Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/2Z6hrOQ_QZgvO6qXIMIVX64B7RI.roa
File: 2Z6hrOQ_QZgvO6qXIMIVX64B7RI.roa (raw, json)
Hash identifier: sn/i8lxdm4AaKSTqUUjQ/6ZeIyLYNEAnB2Bu4iydl/Q=
Subject key identifier: D9:9E:A1:AC:E4:3F:41:98:2F:3B:AA:97:20:C2:15:5F:AE:01:ED:12
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 018CC6B80A95375ADEA3FD9D3BAE8DE8BAD9
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/2Z6hrOQ_QZgvO6qXIMIVX64B7RI.roa
Signing time: Mon 01 Jan 2024 20:29:59 +0000
ROA not before: Mon 01 Jan 2024 20:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211719
IP address blocks: 185.244.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:0a:95:37:5a:de:a3:fd:9d:3b:ae:8d:e8:ba:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Jan 1 20:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99ea1ace43f41982f3baa9720c2155fae01ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:5e:3d:b6:65:8a:50:de:cb:3d:68:1e:1b:
06:16:39:3c:ef:db:f0:fb:cc:53:2b:71:d0:1b:4d:
d0:de:db:70:c5:cf:a4:0f:35:ef:7a:61:2a:6d:2f:
7a:ad:14:31:e8:f7:b5:f0:88:3f:ca:e6:86:59:f9:
f3:45:60:cf:ef:cd:18:c2:67:30:13:a5:28:05:c4:
46:18:02:31:41:89:2b:ae:bc:b6:f9:4b:a7:73:c3:
c0:17:c8:1e:80:39:27:99:11:b9:d1:2d:8b:e3:9e:
f8:ff:d8:fe:ec:9d:78:12:3d:48:b1:84:09:c6:2e:
e0:94:93:0f:1a:20:58:09:95:bc:f7:f9:66:43:11:
33:db:26:92:9c:79:59:56:df:37:c0:b0:14:20:96:
45:99:89:f0:9f:77:75:d5:9b:16:71:3f:19:e9:f0:
a5:13:78:7a:03:5e:b0:1d:fe:35:73:d6:4a:fa:29:
6e:8f:08:c2:5d:b1:d1:47:07:25:52:20:0e:fd:75:
8d:89:c6:55:41:bc:ef:65:16:18:9e:f5:89:81:17:
56:b8:f5:86:45:d0:39:47:b2:5e:46:87:b0:88:ed:
3d:9c:cd:99:38:07:ff:c4:36:62:cf:57:f1:25:f6:
e7:d6:fa:91:b8:76:79:9c:4a:04:a1:5c:64:1b:82:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:A1:AC:E4:3F:41:98:2F:3B:AA:97:20:C2:15:5F:AE:01:ED:12
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/2Z6hrOQ_QZgvO6qXIMIVX64B7RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:10:c2:08:54:bd:60:58:3b:b9:72:9f:9a:a9:6c:02:be:b2:
2d:79:e0:56:0b:1b:37:f6:cc:d2:f5:8b:56:74:4a:05:e7:17:
40:14:96:5b:fd:69:20:b5:b7:45:14:25:0e:2b:9a:59:7e:4d:
df:10:89:98:ef:93:fd:39:17:44:d6:08:27:5b:1b:23:62:5a:
b9:c0:42:7b:54:d1:a9:fc:50:bc:23:f0:65:27:7f:6f:a5:26:
44:a2:5f:73:4b:ae:49:92:a5:6f:f0:46:da:12:44:ec:9d:5a:
bf:4d:63:5b:5c:92:7d:eb:d9:37:66:b1:2d:3c:55:09:52:f4:
14:23:3b:f5:0e:5b:19:12:e1:26:fe:55:7f:a9:ec:55:ee:b0:
be:b6:8f:64:6a:9d:04:e9:a3:40:3a:98:5d:bd:43:1d:b7:81:
98:74:89:09:ad:3e:01:31:2f:c9:9c:eb:5c:03:22:e1:18:49:
59:38:fc:02:c9:d7:7f:cb:c4:4a:97:29:b6:f5:8f:9f:bf:09:
d7:94:93:33:3d:63:57:bb:80:7b:bf:3e:63:59:46:df:6e:20:
f3:6a:8e:d1:49:49:b9:3c:61:27:e2:ac:61:7f:f4:6c:94:7a:
9a:cd:2b:31:c2:04:82:a2:10:24:35:f0:01:82:a3:d5:a0:5c:
57:e7:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:44:31 2024 by rpki-client on console-fra.rpki-client.org