Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/q2b8j2QLI9q-Is-Mhode28ziJUI.roa
File: q2b8j2QLI9q-Is-Mhode28ziJUI.roa (raw, json)
Hash identifier: fs1CIWhk0wPbID7yrPtjmyOmI9moAxHjNXQcBtaE5L8=
Subject key identifier: AB:66:FC:8F:64:0B:23:DA:BE:22:CF:8C:86:87:5E:DB:CC:E2:25:42
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 018CC79404DEA02F9960B9FDDC6E0512FC8E
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/q2b8j2QLI9q-Is-Mhode28ziJUI.roa
Signing time: Tue 02 Jan 2024 00:30:15 +0000
ROA not before: Tue 02 Jan 2024 00:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 185.161.148.0/24 maxlen: 24
185.180.192.0/24 maxlen: 24
185.180.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:04:de:a0:2f:99:60:b9:fd:dc:6e:05:12:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 2 00:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab66fc8f640b23dabe22cf8c86875edbcce22542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:a7:55:d2:ec:a7:6f:ad:03:0c:73:07:36:
75:3a:a0:2f:35:74:d3:bc:37:3b:ef:0e:09:66:74:
66:77:fc:13:4a:e2:1a:05:13:ee:e8:90:8f:22:f0:
bb:69:00:42:e0:7b:a1:2d:1a:e8:96:f8:e8:52:f2:
b5:a2:36:77:4f:ce:38:5e:df:67:d5:4e:0f:81:e0:
f2:9a:68:10:f8:0b:6e:fb:b3:5f:74:5f:b9:c2:a5:
74:cf:34:cc:e1:3a:0b:25:b5:75:58:8b:26:c2:da:
80:ac:4d:a4:b7:e6:f9:c2:4f:17:5c:0b:93:28:d8:
bd:ef:b4:bd:4d:9a:3a:7f:cd:38:92:4f:c4:43:d9:
b6:df:f3:17:e9:7a:ce:d0:7f:a7:1e:12:cd:76:37:
e4:b5:cb:f4:c4:98:12:c4:14:46:b5:09:bc:43:c7:
04:21:4e:3a:bc:60:40:db:10:04:26:71:f1:c7:2f:
94:e6:a5:89:59:2e:9f:3a:1d:40:3b:0d:e7:d0:a0:
ca:47:ab:ff:25:27:42:ca:81:1c:64:9c:08:d8:1e:
36:23:6b:02:e0:b9:69:4c:19:d9:26:63:86:68:f3:
87:f6:48:30:bf:87:98:8a:7f:0d:9d:97:a5:0e:5e:
e0:5b:ce:5d:59:04:3e:d5:e3:65:6c:17:d1:03:9d:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:66:FC:8F:64:0B:23:DA:BE:22:CF:8C:86:87:5E:DB:CC:E2:25:42
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/q2b8j2QLI9q-Is-Mhode28ziJUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.148.0/24
185.180.192.0/24
185.180.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:e2:f0:27:f7:14:d3:7e:f5:4c:d0:17:92:3f:e9:53:8c:
a3:a3:77:56:56:e8:ae:39:55:14:2d:e5:12:67:8e:00:df:ba:
1b:91:68:36:ff:a7:a6:00:da:04:18:c5:e6:41:64:83:44:81:
2b:43:33:01:09:ce:b3:d6:af:e1:47:cc:8d:bf:c9:49:15:e1:
db:4d:9f:b2:1e:fd:9d:17:a2:10:66:5c:81:d7:1c:79:86:9c:
26:70:cc:63:30:4f:e6:1a:ac:f9:47:ff:a0:61:85:5f:86:32:
ea:b2:5e:bc:bf:a4:2f:ad:76:e2:7f:fe:5f:1a:ab:6a:49:44:
fa:db:e5:52:b4:20:ae:b8:2b:8f:c8:0f:2a:c9:e3:7a:a7:70:
b8:8e:22:0b:db:cc:ae:53:3c:ed:10:6e:98:2f:f2:75:0f:b1:
37:47:4f:6b:a3:1d:6f:27:7c:4c:97:61:ff:77:d9:e6:b9:29:
72:de:cf:a3:a5:94:d3:4b:e5:52:67:99:c2:e9:80:d0:c8:77:
34:db:9f:7a:77:fe:8b:59:12:84:d5:2e:7a:e8:97:8c:67:91:
f2:e2:9a:48:36:35:80:63:d8:90:02:28:3a:87:5e:2d:9d:57:
d2:5d:d2:60:d9:dd:b6:e0:09:9a:4b:fd:9e:83:99:1e:0c:b1:
03:88:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:10:12 2024 by rpki-client on console-fra.rpki-client.org