Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/JT9sihnlPT6lUH0RY8WVKCGD_4M.roa
File: JT9sihnlPT6lUH0RY8WVKCGD_4M.roa (raw, json)
Hash identifier: HCuCFsfgt1XVLqw5Hw2MEjqm0GfQ1KhKPeXe8S8yEAM=
Subject key identifier: 25:3F:6C:8A:19:E5:3D:3E:A5:50:7D:11:63:C5:95:28:21:83:FF:83
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 018CC7266BD55C4AEB17947E194204442405
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/JT9sihnlPT6lUH0RY8WVKCGD_4M.roa
Signing time: Mon 01 Jan 2024 22:30:33 +0000
ROA not before: Mon 01 Jan 2024 22:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39537
IP address blocks: 185.105.64.0/23 maxlen: 24
185.105.66.0/23 maxlen: 24
2a09:fd40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:6b:d5:5c:4a:eb:17:94:7e:19:42:04:44:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 1 22:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253f6c8a19e53d3ea5507d1163c595282183ff83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:7c:24:04:fa:0d:96:59:78:a9:2f:81:ec:
fd:4a:01:64:80:ce:41:e4:de:2b:6b:10:4d:41:e2:
bf:04:9c:ac:d2:7b:7a:a4:6a:74:2b:08:a0:4b:dd:
bf:69:66:59:e2:3a:2c:64:77:a6:d0:c4:bb:06:41:
3f:fa:19:07:7c:c4:a2:8f:ec:84:49:c4:a4:fd:41:
27:67:f7:cb:7c:95:3a:82:e6:3c:9b:e3:84:10:30:
64:f7:0b:c8:b0:88:54:7b:bf:ab:b1:09:43:85:c8:
73:e9:e9:41:2e:52:b1:34:9a:4d:2c:90:a8:5e:02:
37:2a:1e:d6:47:4e:4f:e1:39:0c:f5:47:b9:cb:90:
cd:71:1a:e5:a7:92:af:24:e4:1a:30:ec:d0:7d:c1:
20:65:cf:36:51:b9:29:68:42:12:2d:4d:9a:51:23:
15:78:30:0f:72:08:d3:b0:73:34:ef:54:3b:e6:86:
3b:d6:6d:e7:92:af:1e:9e:e9:20:e4:69:58:a0:a1:
c8:86:68:f5:04:26:31:ab:b7:5f:d3:67:bc:6b:43:
a6:09:14:4e:3c:59:ce:bd:53:39:61:94:5a:8a:bc:
f6:4d:4b:f3:84:94:a9:32:b0:38:69:8e:34:9c:cb:
39:6d:7b:b3:05:90:79:3d:09:25:71:d2:a5:b9:90:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:6C:8A:19:E5:3D:3E:A5:50:7D:11:63:C5:95:28:21:83:FF:83
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/JT9sihnlPT6lUH0RY8WVKCGD_4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.64.0/22
IPv6:
2a09:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
03:57:67:56:c4:76:2c:5a:c9:42:77:11:2a:75:b8:c0:e2:1f:
ba:0f:f5:40:17:e1:90:8c:a9:fc:50:ba:42:9f:41:97:e3:ce:
4d:82:24:13:bf:68:36:27:b0:e9:ee:4e:47:dc:7b:47:64:04:
df:b5:9f:c1:83:6d:7d:4c:4d:31:d1:5a:06:3b:b2:42:99:88:
82:f9:24:b0:58:ee:da:5a:60:fd:7f:8f:11:87:ee:a8:1f:72:
d6:1e:e6:3d:53:8d:88:1b:ab:43:07:2c:7a:61:46:06:f3:79:
3a:d1:6f:01:48:3d:fb:95:ec:fe:58:45:ce:67:fb:25:1b:07:
a7:92:33:61:a9:de:64:0b:27:66:bd:9b:7c:d3:cf:23:6a:c7:
f4:af:cc:20:67:92:df:bc:a8:80:5b:c5:dd:01:db:38:16:55:
e3:05:32:d8:e2:21:de:a1:aa:2b:4f:98:2d:92:58:c5:23:30:
2f:c7:00:b4:f3:83:53:f6:ae:c2:33:8a:e6:5d:c0:10:76:94:
1b:58:88:c2:78:c4:ad:59:90:06:5c:14:66:57:28:0d:d6:54:
d4:66:1d:13:78:c3:92:e1:ad:df:68:68:b7:a5:e1:81:6b:ea:
bc:91:74:61:87:e0:f7:8e:14:28:a5:4f:60:9a:92:36:56:2d:
e8:46:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:06:34 2024 by rpki-client on console-fra.rpki-client.org