Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/jSRskS8oJdxXnCBy7aX9uCQ-2pE.roa
File: jSRskS8oJdxXnCBy7aX9uCQ-2pE.roa (raw, json)
Hash identifier: ZhagmfMVpgagwmrK9AGJ/UwkVXVyhrbgfOVvSEGHjrc=
Subject key identifier: 8D:24:6C:91:2F:28:25:DC:57:9C:20:72:ED:A5:FD:B8:24:3E:DA:91
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 018CC2DB1A09895DF690CC6A2C882AD9FDAB
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/jSRskS8oJdxXnCBy7aX9uCQ-2pE.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49349
IP address blocks: 185.11.146.0/24 maxlen: 32
185.11.147.0/24 maxlen: 32
188.209.49.0/24 maxlen: 24
188.209.52.0/23 maxlen: 24
185.62.190.0/24 maxlen: 32
185.62.188.0/23 maxlen: 32
185.11.145.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1a:09:89:5d:f6:90:cc:6a:2c:88:2a:d9:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d246c912f2825dc579c2072eda5fdb8243eda91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:65:8d:f8:f5:f8:2b:c3:ac:58:39:4a:3f:
34:49:d2:48:dc:d4:6e:4c:31:e9:8d:29:1e:14:e4:
8c:6a:cc:d1:30:fc:76:51:61:e9:f8:4f:f7:10:c0:
e5:0e:20:71:94:76:99:d4:b6:f5:cb:e7:21:9f:71:
78:20:2e:d8:7b:a3:14:e0:43:d1:f8:63:d2:3c:d8:
2b:da:01:61:33:ed:2d:8b:8f:9b:dc:23:e7:44:e2:
fc:df:07:17:d7:ee:5a:ec:25:93:a1:8d:d0:30:18:
bf:44:25:b1:cb:d4:ee:a6:d2:5a:65:5b:14:8f:c9:
81:f1:e0:67:f4:df:a1:3b:75:7a:b3:e4:f4:a2:ca:
c3:91:7d:a6:ea:52:9d:66:e3:e2:3c:14:d4:b6:22:
c1:78:78:59:a8:09:e2:ae:ed:90:0b:17:b6:62:d0:
0b:97:00:97:b1:09:65:6b:69:81:4b:ef:43:43:05:
21:94:a1:fc:11:fa:cf:60:46:b9:66:7e:57:9e:c7:
93:6b:4e:b6:0f:35:ec:e1:45:e0:db:e7:0a:f9:43:
6d:c3:f4:98:33:df:c7:0c:86:a4:b1:b6:41:dc:7d:
9b:a8:fe:6d:7d:4b:1c:2d:18:ca:91:0a:5d:c4:a0:
55:23:9b:3b:d5:55:62:08:c2:74:ba:d1:c2:56:6c:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:6C:91:2F:28:25:DC:57:9C:20:72:ED:A5:FD:B8:24:3E:DA:91
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/jSRskS8oJdxXnCBy7aX9uCQ-2pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.145.0-185.11.147.255
185.62.188.0-185.62.190.255
188.209.49.0/24
188.209.52.0/23
Signature Algorithm: sha256WithRSAEncryption
64:78:69:85:c5:c0:97:8d:c8:e7:e5:ef:38:57:56:d9:08:76:
ac:45:e0:d3:95:2d:29:94:66:3b:b4:a7:ab:d0:e6:e9:18:3b:
43:15:9f:44:4f:cb:62:ca:b2:9f:71:71:19:d4:4e:c5:22:40:
63:2a:9c:09:75:e8:c6:fb:b4:2a:0e:cc:b3:89:ec:f6:c7:b8:
2d:96:ad:b3:ac:56:d2:32:8a:48:8a:02:19:d1:c7:2e:9c:ec:
4c:2a:41:27:96:18:ce:2b:eb:9f:36:bd:65:a3:85:b6:fb:93:
fe:74:7b:a0:4e:91:26:f8:99:15:fa:12:58:b7:8e:6a:10:93:
ea:dd:b3:a1:68:26:1a:95:f5:c0:2d:c0:d2:89:b7:2d:3c:bd:
f8:bd:f1:94:63:03:51:d1:ed:a9:0b:b8:d4:79:24:6d:5f:b9:
1b:4d:f5:cf:32:00:c5:06:4e:cc:3d:b9:d7:06:eb:89:df:f2:
5f:da:51:47:7a:d3:ea:da:d5:06:02:2e:fc:ea:25:89:9c:cf:
59:ef:51:3a:84:f8:5e:5c:16:6b:25:eb:4e:7a:d7:59:41:0a:
ff:4a:e1:58:32:9f:c0:cc:54:f6:2d:a7:52:91:95:02:3f:b7:
52:d8:4b:9f:63:8f:95:04:8a:0c:65:ec:33:33:5e:ba:52:19:
0d:0a:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:09 2024 by rpki-client on console-fra.rpki-client.org