Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/tdDK8SAjrFWnklW2w2ldMiZ2Eiw.roa
File: tdDK8SAjrFWnklW2w2ldMiZ2Eiw.roa (raw, json)
Hash identifier: V4DQyTjaOS9me/sZdQEYIQNXOkxTEkw1mufN5BbHxw0=
Subject key identifier: B5:D0:CA:F1:20:23:AC:55:A7:92:55:B6:C3:69:5D:32:26:76:12:2C
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 018CC94C26E1D1149738DEA0DA94F3F33728
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/tdDK8SAjrFWnklW2w2ldMiZ2Eiw.roa
Signing time: Tue 02 Jan 2024 08:31:00 +0000
ROA not before: Tue 02 Jan 2024 08:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48501
IP address blocks: 185.161.141.0/24 maxlen: 24
185.161.140.0/22 maxlen: 22
185.161.140.0/24 maxlen: 24
185.161.143.0/24 maxlen: 24
185.161.142.0/24 maxlen: 24
2a07:c500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:26:e1:d1:14:97:38:de:a0:da:94:f3:f3:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Jan 2 08:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d0caf12023ac55a79255b6c3695d322676122c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:14:a1:55:20:2b:41:fb:fc:2f:fe:2d:c9:
63:01:4d:9e:38:f6:4b:db:ae:b4:aa:d0:dc:92:f3:
74:be:5d:a1:f1:95:70:3d:ad:62:98:bf:dc:35:6a:
2b:8a:7d:cf:84:cc:fe:7d:3a:c1:2e:ac:1f:2d:f4:
aa:e5:2d:f6:73:05:3a:68:58:13:65:55:61:25:df:
56:2a:c4:a8:32:59:e5:45:21:6d:62:9a:e6:25:74:
32:8f:1d:9e:45:2c:64:b4:aa:74:29:cd:b3:f9:7d:
7a:44:bc:4e:23:cc:c5:b1:f9:a4:77:b6:ef:08:a8:
8a:16:31:46:f8:e1:96:cf:03:fb:82:98:19:ee:29:
0d:14:e7:91:7e:a7:81:2f:9e:4f:f2:18:4d:4c:1b:
86:0a:d7:5f:86:43:d9:b4:a9:c3:21:1d:08:ec:1b:
31:50:cc:23:e7:11:ae:0c:4a:b3:0f:12:0d:84:32:
ac:84:f5:22:46:74:26:bb:2d:47:02:0a:fa:67:22:
e0:d5:b5:39:59:2f:e3:23:6f:56:7a:d9:16:42:51:
1a:e5:74:f7:ca:c2:d6:e2:a3:75:d5:5d:64:ce:2e:
7e:4f:e8:3a:a5:42:78:60:73:4f:3d:4c:a0:38:f0:
a5:b6:48:a9:ee:72:3f:93:bb:57:a5:87:8e:da:ca:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:CA:F1:20:23:AC:55:A7:92:55:B6:C3:69:5D:32:26:76:12:2C
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/tdDK8SAjrFWnklW2w2ldMiZ2Eiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.140.0/22
IPv6:
2a07:c500::/29
Signature Algorithm: sha256WithRSAEncryption
55:f0:1b:21:b0:1a:63:a7:74:23:18:96:00:d6:6a:f6:2a:0a:
7b:fe:ef:0f:d2:6d:1d:a6:2a:db:6b:95:c2:1e:13:90:18:18:
21:f3:a2:82:fc:0b:e7:c5:58:8b:fd:5f:56:10:a7:60:41:0f:
af:23:af:cb:4c:51:85:79:0c:fd:29:67:3b:a2:7d:d6:ae:5b:
d4:fe:83:59:9e:99:63:98:b9:49:b5:17:82:08:38:ae:ab:5d:
16:f3:60:ea:da:ce:d5:3f:fe:5f:98:67:3b:3c:04:9b:b5:a5:
59:4e:b8:56:58:c7:35:1c:4f:2f:a7:a8:87:04:ae:76:8a:be:
4c:c2:7d:d9:5d:3e:58:09:43:fd:a6:89:ba:0c:13:b1:a3:98:
a2:56:e9:80:f1:90:4d:a5:ca:3e:97:f0:db:77:75:14:01:3f:
dc:ff:3b:fa:55:4a:58:65:71:9d:3d:d9:0a:25:eb:23:cf:5a:
ad:21:89:db:11:5f:24:9e:e6:39:82:67:de:57:a2:a3:21:3a:
c4:70:2f:59:eb:3e:b4:d9:5c:9a:fc:f7:77:2b:6f:f5:0e:17:
4e:79:73:3a:53:cf:02:3d:9f:e1:2b:b6:98:06:4e:1d:ab:97:
97:76:b7:a6:ae:90:bd:5a:c3:a7:df:5e:41:e4:b9:ac:4c:39:
c2:a6:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:13:25 2024 by rpki-client on console-fra.rpki-client.org