Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/1sCCuCmYIWK_Y88E0gapeI31VWA.roa
File: 1sCCuCmYIWK_Y88E0gapeI31VWA.roa (raw, json)
Hash identifier: gXPAgy3tvoSh8VEYziReRJMS9fXWcV1Mpe17W9oJhWw=
Subject key identifier: D6:C0:82:B8:29:98:21:62:BF:63:CF:04:D2:06:A9:78:8D:F5:55:60
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018E335929327F413881381D3E6D3D2147AE
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/1sCCuCmYIWK_Y88E0gapeI31VWA.roa
Signing time: Tue 12 Mar 2024 15:47:45 +0000
ROA not before: Tue 12 Mar 2024 15:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.94.240.0/23 maxlen: 23
185.94.242.0/23 maxlen: 23
185.124.96.0/24 maxlen: 24
185.124.97.0/24 maxlen: 24
185.124.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:59:29:32:7f:41:38:81:38:1d:3e:6d:3d:21:47:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Mar 12 15:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6c082b829982162bf63cf04d206a9788df55560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:97:6f:b2:7e:80:9f:07:57:dd:04:d0:2a:
04:6f:10:80:0c:4c:aa:18:85:f8:2b:28:48:95:aa:
eb:14:cb:39:dd:c3:e3:44:73:5a:59:0f:74:b7:e2:
23:fb:15:a2:d8:67:62:90:3b:34:62:5e:9d:97:dd:
ba:6d:f4:b0:de:c0:52:59:65:26:a1:60:ea:48:53:
5f:91:d4:80:9b:6d:7f:72:b7:e5:b5:bd:a8:37:de:
3a:1f:f9:b0:6c:87:d4:30:f0:41:11:45:c8:bc:f8:
19:01:c7:5e:29:f8:77:77:88:c4:ed:7e:fa:30:f7:
93:05:5e:56:2f:7e:c9:1a:7a:66:27:b6:b3:13:5e:
fd:ae:11:c9:54:10:27:6a:52:c2:f0:c9:3b:3c:e2:
b3:0a:91:11:e4:38:1e:3d:ab:ad:a3:e1:93:56:2a:
0e:cb:aa:86:91:a6:eb:d7:0e:6a:a4:a7:af:ee:5a:
e0:23:65:41:8e:7d:91:55:74:ba:3e:74:1c:41:4f:
8d:bc:ff:4c:36:10:7f:72:e1:64:d9:f9:9c:d5:2d:
a6:a9:57:97:97:d9:f0:c4:fc:2d:41:be:3f:c2:44:
f6:35:0f:b7:93:8f:bd:ca:6f:1c:3f:30:dd:d5:9a:
3d:46:66:b9:be:30:6c:c1:b6:b7:e6:c1:55:e9:c3:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C0:82:B8:29:98:21:62:BF:63:CF:04:D2:06:A9:78:8D:F5:55:60
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/1sCCuCmYIWK_Y88E0gapeI31VWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.240.0/22
185.124.96.0/23
185.124.99.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e4:04:ef:db:62:93:a2:e6:33:37:8c:6d:eb:51:ee:54:79:
30:7d:b0:00:52:5d:5a:56:d0:cf:88:55:08:ea:15:10:1d:ca:
77:dc:95:82:60:5b:47:48:11:70:e4:68:47:57:39:8e:6f:c9:
8a:f4:ea:b7:6d:c4:d1:38:ec:03:c9:44:6c:ad:8d:bc:59:af:
f1:af:4b:24:e1:4f:60:09:d1:37:10:4f:3e:b3:2a:6f:b0:59:
36:6c:7c:04:70:24:e5:7a:69:d5:4a:c9:fa:84:a1:05:8f:c3:
6a:6d:f4:79:61:a9:55:38:6a:62:ed:71:15:95:1c:51:13:1f:
37:a1:35:f4:c0:e8:d4:f5:ae:c2:63:d7:60:75:65:91:62:9c:
a2:36:9e:38:e5:0a:e8:71:de:fa:a7:d5:f5:42:67:a8:82:d2:
36:59:b3:06:74:e6:e8:a4:fc:7c:25:ae:6c:17:7d:6a:0c:02:
df:75:9a:79:c6:02:b6:f8:14:89:b0:0e:20:9d:33:21:7e:7a:
f2:07:a0:5d:ec:90:ac:f9:cd:25:2e:11:22:09:8b:4a:ac:ee:
7f:06:61:a6:98:1c:01:91:b1:c0:1c:ef:e3:e9:cb:85:97:03:
dc:8c:2c:71:ac:3d:bd:cd:48:de:73:25:47:ba:a4:04:aa:b2:
26:a5:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:09:15 2024 by rpki-client on console-fra.rpki-client.org