Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/OartbE9Fd3H2KjvVePbWL31Vu6I.roa
File: OartbE9Fd3H2KjvVePbWL31Vu6I.roa (raw, json)
Hash identifier: 1mFl+Ydv8fKaCTKvg6Y/Lfvqitkdj+7b1xqc4S9lJb8=
Subject key identifier: 39:AA:ED:6C:4F:45:77:71:F6:2A:3B:D5:78:F6:D6:2F:7D:55:BB:A2
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 018CC5001159FC0B3395FCA16615AF2D2C72
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/OartbE9Fd3H2KjvVePbWL31Vu6I.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5484
IP address blocks: 185.46.216.0/24 maxlen: 24
185.46.217.0/24 maxlen: 24
185.46.218.0/24 maxlen: 24
185.46.219.0/24 maxlen: 24
185.128.152.0/24 maxlen: 24
185.128.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:11:59:fc:0b:33:95:fc:a1:66:15:af:2d:2c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39aaed6c4f457771f62a3bd578f6d62f7d55bba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:58:24:e9:1f:ef:3e:70:f1:a8:2c:96:58:
e6:4b:00:cd:ad:bc:ae:22:bb:dc:86:ab:58:22:a1:
66:a8:4a:d3:06:32:56:06:b5:a4:25:a9:af:be:39:
2e:a4:b9:22:86:c5:ec:96:a6:21:bf:45:b5:e4:e9:
b1:0c:c7:ee:db:4b:5e:59:37:8f:c9:e7:0b:ad:0d:
83:e1:ae:d0:9a:4d:35:ae:ac:70:cd:07:8d:a4:2a:
24:9f:94:06:7b:f4:6b:c2:82:54:d4:89:de:8d:e9:
a8:8c:d3:e5:ad:23:c8:26:c3:f4:1a:fa:48:50:16:
ca:53:10:1f:a2:b9:47:b0:d0:58:e1:3a:2f:43:ff:
e1:f4:81:80:73:03:ac:07:94:73:ec:2f:ff:da:e3:
e2:14:91:41:55:0f:4d:9a:89:f7:cb:37:d6:21:b4:
b4:7c:42:ad:7e:01:2a:af:77:c3:86:2a:95:b6:ff:
4a:dc:30:a8:c6:c3:1b:46:3f:60:c3:d1:e8:0b:e6:
d5:99:0d:79:29:a4:c5:cb:5d:95:a0:ec:5d:44:54:
3f:38:37:ea:1b:e3:37:23:64:08:c5:80:d1:90:6f:
33:73:28:20:66:ff:0e:26:63:37:d6:dc:26:a2:55:
3e:37:56:ad:76:ed:ad:52:f5:2b:8b:ef:6f:0a:7d:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:ED:6C:4F:45:77:71:F6:2A:3B:D5:78:F6:D6:2F:7D:55:BB:A2
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/OartbE9Fd3H2KjvVePbWL31Vu6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.216.0/22
185.128.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:0c:a0:b3:64:fc:80:62:a1:82:6e:23:23:98:3a:55:06:91:
1e:6e:0f:31:b5:cb:40:31:5e:7e:ea:a0:65:db:fb:e0:ac:1e:
68:ab:09:70:f5:bd:57:fb:54:95:bf:0c:be:0e:18:cb:bc:0b:
7c:74:d6:80:c0:e2:af:6b:cc:4d:fe:c8:03:a1:2d:f0:b5:5d:
a8:6b:8e:f9:5f:45:39:cd:b2:fc:3c:0e:aa:d7:4a:26:7e:28:
e3:4f:fd:48:cb:d7:c9:f3:8f:95:a9:03:27:f3:84:16:91:2c:
5d:d8:b3:e4:7b:2b:58:e5:d5:5c:cd:39:79:45:81:ee:60:f4:
1f:4d:97:f5:6e:a0:9e:f8:52:8b:47:1a:a0:f8:ae:14:00:01:
79:74:7e:74:22:06:f4:cc:fb:45:5b:86:6c:f1:b6:fc:45:2f:
bb:1e:2f:5b:23:ff:12:38:d5:95:b1:5a:bf:5e:31:6d:ba:cd:
96:a4:0e:27:bb:39:c8:20:c1:2f:5c:c5:56:de:24:a3:77:01:
9c:f9:e7:fe:e4:ff:29:11:41:6a:77:a1:6b:64:79:2f:28:69:
64:c7:9c:f7:14:bd:f7:fe:9b:4b:26:1d:c0:c3:fd:c0:f6:9b:
cc:0f:b5:12:a2:2f:86:b3:05:90:75:d3:39:5d:eb:3a:00:8e:
4c:0d:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:01:49 2024 by rpki-client on console-ams.rpki-client.org