/vu3dCCR7azflVMq8KbpuQPe1V_8.roa
File: vu3dCCR7azflVMq8KbpuQPe1V_8.roa (raw, json)
Hash identifier: +FC1NwUd6rT+LrpNdEkpnRgX2T4q/hlBwoH0k5+xD/w=
Subject key identifier: BE:ED:DD:08:24:7B:6B:37:E5:54:CA:BC:29:BA:6E:40:F7:B5:57:FF
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 01923F9D56CF514994032AF945E0D7BE0078
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/vu3dCCR7azflVMq8KbpuQPe1V_8.roa
Signing time: Sun 29 Sep 2024 21:08:48 +0000
ROA not before: Sun 29 Sep 2024 21:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214662
IP address blocks: 185.228.98.0/23 maxlen: 23
185.228.98.0/24 maxlen: 24
185.228.99.0/24 maxlen: 24
2a0b:dcc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3f:9d:56:cf:51:49:94:03:2a:f9:45:e0:d7:be:00:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Sep 29 21:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beeddd08247b6b37e554cabc29ba6e40f7b557ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:da:d5:ec:17:f1:69:66:04:d1:86:0c:51:
28:ec:1c:9e:51:78:fe:fb:97:9f:19:bf:65:cc:15:
95:52:fc:9b:16:4d:79:11:4f:fd:02:61:90:fc:89:
9b:66:7a:0f:6b:f6:39:d6:bf:a1:d0:d3:f2:d5:aa:
da:fc:ab:3b:83:c5:a3:0c:3e:3b:6b:ef:99:5a:10:
14:3c:91:15:2a:95:96:ea:37:2d:50:62:44:13:ba:
b2:12:97:bf:16:4d:26:59:b9:99:48:f2:60:c4:1b:
0a:0f:2f:36:cb:e1:4d:a9:cb:70:f5:3b:45:27:3a:
68:1c:34:e6:58:08:bb:0a:a7:74:60:9a:7a:c2:64:
b1:60:d0:c3:8d:a2:9a:09:79:3b:42:c9:6d:22:40:
99:53:d2:2e:ed:4a:10:e8:e5:9a:9d:59:2e:c0:5f:
c3:39:12:f2:62:6b:14:c3:4c:56:cb:2b:19:34:6a:
83:f9:fd:b9:a2:52:52:52:15:40:ed:83:21:83:8b:
a6:21:b8:1d:6c:df:5c:27:0f:fd:56:7c:40:0d:cf:
c1:6d:60:e5:b1:29:ec:1f:f4:e1:dd:4d:41:6a:ab:
13:39:53:db:db:42:49:d4:5a:aa:30:6d:5d:f2:00:
d2:53:36:3c:bb:7d:95:c9:e2:56:9a:5f:3c:c9:ae:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:DD:08:24:7B:6B:37:E5:54:CA:BC:29:BA:6E:40:F7:B5:57:FF
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/vu3dCCR7azflVMq8KbpuQPe1V_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.98.0/23
IPv6:
2a0b:dcc7::/32
Signature Algorithm: sha256WithRSAEncryption
25:94:9a:3d:5e:af:e2:ac:dd:ef:7f:25:e2:8e:6a:e0:07:81:
c9:9b:72:c6:bb:8a:5e:5d:85:cc:82:5a:bb:da:9d:e5:80:7d:
46:fd:03:08:a9:25:0e:1b:1c:27:7d:ff:6c:03:1b:5e:49:6d:
5f:35:e9:68:95:e6:2b:a8:ca:0d:45:80:91:3d:fd:f0:f3:af:
2c:8d:ca:4f:90:3b:5a:a6:d0:9a:c3:ae:5c:49:73:95:51:be:
ad:8d:aa:38:1a:a2:53:b8:e6:e5:74:60:6b:fa:aa:74:a9:08:
37:f3:7b:ab:d2:5c:8b:7e:5c:04:1e:62:e5:48:54:4b:58:52:
b5:47:2b:8c:e2:36:18:31:f3:b8:2d:06:15:6c:48:50:79:fe:
a7:ca:b1:b7:6c:67:04:23:b1:9a:21:28:b0:f8:58:6b:95:82:
d3:f3:ea:f3:27:69:15:95:fc:7a:64:19:3b:eb:c5:0e:0b:03:
3c:5b:74:74:f5:63:c6:8a:89:c8:ac:0e:bd:f4:cc:c1:86:62:
37:00:ba:0f:ea:8d:72:f7:e8:11:50:8f:37:1b:40:fe:5b:aa:
6d:7a:d0:73:e7:ee:92:b8:ac:9d:81:0c:53:41:82:9e:f2:7f:
dd:8a:80:34:f8:66:f6:7d:ed:a4:4f:fc:0e:7b:66:d0:50:99:
ac:da:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:33 2024 by rpki-client on console-ams.rpki-client.org