Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/lK02IjoG21ZLJwMObVODl5ycaFk.roa
File: lK02IjoG21ZLJwMObVODl5ycaFk.roa (raw, json)
Hash identifier: QVqPUfeDuLSyRnWGpgh9S6Z9VG7MW1GqdnWeDmjNimA=
Subject key identifier: 94:AD:36:22:3A:06:DB:56:4B:27:03:0E:6D:53:83:97:9C:9C:68:59
Certificate issuer: /CN=6fdbb04f552d847b02922beb284ab86805dbdcf4
Certificate serial: 018CC2DB21A2082A9FF21D2FB9AFC7C1AAFA
Authority key identifier: 6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/lK02IjoG21ZLJwMObVODl5ycaFk.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132721
IP address blocks: 185.224.170.0/24 maxlen: 24
185.224.171.0/24 maxlen: 24
185.224.168.0/24 maxlen: 24
185.224.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:21:a2:08:2a:9f:f2:1d:2f:b9:af:c7:c1:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdbb04f552d847b02922beb284ab86805dbdcf4
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94ad36223a06db564b27030e6d5383979c9c6859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:58:bc:03:6c:2e:d5:70:45:3d:e9:a4:24:
f3:e8:4d:83:b0:2c:2a:bc:91:c6:7b:0e:aa:de:61:
0c:08:d8:d5:ca:a5:8b:5b:c2:9a:18:a0:73:7e:05:
6e:e4:40:d1:3c:75:7c:f0:44:77:57:bc:eb:38:38:
3a:20:59:92:52:ff:84:81:60:cc:00:69:c7:1f:f3:
81:28:6f:63:e8:89:e0:f3:9b:61:01:25:78:c6:36:
e5:2c:31:5e:f2:7c:e7:d8:3c:fc:26:c3:78:02:68:
bd:be:3c:6b:af:d2:56:2e:40:7c:c9:70:bc:1f:fc:
6c:27:28:04:9f:38:d3:22:96:6b:f3:e8:73:f4:86:
55:6a:66:88:5b:ef:76:cb:f6:94:ab:ec:d9:0a:86:
d4:49:88:79:15:c8:42:23:a1:b5:2b:4d:97:3a:ab:
6e:d3:8c:77:c8:26:46:2d:21:db:f3:6f:fc:58:6b:
40:00:7e:2e:f0:3a:0e:6b:f5:60:7b:7c:dc:d0:d1:
3c:52:8e:c0:d4:11:d6:da:ac:4e:ff:0f:8d:0e:c9:
37:79:65:b1:cd:a8:d0:a4:b3:d8:4b:15:fe:8a:ca:
d9:00:14:76:e4:55:98:60:bb:f1:2e:5c:49:29:e5:
5a:6d:33:d3:a5:cc:25:74:78:37:0d:9f:3e:e6:ce:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:36:22:3A:06:DB:56:4B:27:03:0E:6D:53:83:97:9C:9C:68:59
X509v3 Authority Key Identifier:
keyid:6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/lK02IjoG21ZLJwMObVODl5ycaFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.168.0/22
Signature Algorithm: sha256WithRSAEncryption
25:18:d8:4e:4f:0c:29:2b:77:03:75:a1:6a:cb:12:d4:38:65:
73:f7:ac:81:1a:fa:85:43:d6:88:84:dd:86:38:70:36:21:4d:
a9:c1:3b:c4:bb:6d:6a:60:ec:4d:cc:e6:43:91:02:a0:2a:74:
1a:4c:38:d8:d9:78:a6:b3:f5:d2:bb:d5:9e:13:23:b5:ea:4f:
e9:5f:c1:f8:71:95:06:89:ef:ec:20:06:4f:98:c6:4b:7c:e8:
7d:6d:0f:a4:3f:f4:e3:33:bd:a9:25:55:e3:26:9f:d2:42:c4:
7a:09:c0:a2:76:37:8c:d7:17:06:42:15:22:2b:26:12:9c:1a:
a7:3f:86:d1:b7:b9:3e:65:08:68:7c:f3:17:d9:16:64:99:4a:
06:ff:80:c5:09:40:31:ab:d5:61:e4:23:c4:75:32:ee:37:bd:
0d:41:ca:fa:63:bb:1b:a5:50:f9:e0:d6:2b:b6:3b:1f:bb:31:
a9:e1:02:f7:df:b9:9f:0a:15:8d:11:57:be:62:c1:53:86:a4:
a8:80:45:55:ce:56:75:4b:73:ae:b5:87:68:fc:20:e2:f8:cb:
3a:8b:25:de:88:69:0d:86:f6:c9:d5:7a:fa:c3:12:f3:cf:4b:
54:e5:d4:1e:6e:02:b4:54:bb:16:a1:ab:d9:49:4f:49:e3:d5:
20:5d:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:21 2024 by rpki-client on console-ams.rpki-client.org