Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/Hz2_vhRJs-pq6SMfUea-SOsNfkU.roa
File: Hz2_vhRJs-pq6SMfUea-SOsNfkU.roa (raw, json)
Hash identifier: MXc3DyOC3bHqSGX5gG+PR+75Qu6vBHWACQCAOPYfxL4=
Subject key identifier: 1F:3D:BF:BE:14:49:B3:EA:6A:E9:23:1F:51:E6:BE:48:EB:0D:7E:45
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 0191E7191E5B289F878E0841494DE9C5CD76
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/Hz2_vhRJs-pq6SMfUea-SOsNfkU.roa
Signing time: Thu 12 Sep 2024 16:37:48 +0000
ROA not before: Thu 12 Sep 2024 16:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203462
IP address blocks: 185.134.68.0/22 maxlen: 24
185.139.181.0/24 maxlen: 24
185.139.182.0/24 maxlen: 24
2a06:eb00::/29 maxlen: 29
2a06:eb00::/32 maxlen: 32
2a06:eb01::/32 maxlen: 32
2a06:eb02::/32 maxlen: 32
2a06:eb03::/32 maxlen: 32
2a06:eb04::/32 maxlen: 32
2a06:eb05::/32 maxlen: 32
2a06:eb06::/32 maxlen: 32
2a06:eb07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e7:19:1e:5b:28:9f:87:8e:08:41:49:4d:e9:c5:cd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Sep 12 16:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f3dbfbe1449b3ea6ae9231f51e6be48eb0d7e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:18:c4:f6:35:9e:47:f0:a1:c7:ab:33:d9:
f6:0a:82:c1:b5:a7:10:f3:5f:6d:a7:1d:62:58:66:
01:d1:4a:b1:5f:de:d5:82:d2:d3:62:9c:17:05:e9:
8c:d9:bd:c6:cb:4c:dc:16:2c:df:4c:e8:ef:f7:ec:
b0:1c:95:09:c0:70:c5:fc:99:10:49:a2:a6:6e:8b:
5b:5d:f5:45:74:a6:4d:d4:42:f9:e3:02:61:62:71:
22:cb:5d:41:1b:4d:21:f9:de:18:03:ff:5a:c7:af:
b1:28:e9:17:d0:f8:8a:26:29:c5:3f:cb:3e:4d:57:
bd:8d:d2:8d:44:63:e1:89:6a:09:7b:4e:88:58:a1:
6a:9b:14:cd:f2:0e:81:14:54:84:72:1e:e6:e1:e7:
82:97:ab:31:b2:d6:a4:1d:df:df:19:84:9e:21:8b:
b5:8f:71:a3:32:4d:3e:a4:6b:e1:2e:4f:87:d8:ba:
82:11:ea:f7:74:61:bc:34:fa:e2:60:28:10:3c:58:
3e:bc:82:d3:d7:da:28:0c:a7:ab:36:02:bf:cc:cd:
89:ae:51:87:53:e4:01:a2:a6:85:02:92:60:9c:e0:
ca:fb:f8:9f:89:fe:5a:92:06:1e:17:9d:9c:49:bc:
ad:af:11:b0:65:ce:63:35:ec:87:30:9f:54:f6:d7:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:BF:BE:14:49:B3:EA:6A:E9:23:1F:51:E6:BE:48:EB:0D:7E:45
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/Hz2_vhRJs-pq6SMfUea-SOsNfkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.68.0/22
185.139.181.0-185.139.182.255
IPv6:
2a06:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:02:75:56:14:f8:18:6a:d5:08:af:8d:9f:97:52:5a:50:8d:
7e:eb:34:cb:67:e2:78:40:a3:db:f5:02:42:65:fc:62:a4:88:
f5:50:d8:b2:cc:34:27:79:28:47:c1:db:fc:f7:33:c1:e1:01:
7e:57:69:de:76:95:cf:9d:94:62:9b:01:e9:83:49:cd:50:ee:
8f:9e:2a:6b:bd:ff:b5:7c:57:08:19:f4:c6:b3:34:60:3a:a3:
32:7e:22:77:99:7f:4a:1b:ea:16:28:ab:4b:68:c0:b0:fe:56:
2e:95:da:81:69:1b:c5:8a:fa:92:9b:4a:8e:bb:eb:c6:42:9c:
79:b0:c2:0b:20:97:87:84:01:77:6a:f5:af:76:7e:1a:59:c9:
c9:87:76:35:0d:a9:a7:7a:65:8e:d0:84:1c:21:ac:e4:ec:6f:
13:71:f5:63:98:d4:6d:68:7a:8f:48:0d:46:e8:ff:c0:c6:87:
b3:b4:d0:2f:b0:15:8b:04:8c:e7:a8:0d:cb:a2:41:25:0b:8d:
27:8f:4a:18:d9:c0:a7:20:25:61:7c:50:47:80:9e:9e:74:f9:
a8:36:ae:7b:f4:80:df:5f:0e:4c:5b:da:94:29:65:a1:7a:a8:
57:05:40:55:8b:f2:47:a0:82:92:b0:ba:20:fb:81:e8:d2:5d:
64:40:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:25:31 2024 by rpki-client on console-ams.rpki-client.org