Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/s2yvV0L1-C0qdehykuxT7RynUgs.roa
File: s2yvV0L1-C0qdehykuxT7RynUgs.roa (raw, json)
Hash identifier: zYdG8wdVzQBqz0rT+L34LqsRJfQjIi/nNASldi0D4bE=
Subject key identifier: B3:6C:AF:57:42:F5:F8:2D:2A:75:E8:72:92:EC:53:ED:1C:A7:52:0B
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 018CC8DF8BEA114569C98310B0E3D818373C
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/s2yvV0L1-C0qdehykuxT7RynUgs.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200735
IP address blocks: 185.140.253.0/24 maxlen: 24
185.140.252.0/24 maxlen: 24
185.140.255.0/24 maxlen: 24
185.140.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8b:ea:11:45:69:c9:83:10:b0:e3:d8:18:37:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b36caf5742f5f82d2a75e87292ec53ed1ca7520b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:3f:73:3f:d8:0b:98:60:d9:54:60:b4:8b:
47:30:73:c5:27:27:7c:f5:91:1f:17:97:20:f2:e9:
c5:e9:33:40:7a:f1:52:cd:37:34:aa:dc:36:f3:16:
fd:00:8d:55:40:17:90:9f:bc:e9:92:7e:86:49:28:
ca:92:47:8e:21:cb:c0:3b:a3:c5:cb:5a:c0:70:b8:
da:39:88:bb:81:86:bc:25:f6:b8:19:9f:cb:67:96:
a5:f4:7a:9a:46:d4:6d:58:8e:c8:e6:fd:45:2c:87:
84:39:a1:00:26:20:76:b1:ef:f5:a0:f2:96:3d:cb:
76:f6:9a:73:ff:32:b8:4d:11:0b:52:68:cd:36:28:
33:55:2e:92:87:d8:79:00:1e:90:af:57:1d:73:6a:
bd:84:45:14:3f:cc:0c:c2:f5:a2:51:3c:54:d3:37:
eb:da:4b:ca:87:dc:55:05:fb:b3:c9:e1:9c:15:60:
d7:3f:38:e3:5b:11:9d:32:a5:cd:ba:10:d0:ba:f3:
97:9f:ee:ca:ce:25:76:64:1c:32:dc:c9:ed:98:df:
ad:2e:e1:a1:ed:07:fe:d8:d5:13:78:c1:17:f1:4d:
4f:1d:a2:76:f8:c8:22:f7:6d:dc:31:8d:46:c5:6e:
6a:b6:5d:d8:b5:9c:45:35:a5:0c:c1:ac:0f:1d:0f:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:AF:57:42:F5:F8:2D:2A:75:E8:72:92:EC:53:ED:1C:A7:52:0B
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/s2yvV0L1-C0qdehykuxT7RynUgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:a2:22:3a:8e:d3:22:b7:bd:ce:b2:92:a1:95:4f:cb:d1:0b:
c9:03:a2:10:f2:d5:f0:97:60:9c:03:3d:8c:dc:48:df:c9:64:
9b:b4:5d:0d:f8:5d:b4:e5:97:20:e3:41:ef:02:73:01:58:77:
b0:ff:77:70:7d:22:0e:05:89:83:f4:02:8e:9d:f0:31:6f:0d:
6b:cc:9b:ab:9c:8f:9f:37:ff:f0:39:48:1c:00:ff:cc:8f:43:
f8:aa:47:bf:c3:5e:56:47:e6:a6:73:cb:b3:ac:72:f3:05:b3:
ea:df:df:b6:52:0b:b2:91:a2:43:a0:57:b4:85:42:3d:00:85:
21:c1:57:a9:c3:82:da:da:e8:8c:ab:21:6e:1f:77:df:bb:fb:
e8:ab:d7:67:5a:6a:d0:6e:32:70:1d:b1:f4:f8:b3:9c:f9:15:
e6:62:f4:4a:15:2b:73:f7:72:c2:c4:cc:6d:86:47:99:f5:0d:
54:c8:e2:26:a7:48:7f:9e:48:91:ae:36:ba:e1:d2:16:ff:29:
cd:6f:68:ce:44:76:0b:ae:af:7c:dd:53:08:81:a1:83:11:07:
ae:cb:ce:0e:ca:15:0c:51:f0:9c:4d:4f:b5:9c:08:61:07:e5:
25:fc:6e:bd:42:01:5e:91:79:13:ce:ee:ae:50:ad:17:2b:95:
38:a6:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:18 2024 by rpki-client on console-fra.rpki-client.org