Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/G_2t5ELAYTWK-4Px4DzSlswmT1o.roa
File: G_2t5ELAYTWK-4Px4DzSlswmT1o.roa (raw, json)
Hash identifier: h2obMrAPnDhT/njIesq2w9uJRigsX2QhRclFq3Dy/TU=
Subject key identifier: 1B:FD:AD:E4:42:C0:61:35:8A:FB:83:F1:E0:3C:D2:96:CC:26:4F:5A
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 018CC42476F2DA46E1251F7E10434002049C
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/G_2t5ELAYTWK-4Px4DzSlswmT1o.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205643
IP address blocks: 185.207.73.0/24 maxlen: 24
185.207.74.0/23 maxlen: 23
185.207.72.0/22 maxlen: 22
185.207.72.0/23 maxlen: 23
185.207.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:76:f2:da:46:e1:25:1f:7e:10:43:40:02:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bfdade442c061358afb83f1e03cd296cc264f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f2:e5:f2:d1:1e:c5:bf:f4:aa:09:f1:03:a7:
e6:48:a3:9b:a7:f1:cd:35:22:22:fc:f4:53:26:23:
e0:8a:b5:0a:21:37:4b:c5:a3:c9:fa:23:e3:03:1f:
c4:02:35:c9:e7:63:c6:b1:e5:14:30:72:3d:4d:e4:
50:69:ec:d0:62:b2:85:3f:9c:3d:16:94:f0:60:57:
6f:43:67:8d:6f:0f:9a:10:af:96:fa:e2:31:99:ab:
96:97:dd:99:b4:1c:5a:57:cc:15:dc:ff:dd:0a:68:
e2:ad:b7:44:1c:a5:23:1d:7f:e3:0f:3f:ab:bb:31:
a4:ee:38:5f:c1:49:73:f0:f4:68:00:ad:5c:bd:94:
e1:34:af:1f:1d:ed:24:f0:06:19:c6:68:2b:ba:36:
0a:f7:36:8e:c4:24:63:83:24:b0:31:c3:ba:6b:0d:
b0:35:c8:8b:07:9d:0e:44:59:3b:30:55:48:7b:a6:
60:e7:8b:af:d9:6c:f7:ed:ba:4c:d3:0a:32:09:fb:
2b:e7:87:41:c0:23:61:d8:ed:e7:62:c6:98:f6:55:
31:93:22:d7:77:9c:d8:57:07:3a:6c:6f:d8:be:de:
b9:60:31:7b:f8:28:9c:65:87:55:85:af:8a:89:7e:
f6:ba:a0:dc:d1:c1:93:f4:a9:0f:c6:91:25:14:b8:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:AD:E4:42:C0:61:35:8A:FB:83:F1:E0:3C:D2:96:CC:26:4F:5A
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/G_2t5ELAYTWK-4Px4DzSlswmT1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d9:e4:8a:03:4f:b9:2e:02:5c:c6:15:9b:35:4b:da:42:b3:
33:52:00:43:bb:0e:90:79:be:e9:66:db:da:26:45:a1:94:08:
63:79:ac:dd:52:84:46:30:40:cd:90:30:99:c7:72:94:5e:3b:
a4:55:52:60:13:72:6a:00:f5:f0:d1:45:e3:0d:f8:fe:85:03:
42:dc:c8:78:f1:5a:a3:d8:87:1c:1e:9e:ac:da:c0:7c:66:d2:
6d:d7:06:e1:66:7e:55:ed:77:29:bc:df:ab:58:ac:42:02:3a:
31:9c:31:57:b0:a3:0e:17:a9:54:6c:b8:b6:76:17:e5:7e:f7:
8f:2f:4a:d1:ee:e8:e6:28:ee:eb:aa:b6:b4:d2:6f:29:0e:58:
3e:5c:44:4e:2a:83:1c:27:2d:a7:38:b6:40:56:93:6f:f5:4e:
e1:b5:97:b0:5a:86:ab:79:85:bd:db:b8:14:d5:f6:d0:71:69:
f8:c1:b0:88:b3:be:70:27:68:01:81:49:5a:05:91:53:82:8c:
af:88:be:c5:3c:26:71:17:21:cf:8b:03:f5:65:72:d6:51:d5:
a0:34:c7:12:de:d5:a3:f1:a6:c7:98:2d:3b:a3:48:4e:1c:39:
7e:83:6a:e4:85:24:f6:29:cd:8f:20:2f:ac:b9:de:ad:aa:89:
f3:65:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:58 2024 by rpki-client on console-ams.rpki-client.org