Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/DN3ecQDL_wDqjYyctywV8GMnmPc.roa
File: DN3ecQDL_wDqjYyctywV8GMnmPc.roa (raw, json)
Hash identifier: Sba2vmMLjAdudedpAXgOE5log/eieSdseSgB+8M2ep0=
Subject key identifier: 0C:DD:DE:71:00:CB:FF:00:EA:8D:8C:9C:B7:2C:15:F0:63:27:98:F7
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 018CC64A8C561ADF4E5EFE8B6E61BEDD1525
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/DN3ecQDL_wDqjYyctywV8GMnmPc.roa
Signing time: Mon 01 Jan 2024 18:30:23 +0000
ROA not before: Mon 01 Jan 2024 18:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 185.218.120.0/24 maxlen: 24
185.218.121.0/24 maxlen: 24
185.218.122.0/24 maxlen: 24
185.218.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8c:56:1a:df:4e:5e:fe:8b:6e:61:be:dd:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cddde7100cbff00ea8d8c9cb72c15f0632798f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:a8:42:e5:9b:b3:23:0d:9b:95:8b:b4:b3:
99:60:44:27:af:e6:42:92:93:0f:85:9f:aa:a4:95:
93:fc:6f:87:1a:3d:08:15:3a:24:a6:4f:a3:40:2f:
3d:78:ec:08:2e:96:ef:31:2c:db:34:68:83:9b:41:
04:43:c8:0c:bd:67:df:06:08:49:75:50:3c:ee:75:
a1:fe:ed:53:c7:56:ad:c6:82:01:29:60:20:29:5a:
4a:1d:a6:a1:aa:00:96:c7:52:9f:bc:43:d2:ce:0b:
ed:fc:f7:a5:27:7d:a3:e2:bf:7e:55:f7:87:4b:7d:
cf:c4:dc:b1:15:73:d5:f6:2e:7d:85:a9:d3:1b:fb:
c8:2b:69:f3:59:91:50:13:56:cf:b6:09:02:72:cd:
5b:9a:dc:a6:85:2a:db:fb:ec:e6:95:2f:cd:32:89:
78:a3:67:b9:39:57:7f:cd:49:5f:05:e6:8b:53:fc:
8f:34:0a:73:32:65:0b:0b:8e:50:19:c8:f4:ce:c8:
c5:44:d2:27:ef:2d:55:24:b1:18:77:fb:2d:86:ab:
38:33:32:89:19:5b:65:ad:20:a9:bf:8a:7a:b7:12:
b2:a3:63:ee:30:e9:aa:da:34:38:79:96:92:90:6b:
2c:fb:5a:38:ea:2b:aa:b0:e5:85:a4:a3:27:87:c7:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:DE:71:00:CB:FF:00:EA:8D:8C:9C:B7:2C:15:F0:63:27:98:F7
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/DN3ecQDL_wDqjYyctywV8GMnmPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
03:04:75:a6:7a:b3:85:a3:43:95:fe:d3:ba:18:1b:e5:90:01:
6e:e9:c8:e7:61:ec:52:1a:0c:d7:70:08:98:94:23:b4:c4:4a:
19:72:1b:41:4c:c6:fe:d3:0e:56:a9:e1:49:06:67:ec:e8:15:
46:89:b4:0e:74:f6:64:00:3c:91:43:68:c0:59:2a:73:e7:1a:
63:81:59:a7:d8:3a:f8:c4:ea:d4:ae:96:09:d0:84:c0:04:41:
94:69:72:57:b7:d4:fb:ba:03:44:6c:f2:51:53:0c:e4:3c:a2:
7c:10:19:ae:67:69:35:ce:9f:2a:05:58:ab:3b:fa:33:ef:82:
cf:88:e5:f8:c3:86:0b:b7:01:8e:17:9c:fe:23:74:e7:5e:1e:
db:ad:ca:3d:d6:7c:bb:5a:db:2d:54:32:68:c9:74:38:fe:5b:
f5:cf:08:70:69:9d:a3:83:92:ae:fb:b6:64:37:4e:cf:d7:3c:
d2:88:f4:5a:0d:ee:ec:31:8b:08:0a:35:d3:92:46:a9:3e:4e:
96:a7:36:08:17:01:3d:16:06:68:81:bb:8a:97:ba:63:24:6e:
a6:5c:e0:ad:40:b8:d9:a5:3d:e6:2e:9a:46:72:0a:e2:bf:87:
20:76:9e:5c:d6:c3:c7:a2:c6:21:83:ee:fe:0a:9c:62:20:3d:
2d:ec:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:54 2024 by rpki-client on console-fra.rpki-client.org