Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/dSaicd8eMS1DbYxbZOA66qTeQ4I.roa
File: dSaicd8eMS1DbYxbZOA66qTeQ4I.roa (raw, json)
Hash identifier: LRWRLRzYJIYUnSkT4RHJc2DyrsL1zRo1+65bkYG7uYU=
Subject key identifier: 75:26:A2:71:DF:1E:31:2D:43:6D:8C:5B:64:E0:3A:EA:A4:DE:43:82
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 018CC79539A0BAA5FC5A597CE996523C5093
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/dSaicd8eMS1DbYxbZOA66qTeQ4I.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60111
IP address blocks: 185.157.116.0/22 maxlen: 22
2a07:a680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:39:a0:ba:a5:fc:5a:59:7c:e9:96:52:3c:50:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7526a271df1e312d436d8c5b64e03aeaa4de4382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:7b:ed:ca:ec:c1:db:96:bc:d6:d1:69:c6:
b0:5b:17:a3:c3:2d:ac:1f:e6:fd:04:33:32:db:c9:
50:4a:a5:87:d5:b8:19:7d:9d:3a:f7:20:42:49:4f:
3c:1b:80:18:d7:b3:92:08:bb:ea:56:a5:94:f0:59:
a7:64:27:56:de:66:cf:c3:e2:f4:47:d1:fc:51:dd:
a0:60:6b:39:b4:64:fe:19:c6:8d:3f:80:43:30:e0:
1f:4a:b4:8b:78:2d:aa:a5:d1:d3:1f:74:b2:1c:a2:
32:14:5a:9b:bc:7a:18:35:a5:a7:57:f6:af:a7:cf:
4f:86:cf:66:2e:40:6f:70:35:0c:ef:a7:f4:ea:15:
3f:8a:f5:65:95:62:bf:b4:41:a4:1b:eb:35:fd:5e:
ba:10:9f:20:c2:e5:66:be:02:e5:be:ec:27:d4:ce:
24:04:9a:e4:f4:6f:30:72:a8:63:f9:fd:af:59:3e:
45:4e:97:40:04:23:3f:12:1a:eb:a8:84:10:62:82:
f8:b4:31:ba:10:e5:03:00:d7:0d:90:74:fd:6f:8d:
f1:a0:fd:17:7e:f6:6e:19:aa:c3:4a:34:95:12:5a:
e6:a4:99:c3:85:b6:2f:60:09:f0:33:96:52:c0:73:
18:ec:f9:5e:ee:e0:71:f4:67:5c:1d:d4:d1:04:32:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:A2:71:DF:1E:31:2D:43:6D:8C:5B:64:E0:3A:EA:A4:DE:43:82
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/dSaicd8eMS1DbYxbZOA66qTeQ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.116.0/22
IPv6:
2a07:a680::/29
Signature Algorithm: sha256WithRSAEncryption
20:6b:cb:f3:61:51:a4:32:55:8c:45:58:7d:6a:6c:e4:5d:0e:
39:c3:3c:cb:1a:f9:01:3d:d9:b4:35:b5:c4:80:f9:d4:a8:07:
13:9d:b9:67:d9:63:04:59:32:fe:c0:88:e2:b9:04:9c:3a:15:
36:14:db:21:c6:72:d5:7b:4e:64:41:3b:5f:87:0b:35:97:ba:
3b:b0:ae:39:db:31:30:c9:d0:69:68:06:5d:bd:3f:6d:eb:26:
66:6f:15:1b:a2:16:2d:6d:ac:76:60:af:ef:17:75:b4:a0:4e:
1d:fe:ae:c3:98:f7:5e:4a:6b:b3:3c:97:92:7e:1a:04:c1:47:
93:59:fd:e6:9b:94:ac:03:53:62:82:07:9b:13:f7:81:69:0f:
57:44:3f:ad:0a:0d:4d:b0:44:4b:4d:09:08:35:bf:e5:0c:33:
09:12:a7:7b:2f:a5:89:56:6d:54:a2:af:02:9c:51:73:fb:20:
5c:90:a9:44:a2:9c:fa:84:5f:39:ce:ff:c7:5b:d0:a1:6f:03:
12:c0:0c:f2:b9:1a:ac:3f:78:8c:c0:b0:b1:cf:f6:ca:84:d8:
21:21:6c:3e:0d:e9:58:e2:5e:2f:9d:21:bf:92:ab:7a:9d:dd:
9e:bd:f8:41:a9:c3:17:23:a9:f7:6d:25:13:57:18:0d:0e:2b:
db:69:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 20:46:56 2024 by rpki-client on console-fra.rpki-client.org