Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/Be03YwNU_zJObJJ-SM8Tm4k9lbo.roa
File: Be03YwNU_zJObJJ-SM8Tm4k9lbo.roa (raw, json)
Hash identifier: LE7Sd9WPz2by5DGy5qddjMyD6DIkwR/NsrumNKhNJc4=
Subject key identifier: 05:ED:37:63:03:54:FF:32:4E:6C:92:7E:48:CF:13:9B:89:3D:95:BA
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 01929023654B62254DBBC4515E0FAF00DCB8
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/Be03YwNU_zJObJJ-SM8Tm4k9lbo.roa
Signing time: Tue 15 Oct 2024 12:24:51 +0000
ROA not before: Tue 15 Oct 2024 12:24:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201715
IP address blocks: 185.32.108.0/22 maxlen: 22
185.32.108.0/24 maxlen: 24
185.32.109.0/24 maxlen: 24
185.32.110.0/24 maxlen: 24
185.32.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:23:65:4b:62:25:4d:bb:c4:51:5e:0f:af:00:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Oct 15 12:24:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05ed37630354ff324e6c927e48cf139b893d95ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:c9:08:cb:52:1f:36:fe:4d:00:5d:9c:ef:
0e:da:60:05:bf:22:57:6a:09:51:8f:95:43:e5:ba:
bc:40:b2:25:72:16:2f:18:6a:43:f6:c9:ab:c1:28:
e9:7e:a1:e8:aa:3a:28:5d:53:f7:c4:69:84:55:e8:
af:5f:3c:24:fc:c4:db:5e:0a:d5:38:1a:80:eb:06:
7a:c6:bc:b1:6a:14:1e:7d:ca:1c:73:3c:0b:7a:be:
42:b3:41:6a:86:d9:46:d9:fc:08:92:28:d0:3f:ac:
c1:99:e1:5c:cc:6b:05:7d:ba:57:07:d8:a8:79:35:
00:46:27:ed:b2:0b:b3:bd:90:a3:90:3c:63:64:4d:
4e:34:ce:6b:25:70:6e:69:3b:78:9c:82:03:01:0a:
2e:a5:1f:18:16:19:64:64:05:54:34:b3:5a:f6:e0:
17:dd:74:32:05:f0:56:fc:a3:f7:98:48:c6:84:19:
64:07:da:cb:22:a9:58:3f:ad:3a:95:09:ca:4b:26:
35:cd:3b:60:c9:33:e0:aa:d5:32:aa:33:fa:f9:58:
ad:0c:1b:d2:a4:df:6f:62:8c:6a:1e:3c:b0:2a:ed:
c3:d8:52:bf:6b:f1:80:8d:6f:65:da:43:7a:cc:c7:
89:0f:39:f9:70:a4:24:29:c1:5d:3e:9e:ae:84:fb:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:37:63:03:54:FF:32:4E:6C:92:7E:48:CF:13:9B:89:3D:95:BA
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/Be03YwNU_zJObJJ-SM8Tm4k9lbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:6a:20:9e:2c:8a:f9:3e:6b:2f:af:b9:6f:00:41:f9:11:fe:
56:97:4a:4a:69:9f:cd:3b:b5:32:4a:99:b5:7d:70:5c:b6:44:
a0:94:4c:c6:08:cc:9e:05:46:33:91:62:81:af:c2:a9:1b:23:
dc:66:10:a2:fa:94:ec:f1:fd:35:95:d7:12:a2:08:d3:67:ae:
40:89:67:e4:30:84:50:be:78:c1:d0:0e:43:54:0b:62:bf:e9:
77:42:e1:c8:cf:d3:41:ba:b6:eb:4c:49:99:07:1d:85:81:61:
5d:46:6a:a3:0c:20:b8:0e:6e:9a:3f:63:5c:ca:f6:21:c7:5c:
06:81:da:cc:45:4a:6f:e4:26:b4:70:6a:f2:e2:67:21:d5:c6:
b0:1b:fb:ee:60:73:52:01:f4:87:e8:36:6e:c7:04:1a:17:12:
a9:86:dc:c6:65:b6:43:60:76:4c:72:d8:50:23:15:3e:0b:82:
d0:e7:e1:70:dc:55:36:da:6d:ff:53:19:08:66:7e:e4:de:86:
d2:54:79:66:da:29:1f:46:be:51:50:16:5c:49:48:58:6d:40:
0d:97:b2:45:30:79:2b:c6:9f:bf:29:c0:22:d1:47:5b:b8:ca:
61:43:00:95:dd:e0:3f:64:51:b7:24:b4:34:bf:04:c6:5a:34:
29:04:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:58 2024 by rpki-client on console-fra.rpki-client.org