Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/LXhAPtmUJ6-Zp7m1RzZJEjPD7Fs.roa
File: LXhAPtmUJ6-Zp7m1RzZJEjPD7Fs.roa (raw, json)
Hash identifier: Yd1JGC4TFUt+BK4lIH/4WaKrehmwQ3QtYK00q739UCo=
Subject key identifier: 2D:78:40:3E:D9:94:27:AF:99:A7:B9:B5:47:36:49:12:33:C3:EC:5B
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 018CC348BB6DAB090D9ECFF82BD777878565
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/LXhAPtmUJ6-Zp7m1RzZJEjPD7Fs.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200460
IP address blocks: 185.97.33.0/24 maxlen: 24
185.97.34.0/24 maxlen: 24
185.97.35.0/24 maxlen: 24
185.97.32.0/24 maxlen: 24
2a00:66c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bb:6d:ab:09:0d:9e:cf:f8:2b:d7:77:87:85:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d78403ed99427af99a7b9b54736491233c3ec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:a1:64:35:60:72:69:36:13:b7:85:a5:b0:
33:45:09:bd:cd:ac:04:fc:e4:56:4d:b7:62:70:3e:
7e:1c:fc:02:20:9f:cc:7b:b8:ad:37:66:0d:bb:b9:
b8:96:2d:79:99:15:1a:fb:50:41:f4:7a:2c:6c:fb:
45:00:e5:7b:ec:80:60:f8:e2:c1:3f:6b:e1:d8:21:
f7:a2:fd:f5:1e:4f:a0:4a:e1:d9:bf:0b:57:6e:aa:
55:4e:8b:80:1c:dc:f1:9c:8d:fc:86:6f:dd:09:b9:
fe:35:41:73:10:ce:90:e2:40:ab:b9:72:65:e2:50:
cc:47:81:17:c3:15:34:7d:a3:7c:0e:55:df:12:38:
e9:83:c5:47:e8:93:67:fe:06:75:97:de:38:fb:19:
02:82:2c:6d:dc:f5:81:35:06:d1:6a:73:ae:ee:9d:
86:b7:cc:04:4e:43:dd:32:aa:d9:0d:96:83:90:df:
36:3b:bb:37:71:f7:46:3a:f1:f7:b0:63:d8:0b:5e:
68:20:34:aa:63:a6:2e:91:d7:fe:bc:da:1e:b9:7b:
f1:21:c6:ac:c7:9c:9d:79:38:13:65:7d:6f:51:2b:
c2:a2:ab:ef:b3:db:dd:2a:9b:5c:c3:90:e3:c4:09:
58:e8:3b:e5:0c:4b:05:51:3e:d8:7b:e3:e3:2e:b6:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:78:40:3E:D9:94:27:AF:99:A7:B9:B5:47:36:49:12:33:C3:EC:5B
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/LXhAPtmUJ6-Zp7m1RzZJEjPD7Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.32.0/22
IPv6:
2a00:66c0::/32
Signature Algorithm: sha256WithRSAEncryption
40:85:0e:5d:61:08:dd:03:b0:a5:f6:00:b5:bb:e6:4d:39:86:
f0:bc:6e:59:15:7e:46:ed:04:86:94:8b:28:37:bb:92:2d:6d:
76:9f:1e:67:a3:37:ea:02:ac:ae:83:39:01:3e:3c:49:25:fe:
56:00:1f:6a:ee:90:f0:13:88:7f:cd:f5:dd:8f:db:8a:46:53:
a6:ab:6e:2d:ff:65:e8:3c:8b:b4:d1:52:ab:23:97:8c:c8:a5:
ca:f0:18:fc:60:9b:99:2c:1f:13:c9:af:03:42:17:c0:99:85:
a7:0f:a0:bf:6c:b3:4e:cb:0d:35:f1:04:74:27:5d:8c:4e:a4:
89:94:9e:10:6c:aa:51:e3:5d:6f:85:cc:ee:88:5f:a6:d7:23:
e0:5a:65:e2:2b:69:89:69:a8:a6:ce:ad:a9:3d:8c:12:9e:86:
d2:e7:e7:4f:41:14:4f:72:07:40:6e:5e:05:43:42:18:73:ae:
18:0a:94:67:5b:6d:a2:80:e0:a4:97:62:8c:0d:6d:f7:1a:be:
de:3e:8e:f5:93:ee:f9:35:0d:b3:54:21:50:0d:1a:31:72:ca:
69:2d:6b:d9:93:90:e8:4b:0e:b8:6b:32:fe:b8:03:1f:37:84:
5a:5f:32:fc:c3:83:0a:a2:2f:8e:9c:79:c8:80:9a:af:4c:9c:
c5:3c:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:16:02 2024 by rpki-client on console-fra.rpki-client.org