Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/hv1f4U3Orb2kg1dCV40dZaRsxf4.roa
File: hv1f4U3Orb2kg1dCV40dZaRsxf4.roa (raw, json)
Hash identifier: rbCZA3ADN6ZOEwo1yknc0JkyckBJO5rHPMmcQV1xW+4=
Subject key identifier: 86:FD:5F:E1:4D:CE:AD:BD:A4:83:57:42:57:8D:1D:65:A4:6C:C5:FE
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 018EDB8456F8CB780BFD5D0A9E85F0F19DAD
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/hv1f4U3Orb2kg1dCV40dZaRsxf4.roa
Signing time: Sun 14 Apr 2024 07:31:07 +0000
ROA not before: Sun 14 Apr 2024 07:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206388
IP address blocks: 185.186.243.0/24 maxlen: 24
2a0f:f1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:84:56:f8:cb:78:0b:fd:5d:0a:9e:85:f0:f1:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Apr 14 07:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86fd5fe14dceadbda4835742578d1d65a46cc5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:f9:61:17:ee:9b:e6:12:24:b2:e1:92:56:
d2:28:1b:ed:bd:ee:4a:bb:23:a5:60:ec:72:8b:f6:
7d:11:8f:9a:f8:71:5c:53:51:f3:cc:37:5b:20:a4:
70:63:e8:66:dc:df:9d:b3:31:7e:ae:2d:db:d0:6d:
b1:15:aa:47:e9:21:3a:1f:fb:ef:59:f0:18:cc:00:
0e:9d:f9:d6:77:75:7a:bc:8c:f9:85:d0:ab:74:db:
07:30:49:0d:21:0b:35:2f:3e:0b:f5:e8:4f:d1:f6:
04:3e:ab:47:bb:b7:d8:28:04:91:86:0b:6a:d5:ff:
72:e3:0d:b9:8c:31:a4:59:54:ef:32:43:0d:e8:62:
a3:6a:6c:b5:c4:95:55:5b:9b:cd:fe:64:51:bb:db:
5d:f9:1a:ef:ff:12:9b:1b:f3:2a:c0:88:37:b0:ad:
7b:c6:26:36:fd:41:0d:9d:53:49:83:5c:9f:00:b5:
b5:d1:92:4d:e7:cd:30:78:16:c7:2c:0e:ff:3d:2b:
c0:13:16:3f:b6:f6:6d:45:9c:7d:c3:91:2e:c3:6c:
e1:fb:9a:e7:4b:1a:bf:fd:c4:79:00:9d:ba:07:e9:
e1:6f:0b:a7:98:fc:c9:7a:76:53:52:ee:21:b2:62:
d2:98:f5:1a:1a:c2:6c:a1:0d:1b:30:b0:95:86:85:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:5F:E1:4D:CE:AD:BD:A4:83:57:42:57:8D:1D:65:A4:6C:C5:FE
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/hv1f4U3Orb2kg1dCV40dZaRsxf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.243.0/24
IPv6:
2a0f:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:06:9d:cb:27:fb:94:ed:f8:bb:f5:d1:d5:70:21:96:4d:d0:
96:20:1b:3f:6f:7f:bb:25:93:92:8f:e6:b3:87:68:ce:3c:38:
98:40:81:76:9c:02:3b:96:ec:01:1f:fe:4b:8f:b6:d3:26:6c:
6c:e8:30:96:6b:07:38:02:8c:9e:d7:fc:31:55:7b:42:66:c9:
a1:95:33:60:1c:37:3d:00:39:db:f0:23:c1:2e:a0:32:a2:df:
ce:c5:c5:0e:9c:b9:b3:d7:18:83:e1:5c:84:3f:62:dc:86:96:
61:2c:76:0d:57:57:58:fb:fa:3e:ac:09:62:48:42:b4:15:1b:
e6:47:0c:fe:d4:df:20:41:88:dc:a0:6a:81:9c:70:2c:c6:54:
36:0a:8f:db:cf:a1:71:dc:65:d2:a7:da:0f:32:de:ab:41:bb:
4f:d0:d3:a2:19:14:be:4b:5c:59:b5:9b:f1:55:5b:58:fe:2f:
52:7f:56:15:32:16:2e:a8:a4:42:6f:e4:91:c3:30:70:45:4e:
c3:1e:21:10:61:e8:3f:5e:a3:9b:84:35:e5:57:1c:a1:6c:3e:
35:93:c1:02:66:96:bf:e5:d3:4b:2e:2e:6e:37:88:d9:10:b5:
1e:c5:40:d7:eb:aa:77:3f:c1:06:de:e9:77:7e:65:0d:4f:e0:
dd:81:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 12:07:33 2024 by rpki-client on console-fra.rpki-client.org