Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/F3kS18l0pn9yKvNkimcdfBzr8YM.roa
File: F3kS18l0pn9yKvNkimcdfBzr8YM.roa (raw, json)
Hash identifier: pjnAfW+nKlc8/RHyE/M0iHn43U5wz9lVFbNc68D15fI=
Subject key identifier: 17:79:12:D7:C9:74:A6:7F:72:2A:F3:64:8A:67:1D:7C:1C:EB:F1:83
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 018CC4255E02420E3D644FA1B02AA08AEBED
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/F3kS18l0pn9yKvNkimcdfBzr8YM.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201602
IP address blocks: 185.241.144.0/24 maxlen: 24
185.241.145.0/24 maxlen: 24
185.241.146.0/24 maxlen: 24
185.241.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5e:02:42:0e:3d:64:4f:a1:b0:2a:a0:8a:eb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=177912d7c974a67f722af3648a671d7c1cebf183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:c0:2b:a0:a7:61:04:db:18:cc:5e:d0:08:
62:e6:1b:90:ce:5e:6f:eb:cf:af:f1:af:54:a7:65:
dc:e3:da:1d:61:95:15:38:42:be:8e:ac:8b:b3:d8:
46:bc:1f:1e:14:91:87:6d:28:46:90:51:5d:d3:9a:
84:8c:5d:49:c1:b4:af:7e:84:0d:e4:46:be:9c:c6:
0d:08:47:16:1f:8f:f5:2c:09:9b:e4:0e:e5:92:ea:
24:7b:26:b6:c7:1f:3d:0c:01:25:fd:81:39:43:5c:
ff:5e:fd:9a:f2:2b:1a:52:fd:c6:01:0b:45:2c:86:
7d:a0:51:0f:eb:a5:32:fa:b0:ca:46:95:4c:da:31:
92:2e:f2:61:90:01:61:64:87:3c:d6:6a:df:f8:35:
a5:88:07:33:cd:17:93:a5:39:87:5d:a3:00:b5:80:
aa:c8:f9:cf:e7:61:7a:20:33:3a:97:7b:75:aa:5b:
ec:7b:f8:c7:07:57:ef:1e:f2:35:e5:67:9c:12:db:
8e:58:0b:b7:03:96:d8:e5:44:0d:f2:85:13:30:42:
b7:58:79:b4:42:8e:02:b0:d1:63:a1:e2:cc:13:c6:
c4:37:53:7c:27:d6:9b:cd:8f:54:58:37:7c:58:d7:
4b:97:2a:d0:63:79:f9:6f:b7:de:23:2c:0e:91:f9:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:12:D7:C9:74:A6:7F:72:2A:F3:64:8A:67:1D:7C:1C:EB:F1:83
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/F3kS18l0pn9yKvNkimcdfBzr8YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:fc:2e:6b:fa:a7:1b:94:fd:46:df:ad:72:91:21:d4:a7:97:
39:69:d9:93:04:30:ba:33:92:3e:f2:47:65:2d:3c:29:52:0d:
d8:7c:92:ed:41:e8:68:5d:62:40:57:cd:72:a2:6c:16:44:ea:
b7:85:d9:18:61:23:e0:5c:6a:a2:dd:45:cb:8d:8c:cb:7d:1b:
23:5f:80:4e:e1:08:83:71:4a:4b:f0:45:ef:18:d1:11:6b:87:
92:7e:4c:88:ce:83:20:9e:4e:65:38:20:f6:31:b6:3c:15:e0:
c7:4f:61:07:5f:98:ed:d2:a8:99:fd:d3:c7:a9:67:ae:52:bc:
b4:63:37:3b:da:00:d9:fe:88:54:b2:cc:19:3c:8f:77:4b:17:
d0:f8:cf:5c:81:de:b0:e6:f8:52:57:fc:ef:e7:fd:82:3c:98:
32:91:eb:8d:3c:ae:6a:01:f8:7d:0e:d1:d0:ba:ff:a7:7f:8a:
00:bf:0c:2b:1d:a5:14:94:b5:66:eb:c5:57:85:6e:0b:99:91:
f1:15:10:19:e0:e9:e2:0f:29:5d:93:30:50:9f:bf:70:6a:c7:
9b:f4:61:f8:e8:25:57:3e:d4:0e:69:2c:7c:8c:01:c5:fe:a8:
28:a6:94:69:b5:1c:b7:5e:81:ff:cd:59:2d:90:cb:56:6c:d3:
34:1d:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:23:14 2024 by rpki-client on console-fra.rpki-client.org