Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/hePP0BuAT2kbtIy4r4448gViSBA.roa
File: hePP0BuAT2kbtIy4r4448gViSBA.roa (raw, json)
Hash identifier: hIZLUbBL0KFHnoSnTOtvn1TwDBWWUw+RCyu+EnObfsI=
Subject key identifier: 85:E3:CF:D0:1B:80:4F:69:1B:B4:8C:B8:AF:8E:38:F2:05:62:48:10
Certificate issuer: /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial: 018CC86FB1CBADEA7D427E622F29CB1130E8
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/hePP0BuAT2kbtIy4r4448gViSBA.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 185.149.212.0/22 maxlen: 22
2a02:c6a0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b1:cb:ad:ea:7d:42:7e:62:2f:29:cb:11:30:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85e3cfd01b804f691bb48cb8af8e38f205624810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:b9:0f:a3:d3:57:82:8b:44:fe:e2:aa:69:
7e:81:61:f7:e1:38:0c:ac:17:3c:32:25:51:20:6e:
b8:ee:cc:51:e8:17:ef:f9:c0:a3:73:cf:28:28:a3:
21:b4:28:f3:ae:6a:da:21:cc:81:32:73:a6:80:96:
7b:2c:ff:95:e2:f0:b3:52:3b:19:77:ba:f1:49:97:
eb:ac:67:c2:3b:e4:68:ba:bb:4d:f4:73:48:92:0c:
f1:10:31:91:f5:1a:7d:44:37:f5:b4:72:11:12:20:
4a:4f:44:22:dc:40:b2:21:25:66:f7:e0:34:d5:d2:
ce:c0:cd:b2:77:2a:a9:fb:9f:54:13:17:72:67:8b:
16:c3:e0:15:7d:81:ca:54:85:c2:0d:e3:e1:6b:a2:
4e:f3:48:36:8b:9a:8f:c5:e0:d3:42:12:73:3b:94:
fe:93:04:11:9b:8d:3d:c1:e1:6f:e9:3c:28:7b:a3:
1e:f2:41:96:86:dc:2b:17:7f:e6:d1:46:cf:f5:01:
89:fe:30:cf:d9:64:16:f5:55:14:50:bf:51:0c:17:
b2:bf:42:f3:21:fe:88:5f:f7:b7:68:f0:95:22:57:
15:dd:59:a3:98:bd:c3:5f:6b:1f:92:9b:35:30:56:
24:b6:f1:e8:f4:17:c5:b4:84:25:a1:74:d9:9e:8f:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:CF:D0:1B:80:4F:69:1B:B4:8C:B8:AF:8E:38:F2:05:62:48:10
X509v3 Authority Key Identifier:
keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/hePP0BuAT2kbtIy4r4448gViSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.212.0/22
IPv6:
2a02:c6a0::/30
Signature Algorithm: sha256WithRSAEncryption
77:7b:48:11:95:e9:18:e8:2c:f1:66:d1:40:d5:e0:cf:40:18:
ca:cd:80:8c:33:8e:68:64:ba:a2:fd:d1:14:9e:df:c8:6d:95:
8e:89:58:7e:25:a7:b6:bc:92:5a:b9:90:98:08:81:b8:6e:c1:
17:26:6b:64:b7:db:24:6b:30:7f:62:1b:d5:e5:81:ee:30:b3:
8c:32:ed:e6:6a:4b:56:b8:6f:3d:0c:c0:03:25:5c:68:40:25:
fd:8a:57:27:2e:1f:af:e5:9e:21:0c:b2:11:4a:f9:c3:aa:a2:
f6:bf:93:88:bb:85:f1:eb:cf:69:c0:48:09:35:34:2f:df:00:
19:39:57:5d:86:95:ba:59:4e:5c:05:52:a9:94:17:69:17:0d:
9b:57:04:7d:5c:86:37:d6:c1:9f:1c:b2:68:1e:b3:df:da:03:
69:3f:ff:fd:3e:3d:a1:20:73:fb:f5:e6:d5:b5:21:15:ee:bd:
cc:5a:4a:5c:e5:85:2e:b6:71:1f:60:31:d7:70:34:bb:8a:96:
5f:19:6d:b6:81:b3:47:b3:3e:8a:2a:05:e9:14:91:b9:52:49:
62:13:89:ee:5a:ea:3e:0a:ed:b4:ff:3b:fa:83:f4:e2:2b:53:
0c:f2:32:5e:51:8b:2d:ad:02:94:fd:91:98:7e:f8:3d:a3:21:
87:0d:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:26 2024 by rpki-client on console-fra.rpki-client.org