Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/m7PdVTUT3W-ro32es-VVFnzk2Fc.roa
File: m7PdVTUT3W-ro32es-VVFnzk2Fc.roa (raw, json)
Hash identifier: cuKGnN+/Y4i6zRu7TWXF6diM9igiU91ulWUcMrz8QQI=
Subject key identifier: 9B:B3:DD:55:35:13:DD:6F:AB:A3:7D:9E:B3:E5:55:16:7C:E4:D8:57
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 018CC94E6F0EB0A5CBD5E93959DFC75B3506
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/m7PdVTUT3W-ro32es-VVFnzk2Fc.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43268
IP address blocks: 185.239.152.0/24 maxlen: 24
185.239.152.0/22 maxlen: 22
185.239.154.0/24 maxlen: 24
185.239.155.0/24 maxlen: 24
185.239.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6f:0e:b0:a5:cb:d5:e9:39:59:df:c7:5b:35:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bb3dd553513dd6faba37d9eb3e555167ce4d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:14:af:82:20:ee:fb:87:93:2b:59:6c:4b:
1e:e1:47:92:62:03:db:1f:78:0b:4a:df:e9:c6:fa:
ad:be:e4:d5:a1:cd:7b:47:41:1a:ed:ad:43:2f:12:
ab:4d:25:4f:18:af:fb:f8:f6:62:16:a2:47:32:81:
29:34:10:d9:de:fe:f5:95:35:e9:27:4f:4e:f9:97:
18:3f:44:ac:02:a7:d4:1f:f7:74:c7:3b:80:d4:15:
fb:3a:b0:50:cb:3c:7f:ae:39:dd:f4:9d:07:6b:8e:
80:f9:7c:66:6a:50:01:32:af:6c:91:93:bb:1d:aa:
73:a8:8b:72:a5:bf:04:4d:ce:89:ba:82:f7:73:f8:
a2:60:03:54:79:36:fa:15:b8:ba:fe:fc:e8:28:17:
06:42:dd:4c:d8:db:ff:33:ad:43:7e:80:6c:bd:5b:
1a:80:39:42:a8:a4:6b:21:9c:a4:a1:b6:56:b9:5d:
4e:08:86:54:d6:59:59:90:7d:c3:b4:23:d1:ad:b6:
ad:af:ac:d5:59:00:a8:fd:02:4b:05:b4:82:9f:f3:
a8:b2:b9:4a:a4:7e:18:dd:e1:c7:c7:81:33:fb:f1:
dd:0f:18:a0:8e:00:f3:78:8c:92:92:8c:72:57:29:
eb:8b:6a:c5:11:4f:61:78:e6:b9:6c:23:71:ca:1a:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:DD:55:35:13:DD:6F:AB:A3:7D:9E:B3:E5:55:16:7C:E4:D8:57
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/m7PdVTUT3W-ro32es-VVFnzk2Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.152.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1d:a4:5f:19:5b:ed:25:2e:48:d9:2c:ac:95:26:b0:19:38:
1f:a8:14:e0:63:81:f3:3f:72:7c:a2:38:ce:94:39:db:e4:96:
ca:a3:3c:54:cd:b1:43:fd:63:5f:38:24:91:4b:45:76:8e:f2:
86:ae:46:5f:5d:98:bd:07:b1:fa:05:c2:62:fb:33:fd:25:4f:
d8:6d:cc:5b:61:9e:f1:12:80:d7:eb:74:72:42:f7:33:53:12:
64:4b:48:c9:6e:79:e9:38:78:c1:93:ed:97:20:7c:ad:78:cc:
f1:12:1d:4f:60:36:ba:4b:a0:64:88:89:b2:39:8e:02:d7:28:
d9:9c:6e:7e:d2:eb:30:23:c2:2e:b0:a7:88:3d:40:03:8f:37:
84:c6:5e:47:6c:50:2b:fe:e0:8d:c5:62:09:8b:af:07:43:1a:
5f:eb:ba:d0:2b:52:4b:36:34:21:8c:72:77:7c:3a:f1:11:16:
7a:1f:57:c8:a7:d8:f7:2b:1d:65:86:c1:5d:19:2d:7c:8c:6f:
d3:a6:a3:0a:7c:0e:71:8b:4b:3f:2d:61:e1:1f:e7:2e:d9:aa:
3f:8d:f0:04:72:f8:43:62:76:8e:7a:f6:fc:c0:44:fe:8b:08:
82:c0:14:59:07:4b:29:b6:70:56:b0:5b:40:d3:5b:bc:7f:4f:
d8:5b:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:51 2024 by rpki-client on console-fra.rpki-client.org