Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/B26BmjlvFx2VhTLYFipYKjz95Tg.roa
File: B26BmjlvFx2VhTLYFipYKjz95Tg.roa (raw, json)
Hash identifier: 7zxwHkcgj9cAKNKc6v2DHdt9L5ra0kgjVZQ3ev83Imw=
Subject key identifier: 07:6E:81:9A:39:6F:17:1D:95:85:32:D8:16:2A:58:2A:3C:FD:E5:38
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018CC2DAE5C2B3CE2C6868D2F3161B05B63A
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/B26BmjlvFx2VhTLYFipYKjz95Tg.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208972
IP address blocks: 185.233.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e5:c2:b3:ce:2c:68:68:d2:f3:16:1b:05:b6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=076e819a396f171d958532d8162a582a3cfde538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:b1:89:0f:ce:a5:47:6e:57:6e:96:18:3f:
4f:b8:7d:48:8b:fc:de:fa:00:20:4b:08:1c:b8:95:
fa:e9:3b:91:53:7f:27:5e:60:52:a5:8d:e6:aa:90:
c4:83:2e:56:b4:77:0f:d0:fa:0f:57:9e:d4:64:5f:
58:46:12:2d:81:6f:dc:6a:2b:63:3e:f3:bd:1a:a4:
d8:08:dd:f8:5a:e7:ea:36:00:b2:78:78:a1:b0:cd:
64:82:82:69:38:e5:d9:50:6a:c1:df:b0:af:70:9a:
b0:61:1c:d2:01:37:f4:95:45:98:65:ad:73:95:60:
db:2f:9b:37:b2:63:6a:81:fa:54:cb:d0:45:21:5b:
3b:84:1e:ec:9a:05:4c:5a:33:86:65:3b:96:53:c9:
e2:24:4b:23:ab:99:53:e9:e4:1e:24:2d:58:10:b7:
94:a0:83:27:99:75:f5:c0:c4:27:07:a2:04:91:f3:
b9:db:96:5b:eb:d1:4d:cf:0e:68:c4:ea:c3:aa:26:
bb:29:58:59:17:ea:e4:11:51:71:4a:19:3f:11:b9:
99:5e:2e:81:ba:a6:0a:49:e3:5d:dc:4d:04:c8:71:
7f:d5:be:97:e2:93:b1:5f:89:63:ff:95:ed:05:71:
94:73:a4:04:1d:28:61:e6:63:23:9b:5c:64:08:d0:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:81:9A:39:6F:17:1D:95:85:32:D8:16:2A:58:2A:3C:FD:E5:38
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/B26BmjlvFx2VhTLYFipYKjz95Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.219.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d2:6d:2b:35:4a:fa:0e:d7:7b:ec:92:6e:04:f6:67:85:9d:
32:50:9e:e7:ec:a4:03:56:aa:46:2e:ab:b7:ec:f8:58:87:5d:
88:d3:63:00:7a:ab:66:88:f7:12:1d:36:69:f4:9d:f2:7c:c9:
ff:25:52:8d:ac:84:45:1c:fb:cf:e3:e1:d6:0b:88:2d:59:55:
80:5a:dd:0d:c0:5a:28:45:63:0f:72:db:05:70:69:bd:8d:8b:
e0:1c:eb:7f:60:18:5e:7d:6a:93:fc:f6:d8:a0:70:71:38:bd:
b9:c3:db:73:46:c7:92:bd:df:15:4e:9f:ba:58:ff:10:12:f3:
c2:ae:ec:31:5f:69:da:b3:de:5f:81:cd:eb:6e:70:a9:1d:33:
73:7b:fe:57:79:f8:ea:36:ad:bd:44:c7:0f:80:02:a3:b0:8c:
0b:4e:12:e2:d2:2d:3c:3e:70:86:68:fb:44:d7:83:74:c7:4b:
45:d3:c7:d1:cb:d3:9a:b2:e4:63:d9:a1:1c:a6:28:94:9f:c0:
2b:3b:7d:22:35:e3:b5:d2:41:6d:30:f5:14:e0:f5:60:d6:29:
dd:61:2e:84:18:cc:41:c1:8e:e2:75:57:90:e6:94:0e:bb:b9:
c6:07:67:72:bd:cf:10:7c:cc:52:8b:8a:dc:88:ea:fe:83:e9:
d7:8c:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:11:50 2024 by rpki-client on console-ams.rpki-client.org