Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/m68vkylTe1bhwpn8DmViHRW9jyE.roa
File: m68vkylTe1bhwpn8DmViHRW9jyE.roa (raw, json)
Hash identifier: C8ouattNfiDti4swtuyHwIemGLfBuT3z8rxWNfolhTc=
Subject key identifier: 9B:AF:2F:93:29:53:7B:56:E1:C2:99:FC:0E:65:62:1D:15:BD:8F:21
Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial: 018CC49226B8AB531BEB026041BDC0AA8E61
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/m68vkylTe1bhwpn8DmViHRW9jyE.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212855
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:26:b8:ab:53:1b:eb:02:60:41:bd:c0:aa:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9baf2f9329537b56e1c299fc0e65621d15bd8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:0a:08:3a:a7:d7:c0:79:e1:da:62:1c:c2:
72:c3:cb:6a:90:90:5b:56:34:e3:7c:4d:b7:56:82:
fd:96:da:a7:35:4e:64:74:17:bd:1f:80:cd:64:40:
b2:aa:73:ee:51:b5:56:ce:5c:c2:fe:94:35:eb:9c:
86:b8:6f:e6:ca:86:e7:b1:d9:2b:c6:d4:07:2b:99:
6a:1b:35:e7:e4:c3:47:77:80:3f:9f:b9:79:63:85:
d7:7e:a9:64:57:fb:36:6d:37:2f:40:11:c2:16:77:
9c:6d:71:f8:56:b6:10:f9:02:3f:8d:f0:64:71:64:
aa:92:bb:6a:56:c4:fa:87:fc:bd:61:6d:28:11:06:
4d:68:3e:a1:a6:8d:2f:40:8d:fe:3e:cc:4a:6a:24:
99:ee:32:d7:b3:a9:c8:08:ef:55:9b:0b:12:59:54:
8f:23:1d:0e:41:af:84:70:58:f0:36:64:7c:b4:bb:
60:ed:3b:7f:38:db:3e:25:1d:7b:b6:db:92:d9:23:
da:46:61:0c:27:59:2e:b7:37:21:0b:95:c6:53:7f:
fd:ed:a4:88:40:a7:ab:b3:f3:7e:c6:5b:5f:0b:f4:
4f:ed:ba:43:86:2f:67:54:d6:6c:19:c2:ec:6d:0e:
a5:e3:c7:29:bd:44:89:61:cb:4a:07:ff:f7:9e:40:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:2F:93:29:53:7B:56:E1:C2:99:FC:0E:65:62:1D:15:BD:8F:21
X509v3 Authority Key Identifier:
keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/m68vkylTe1bhwpn8DmViHRW9jyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
d1:a9:0b:10:44:e8:2f:a7:b6:02:be:32:fa:da:ec:79:ab:b5:
08:02:e4:71:f9:f3:d3:59:e4:e4:d5:51:c6:d5:89:65:1f:2e:
9f:53:48:01:1f:be:27:42:bf:22:8b:e8:c5:ff:b0:ce:b0:76:
cc:f3:25:7e:c0:98:3f:69:5e:93:87:b9:e8:80:7d:3b:c6:f0:
9c:e9:1d:5f:4b:79:23:c8:34:6f:b4:22:92:cb:aa:32:39:b8:
0e:5c:86:72:43:6f:6e:c4:e8:6d:4d:3c:d6:95:9e:5a:36:95:
99:4d:dd:61:50:46:80:67:a1:b4:ce:b9:ce:92:79:82:7e:5f:
9c:36:d8:12:fc:13:ba:79:87:94:09:31:21:85:12:61:c0:c0:
b9:d2:de:aa:49:79:c6:fa:aa:9e:42:6b:32:02:ab:ab:81:91:
ab:fc:37:d9:9e:3f:8a:a9:3a:3a:bb:aa:fe:71:8b:ce:26:90:
07:41:8e:db:db:b2:86:de:a9:2f:85:25:e6:e7:e1:6f:3a:2c:
26:f7:e1:58:fd:66:f0:ac:4b:8d:02:cd:c1:68:38:20:2d:6f:
20:96:47:43:ec:c3:0d:d4:af:51:a2:4e:9a:34:f4:9b:f1:14:
bd:48:f3:04:1e:59:98:e6:30:02:42:a9:8b:f4:33:25:4d:b5:
d2:b3:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:41:48 2024 by rpki-client on console-ams.rpki-client.org