Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/1Y2y71CVt0KNemOKKt7NPHBv7-A.roa
File: 1Y2y71CVt0KNemOKKt7NPHBv7-A.roa (raw, json)
Hash identifier: vxHv6lV5aywAePlUb1KkJGXbS5/RqFWRxCbQlzTondU=
Subject key identifier: D5:8D:B2:EF:50:95:B7:42:8D:7A:63:8A:2A:DE:CD:3C:70:6F:EF:E0
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 018CC86F50E83E525FE22A4D390FFFB3E328
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/1Y2y71CVt0KNemOKKt7NPHBv7-A.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202311
IP address blocks: 185.53.188.0/22 maxlen: 22
185.53.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:50:e8:3e:52:5f:e2:2a:4d:39:0f:ff:b3:e3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d58db2ef5095b7428d7a638a2adecd3c706fefe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:50:c4:5b:6d:fe:88:b2:4b:0c:65:2e:8a:
f6:2e:e2:52:56:59:dd:43:e1:73:bc:84:a4:60:4b:
e8:b5:c5:02:86:69:92:f8:47:fb:bd:4d:14:b6:b1:
9f:12:21:d1:e5:b9:09:af:e4:d6:01:32:4e:06:f2:
8f:0e:ff:a6:40:c1:54:71:fa:53:50:f5:be:9e:74:
3a:91:d3:d7:4e:2d:f5:c9:3a:2f:7a:62:87:43:83:
35:8b:28:6c:32:75:ef:0f:2a:6b:68:02:2f:e8:8f:
5a:c0:81:8f:14:17:dc:c9:1b:4d:4b:6d:45:90:92:
e3:dc:79:84:04:fa:d8:ec:49:78:5a:aa:aa:da:75:
ae:51:70:d0:d7:8c:6f:a6:5a:6b:67:c6:f2:c5:e9:
8a:fb:fc:e3:ba:a6:1c:54:e3:78:4f:ea:cf:2f:e1:
63:bd:43:b4:c8:00:2c:cc:00:04:d3:1b:ad:29:8e:
69:c5:22:0f:5e:29:eb:44:4b:82:eb:2e:64:2d:6d:
4c:4c:02:a3:f4:3a:33:ef:f5:d7:5d:9e:90:f2:4d:
46:7c:95:54:04:c3:be:00:48:79:7d:a5:49:1f:aa:
be:35:7f:98:75:cf:f0:f3:72:b9:26:2e:f4:32:7c:
d0:67:a6:61:7c:f6:5f:57:ff:da:e5:41:6f:7d:43:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8D:B2:EF:50:95:B7:42:8D:7A:63:8A:2A:DE:CD:3C:70:6F:EF:E0
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/1Y2y71CVt0KNemOKKt7NPHBv7-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:7d:74:e5:9f:e2:3c:76:72:80:23:ff:6e:91:fa:7c:04:7b:
cd:b0:ac:fb:33:b6:8d:09:ff:80:cb:0c:3e:6c:4a:31:08:6c:
c5:a7:c9:2f:0b:d4:dc:a6:df:7c:49:ae:9b:58:2c:56:3d:ea:
fc:8e:02:6e:26:d0:d4:43:a5:58:ff:22:a0:cb:92:e5:eb:30:
bc:f7:c1:78:66:5f:25:38:7a:14:99:2a:52:be:85:cc:ed:d7:
56:47:94:85:d5:8d:d6:72:8b:9c:d5:da:be:cc:4b:eb:f4:6c:
4b:67:9d:03:c8:0c:64:1b:c5:1b:6a:c8:2f:9c:7c:3e:73:97:
65:23:ca:7f:94:d0:4e:bb:f8:d6:36:e5:eb:93:41:8f:0f:49:
7f:09:50:8f:9f:c2:11:4a:28:11:98:90:fe:cc:56:51:22:89:
66:05:c1:9b:9c:92:3f:98:92:ef:13:5e:b4:b0:bc:aa:62:23:
c8:bd:2d:ea:0d:7a:e7:99:24:c1:46:bd:b1:24:d8:ae:c0:e8:
ac:c2:ed:26:3c:da:ec:22:ef:3f:44:16:89:a8:62:14:80:a9:
01:eb:ff:d1:6a:0f:a8:02:ea:7f:96:91:de:c0:08:16:4c:63:
d2:1f:3a:0f:0a:65:c4:7d:8c:57:43:3f:d3:73:5e:78:48:3d:
d4:b5:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:50 2024 by rpki-client on console-fra.rpki-client.org