Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/Ko6dq6ry6C6mWNlOnl6V9IylqKc.roa
File: Ko6dq6ry6C6mWNlOnl6V9IylqKc.roa (raw, json)
Hash identifier: sVk+42ELSaxLwLhxccyNs40ycUtPlAz+1Z5hx3FXVmQ=
Subject key identifier: 2A:8E:9D:AB:AA:F2:E8:2E:A6:58:D9:4E:9E:5E:95:F4:8C:A5:A8:A7
Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial: 018FD97A14BE0A88E7B56627DE63F53F85E6
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/Ko6dq6ry6C6mWNlOnl6V9IylqKc.roa
Signing time: Sun 02 Jun 2024 15:03:27 +0000
ROA not before: Sun 02 Jun 2024 15:03:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56548
IP address blocks: 185.188.114.0/24 maxlen: 24
185.188.115.0/24 maxlen: 24
185.199.208.0/24 maxlen: 24
185.199.210.0/24 maxlen: 24
185.199.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:7a:14:be:0a:88:e7:b5:66:27:de:63:f5:3f:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Validity
Not Before: Jun 2 15:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a8e9dabaaf2e82ea658d94e9e5e95f48ca5a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:de:d8:5e:56:64:31:7d:eb:5c:23:bf:5f:
b4:e1:2f:54:6b:16:ea:70:37:38:6e:c5:c4:bf:20:
19:df:ee:8e:fa:b2:0c:1d:4b:50:41:89:f3:a5:fc:
eb:c6:71:8b:f9:2d:fb:96:00:56:6a:4c:65:00:b4:
4b:34:7e:af:94:1e:1b:c6:bf:a0:ee:1a:72:2c:48:
e0:63:c9:3a:a7:79:a5:55:be:cd:57:8a:1c:b8:94:
60:a6:29:d7:32:ae:7b:70:7f:ff:cb:8e:d4:b2:7b:
0b:de:13:07:93:21:c9:bb:2e:36:4b:40:2b:47:88:
a2:fe:ca:52:c0:d2:6f:4a:15:20:a5:e2:9c:d1:63:
c1:16:2f:85:60:c6:2c:fd:47:c7:14:1d:c4:1e:1d:
9c:0f:53:81:a4:7c:41:e0:65:05:95:80:cb:08:2b:
e3:dc:f3:14:6f:fa:75:ec:e9:eb:ac:54:ad:71:c3:
42:8e:38:4b:c8:93:f8:c1:63:db:5b:66:27:8f:02:
c0:91:d8:f5:c8:1c:db:4a:b4:09:f5:03:09:a6:20:
6d:76:30:66:c8:3a:08:d6:b4:d8:51:1d:c8:69:0c:
dd:a3:90:6f:df:e2:5a:45:8c:c1:74:a0:84:1a:9e:
00:00:63:03:b3:a7:8e:21:f2:01:1c:01:33:30:2e:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8E:9D:AB:AA:F2:E8:2E:A6:58:D9:4E:9E:5E:95:F4:8C:A5:A8:A7
X509v3 Authority Key Identifier:
keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/Ko6dq6ry6C6mWNlOnl6V9IylqKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.114.0/23
185.199.208.0/24
185.199.210.0/23
Signature Algorithm: sha256WithRSAEncryption
99:cd:a7:d8:e6:30:46:03:cc:b0:2b:8a:88:b8:16:4a:3d:49:
2c:45:d2:94:07:54:ba:c0:49:e6:0e:b9:8b:ce:20:8c:8b:76:
90:1e:b7:36:ba:bf:6e:1b:ee:39:e5:f6:d4:fa:bb:e5:c3:14:
c3:70:bb:2b:5a:db:34:f1:f8:99:63:53:17:00:54:22:a1:1b:
e7:13:66:fe:63:a9:c0:77:92:b3:34:50:b8:b5:f0:91:24:ae:
2c:ac:6b:59:c7:54:0d:dd:64:45:63:58:f6:6f:78:b6:01:bd:
35:b0:3f:1a:75:d9:a6:c0:3a:c7:96:bf:cb:46:45:50:c4:ce:
dd:84:a2:c1:61:06:0c:13:5e:50:cb:5d:2d:82:85:f9:dc:ba:
da:49:7b:55:87:82:bc:b0:83:d3:63:6b:e3:b4:7e:e7:3f:d7:
93:36:41:07:90:cb:c5:bb:2b:8d:31:2a:c6:e0:b1:44:65:45:
49:16:d9:9b:41:fe:a1:92:52:80:ed:d3:51:f8:c9:11:c3:9f:
1d:87:7e:5b:fb:03:bc:c2:d3:e2:b7:60:fc:8d:c9:43:1b:ed:
05:57:a9:34:d4:03:88:73:1e:87:af:0a:43:dd:32:a1:df:b9:
da:83:b4:10:b8:59:d9:b8:0f:ec:05:bb:a6:0d:cb:96:59:f8:
b5:80:a8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:08:29 2024 by rpki-client on console-fra.rpki-client.org