Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/R_xoVkKstrxm7a5MrA05LJrLvKU.roa
File: R_xoVkKstrxm7a5MrA05LJrLvKU.roa (raw, json)
Hash identifier: OcAWDrFsHDbr/iw3JojGUbO2jTx8QJMqs361ZQSRTAw=
Subject key identifier: 47:FC:68:56:42:AC:B6:BC:66:ED:AE:4C:AC:0D:39:2C:9A:CB:BC:A5
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 018CC26D5CC4308D25979C039505D112F038
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/R_xoVkKstrxm7a5MrA05LJrLvKU.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 185.45.194.0/24 maxlen: 24
212.8.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5c:c4:30:8d:25:97:9c:03:95:05:d1:12:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47fc685642acb6bc66edae4cac0d392c9acbbca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:a4:b7:bc:5f:cf:f2:3f:72:27:60:76:47:
58:17:a7:4b:7c:49:77:e2:2f:e1:93:92:1f:cc:35:
8d:d7:c9:3f:b7:68:98:e9:9f:55:38:bb:72:84:0e:
ab:8c:d0:64:f8:31:94:84:81:e4:74:18:e8:e0:71:
25:9a:64:4d:b9:c7:ff:1f:90:75:33:4a:20:77:52:
0a:25:a9:c1:c8:f6:8a:06:b6:ec:2d:b4:07:ca:7c:
0f:52:39:87:f1:91:fc:f9:fc:fc:28:8a:c2:8e:97:
79:61:d7:f2:9a:ae:4d:bb:a7:db:89:a2:45:0a:be:
a0:0f:0c:0c:e8:18:34:61:11:fa:36:b1:b3:bb:b9:
9a:ac:a5:41:cb:54:46:50:71:65:f9:53:d9:b3:0f:
24:b6:c2:de:58:2e:d7:48:17:bc:dd:c1:21:84:07:
73:bc:42:ee:c3:f5:26:70:0b:a4:e0:3d:b3:1c:6e:
bc:8f:a5:8b:fd:66:e2:8d:bb:8e:0c:0d:3b:f9:81:
5a:88:bc:6e:2e:9a:36:a1:34:6f:e2:f2:89:c0:10:
b7:90:95:6a:09:30:9b:9d:4f:00:a9:93:d8:10:d5:
8a:8b:b0:d3:75:dc:b3:2a:1d:7b:2e:91:3e:fe:c9:
45:8f:f8:e4:82:b5:c0:95:0a:8e:aa:45:1d:5b:ad:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:68:56:42:AC:B6:BC:66:ED:AE:4C:AC:0D:39:2C:9A:CB:BC:A5
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/R_xoVkKstrxm7a5MrA05LJrLvKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.194.0/24
212.8.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:33:5b:c7:d4:fd:f2:88:09:b0:41:6c:a3:3d:c6:cc:14:b1:
e9:f7:c7:8a:30:ca:86:94:88:38:18:35:7f:39:1b:7b:13:2a:
12:15:68:ae:4b:da:4a:93:6c:b9:26:eb:11:6b:e0:81:db:c6:
09:e2:62:31:bc:d5:7a:26:e4:01:0d:f9:ae:3d:b7:c9:a3:32:
00:81:fa:4a:22:94:ea:65:29:8d:f3:0e:3e:0f:bc:09:92:cc:
1b:0b:14:fc:ff:cc:bd:87:36:36:33:bd:17:f4:6c:b6:9b:f2:
bb:d5:70:bf:79:8b:3b:f7:0c:6a:0d:51:17:c4:08:89:28:ab:
e1:ad:8c:14:26:0e:cc:95:51:5f:8f:63:1b:c0:3a:83:c9:1a:
cc:4b:2a:4e:02:21:5c:48:a5:7a:88:a6:49:ae:ab:22:2b:99:
65:b5:ee:f7:77:e1:01:6f:84:13:96:a8:f2:dc:a0:9d:de:87:
43:71:4b:d5:77:36:a9:20:6e:1b:b2:e2:77:69:e0:fd:ad:f3:
94:45:e3:2f:8c:43:c7:02:5d:4d:e4:2a:7d:dc:c5:a7:da:70:
be:ac:db:bb:4e:2f:99:3a:7d:c0:99:a5:02:31:92:aa:fc:e8:
2a:da:5d:cb:a2:ac:a9:0a:10:ef:08:08:50:21:5b:68:51:dd:
f9:cc:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:22:29 2024 by rpki-client on console-fra.rpki-client.org