Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/AwBtLTQFZADJGYH5HuPb0kLHX88.roa
File: AwBtLTQFZADJGYH5HuPb0kLHX88.roa (raw, json)
Hash identifier: qYVOwKMEjHVFKuUwpywsGBUL9B0nFT7sJ/x6D+6TMxI=
Subject key identifier: 03:00:6D:2D:34:05:64:00:C9:19:81:F9:1E:E3:DB:D2:42:C7:5F:CF
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 018D204B723D6C1E44759BC8EF50F9E38CDD
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/AwBtLTQFZADJGYH5HuPb0kLHX88.roa
Signing time: Fri 19 Jan 2024 05:57:11 +0000
ROA not before: Fri 19 Jan 2024 05:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44028
IP address blocks: 185.251.64.0/24 maxlen: 24
185.251.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:4b:72:3d:6c:1e:44:75:9b:c8:ef:50:f9:e3:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Jan 19 05:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03006d2d34056400c91981f91ee3dbd242c75fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:fd:34:d9:8f:ee:fb:76:21:72:c2:ac:8a:
db:90:d6:f7:fb:53:57:fd:2a:40:7d:23:59:6d:f1:
65:af:30:04:4d:4d:b5:8e:00:77:f1:32:2e:59:5b:
51:c2:66:b9:a7:c1:5c:d7:1a:70:eb:8d:87:67:d9:
2d:47:47:19:44:d1:13:7d:4d:d7:0d:44:2e:5d:8e:
21:0e:d1:50:61:14:88:8a:0d:8d:73:1f:d2:1a:01:
e5:70:52:53:27:ad:7a:95:4c:d2:c8:62:9f:97:a2:
52:07:d0:fa:75:0f:f2:f7:4b:c1:c2:72:d1:c6:fd:
cf:d0:c0:52:f1:21:64:af:e1:12:47:eb:11:b9:61:
db:d8:79:80:f5:75:b1:dd:ab:cb:64:ca:ea:b4:79:
30:1d:28:78:a3:e2:ad:1a:64:b5:49:7e:e2:11:4c:
5e:fa:91:ea:07:f0:35:f6:ee:47:70:65:eb:1b:64:
89:81:fa:39:95:d9:fe:ac:a9:72:9f:6e:b1:17:1c:
ae:1e:52:5f:60:2e:cf:5e:4e:1e:ae:3e:31:51:20:
d3:99:20:1e:3b:f6:05:fc:33:13:51:df:4d:ba:a0:
b6:d0:59:3e:99:c9:69:78:11:8c:24:3c:aa:6e:a8:
b0:a8:15:a7:62:5a:38:5e:10:ef:07:22:7e:4b:d0:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:6D:2D:34:05:64:00:C9:19:81:F9:1E:E3:DB:D2:42:C7:5F:CF
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/AwBtLTQFZADJGYH5HuPb0kLHX88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.64.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:47:24:52:cc:5d:58:58:2f:ac:d5:dc:ab:20:cc:66:1a:e7:
c5:3f:d3:92:57:da:d8:c4:e0:57:c0:44:88:43:dc:47:f6:eb:
67:30:3b:05:98:a8:a5:71:bd:1f:88:75:87:b6:47:7b:ab:56:
1f:89:55:80:48:5a:26:5b:02:bf:9c:e8:14:ad:7c:c4:14:b1:
d7:3a:6e:4c:40:4e:de:79:20:4e:d9:11:33:cb:58:ac:6f:46:
ff:07:19:2d:44:c9:5a:db:10:dd:3e:d2:0c:c8:b1:32:25:a7:
48:7a:58:bd:c1:f1:77:be:0f:e1:30:f4:f7:d0:50:e6:3f:76:
71:c4:21:40:c6:32:99:1b:5b:49:de:bd:d7:68:5e:5f:f3:4e:
c3:29:c6:58:5c:e9:a8:83:6c:ea:a5:ce:b6:f8:05:5d:7a:ca:
86:bd:aa:f7:e6:f1:86:61:47:14:60:fc:96:74:b5:c8:74:e2:
6b:24:ea:57:a0:67:a4:82:f1:f4:3e:7e:a7:2d:6b:0d:99:30:
e0:55:47:a9:93:a5:65:f9:81:0c:52:a3:49:14:67:b9:68:10:
bf:f7:c0:e5:2e:23:36:47:cf:3e:94:d0:6d:d9:2d:3c:6b:84:
0c:6b:91:5e:88:7c:5d:46:3a:b4:2a:8d:34:00:9e:f7:90:81:
94:ce:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:16:59 2024 by rpki-client on console-fra.rpki-client.org