Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa
File: DrIkAho-ZwquJuE0fpsWLiOwU3E.roa (raw, json)
Hash identifier: DZMIyHIu10VhOLAThpfpB2CyszQ/rOX/GE2fYKvLznA=
Subject key identifier: 0E:B2:24:02:1A:3E:67:0A:AE:26:E1:34:7E:9B:16:2E:23:B0:53:71
Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial: 018CC2DB2DEDD5904B7EECA41C731AEB70D3
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207056
IP address blocks: 185.167.122.0/24 maxlen: 24
185.167.121.0/24 maxlen: 24
185.167.120.0/24 maxlen: 24
185.167.123.0/24 maxlen: 24
2a0b:6a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:ed:d5:90:4b:7e:ec:a4:1c:73:1a:eb:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb224021a3e670aae26e1347e9b162e23b05371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:e0:2c:94:16:d6:41:46:c3:76:62:75:87:
ce:97:ab:90:c4:7f:14:03:33:b1:94:eb:42:76:d8:
1e:a6:aa:51:b0:d6:ce:73:7e:df:02:9c:3c:86:68:
0a:c8:cf:67:9f:f2:d6:dc:c9:c2:b1:c8:8c:40:3d:
54:ed:b9:e8:e1:8e:aa:7b:56:c9:fa:9a:d9:5c:ef:
9f:e9:38:1e:5e:37:85:38:15:5d:1d:76:11:79:03:
89:52:25:57:6a:8b:db:49:d0:90:a6:5f:aa:bc:1b:
11:66:b3:4e:ea:da:f7:ed:66:0f:43:ca:b4:a9:ef:
e9:24:2f:0a:04:3d:f8:b0:ec:36:e5:50:84:1f:f0:
3a:9b:52:c5:a8:a7:f0:f4:f8:7d:22:36:58:9d:68:
65:0c:7c:16:7f:c9:25:de:de:ca:bc:94:88:17:6f:
56:0c:ad:a3:d3:c5:cb:6d:21:01:f1:a3:44:a2:e8:
83:ed:d7:f0:6c:35:c9:94:1a:e6:03:84:53:fb:3d:
19:40:3c:fd:2f:d0:f9:2e:3c:d0:d8:08:79:52:31:
3b:3d:a0:1c:62:23:e2:a1:44:0c:72:bb:4f:08:81:
20:14:06:8d:15:71:44:08:23:4e:f2:83:31:8b:6e:
4a:69:98:ad:14:74:9b:87:ee:72:11:64:90:e9:98:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:24:02:1A:3E:67:0A:AE:26:E1:34:7E:9B:16:2E:23:B0:53:71
X509v3 Authority Key Identifier:
keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DrIkAho-ZwquJuE0fpsWLiOwU3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.120.0/22
IPv6:
2a0b:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:3c:b4:d6:b4:f8:0f:d0:cb:8e:68:ff:ea:58:a9:be:2a:d1:
75:40:ec:87:46:f8:ab:da:39:19:c9:72:6d:c9:85:c4:38:df:
cc:12:24:39:b3:d2:0b:a8:a6:f7:8a:88:1b:d4:bd:ac:95:4c:
a3:3f:b6:bc:01:9a:dd:94:e2:08:d3:22:b7:1b:6d:1d:45:8c:
32:d9:03:4c:b0:72:bb:e5:a9:fc:0b:1d:1c:88:88:36:55:b8:
9e:85:08:65:75:a8:5e:32:7e:51:3b:f6:d9:d1:1a:bf:d7:8b:
81:71:35:a3:ed:9d:b0:0e:63:8e:01:63:a3:67:36:27:98:7f:
cc:23:f7:7e:07:f5:cf:41:74:c2:f1:c2:1a:08:fa:d2:85:89:
7e:68:39:e8:d0:3e:1a:f4:a3:91:be:cc:5c:bf:f0:68:f2:7a:
86:ac:20:c2:88:9d:61:46:fe:d2:dd:3f:70:7e:c0:f1:65:bc:
a8:52:7a:f3:72:61:aa:d9:ba:75:c1:eb:8f:ca:5e:66:3d:f2:
cb:75:15:13:35:ce:bb:44:95:b1:11:32:90:0f:3d:6e:21:8c:
b8:d2:01:4e:89:10:ac:58:8c:87:56:6e:bb:c2:e6:9c:8f:09:
59:d1:fe:61:32:60:19:57:f4:bf:7f:0c:85:f5:6a:28:f7:74:
97:2c:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:54:19 2024 by rpki-client on console-fra.rpki-client.org