Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/afLqcDk2ztm7ASAZ_uYTzsUXtQs.roa
File: afLqcDk2ztm7ASAZ_uYTzsUXtQs.roa (raw, json)
Hash identifier: odACMhaTrP+G9f++s13v/PbIT0sT5EDxBQKKzBkjSlA=
Subject key identifier: 69:F2:EA:70:39:36:CE:D9:BB:01:20:19:FE:E6:13:CE:C5:17:B5:0B
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 018CC348C98388CE4E3F82BC677028970A52
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/afLqcDk2ztm7ASAZ_uYTzsUXtQs.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199805
IP address blocks: 185.45.144.0/23 maxlen: 23
185.45.146.0/24 maxlen: 24
185.45.147.0/24 maxlen: 24
2a01:7e27::/32 maxlen: 32
2a01:7e21::/32 maxlen: 32
2a01:7e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c9:83:88:ce:4e:3f:82:bc:67:70:28:97:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f2ea703936ced9bb012019fee613cec517b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:10:92:45:78:a1:b3:60:f9:6f:46:9d:23:
fb:cf:f2:3e:bc:3a:74:d5:34:df:ef:ec:4e:6b:0c:
89:c0:1c:e3:80:c6:d9:4c:30:26:90:88:49:80:64:
6c:1d:52:0c:ff:7b:a8:ee:e5:e2:7f:5f:e5:e2:2f:
d5:11:37:65:56:47:c7:98:a2:8c:6d:b6:de:7a:99:
69:25:f4:e7:b6:db:d6:1b:d2:60:5f:a1:27:04:83:
b5:e6:7e:81:32:c5:4d:23:90:95:ff:05:36:e2:5c:
dd:bf:67:c4:6f:8c:e4:f7:7e:f4:db:5a:25:9c:93:
22:13:06:3c:40:e8:ce:9e:05:58:85:d2:6e:15:f9:
6a:99:f3:82:b1:2e:2a:98:51:f6:0e:3c:f7:2f:12:
72:5e:92:b5:c5:1a:7b:27:aa:e3:13:f9:45:b6:19:
84:ed:6e:92:81:10:5c:9a:30:d9:01:98:ec:8a:34:
bc:b5:50:a0:45:44:fd:39:62:72:0a:f0:d2:4a:04:
cf:00:2d:10:fb:62:81:e5:c9:ff:38:70:8b:36:99:
db:19:3a:d0:53:f0:52:18:1c:0b:e9:be:48:bd:15:
5c:e5:17:e4:78:93:57:59:33:70:aa:7b:57:31:6d:
1f:55:85:cc:79:b0:77:45:3a:33:2b:fa:57:73:5e:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:EA:70:39:36:CE:D9:BB:01:20:19:FE:E6:13:CE:C5:17:B5:0B
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/afLqcDk2ztm7ASAZ_uYTzsUXtQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.144.0/22
IPv6:
2a01:7e20::/31
2a01:7e27::/32
Signature Algorithm: sha256WithRSAEncryption
79:4e:b4:4e:74:0f:1d:cb:9a:13:87:76:34:26:0f:17:f9:33:
a3:3a:07:f1:84:78:5e:5a:32:28:24:e1:5a:73:59:7e:34:81:
a0:a9:b7:a1:96:a2:ef:f9:50:b1:6e:34:2c:fb:c4:ba:5b:df:
34:51:3a:c9:a0:de:7a:fa:c0:86:8b:9d:8d:21:b8:4a:d4:d8:
8b:0e:d7:26:7d:ba:8f:8c:f1:5c:55:ec:ee:61:1f:73:f8:2a:
34:9a:1d:9c:b0:12:5e:9a:c9:d9:46:c9:9f:83:13:84:fc:6a:
b3:13:67:3b:7f:e1:bb:77:53:20:37:24:52:bb:db:3e:b3:6e:
57:eb:30:ef:0c:dd:b1:28:49:5a:eb:35:6a:1a:1d:2d:5e:71:
b8:4b:82:5f:d8:27:bf:d8:44:80:94:66:a7:0f:fd:01:a8:59:
6c:0f:0d:02:48:d6:ba:88:f2:a1:83:08:4b:7c:7d:68:fc:33:
1b:85:9f:86:0f:6a:29:05:92:74:9f:d0:c9:34:50:18:34:81:
d0:1c:89:15:f7:84:68:f8:b4:0d:13:a9:89:22:b3:41:cc:ca:
c4:cf:f1:93:e3:c9:aa:09:ce:ef:24:7e:d4:4a:03:ad:d0:6f:
1a:38:38:f9:a1:30:d2:91:38:32:cf:d9:30:dc:8e:4c:4b:fc:
70:66:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:44:02 2024 by rpki-client on console-ams.rpki-client.org