Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/myR5xO8l7ndQcJ4beot3Gn3kVS8.roa
File: myR5xO8l7ndQcJ4beot3Gn3kVS8.roa (raw, json)
Hash identifier: 62BP7VEJGU28uQyA20BX79GUFOBhMuev0YeX4wmZ0qc=
Subject key identifier: 9B:24:79:C4:EF:25:EE:77:50:70:9E:1B:7A:8B:77:1A:7D:E4:55:2F
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 018CC56EF774AAF89A8DAF9557D71C68510F
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/myR5xO8l7ndQcJ4beot3Gn3kVS8.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203434
IP address blocks: 185.134.164.0/22 maxlen: 24
45.66.232.0/22 maxlen: 24
2a00:b0a0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:74:aa:f8:9a:8d:af:95:57:d7:1c:68:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b2479c4ef25ee7750709e1b7a8b771a7de4552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:f2:0f:e3:71:01:c0:67:9c:30:ed:2c:5e:
f5:5b:8f:b9:f5:0f:77:63:6d:47:12:8f:47:68:48:
3d:60:77:7f:5d:8f:a5:bd:2a:43:9f:01:9e:87:b3:
98:9a:09:fb:0d:33:ab:ee:3d:b3:06:a6:f7:b9:d1:
eb:d4:1a:02:95:0e:22:80:1e:b4:ee:25:c5:df:31:
ad:a2:4f:19:7a:d1:5e:31:c7:de:a1:3f:39:9e:7e:
ee:88:9d:5d:60:dc:d5:df:3e:33:a1:73:64:a6:39:
57:df:62:f9:29:8e:a7:36:02:fc:f5:3b:14:b9:31:
ee:99:a9:e2:67:11:20:a5:d2:30:22:e0:45:ef:94:
d7:d0:c3:55:70:11:e1:23:3e:76:30:a3:27:89:b7:
5e:5d:87:a5:7e:44:45:f4:c0:b2:e1:f0:0b:cf:47:
dd:4a:f1:a5:38:dd:13:56:8e:d9:04:22:cd:37:f5:
de:a8:18:3e:13:a4:28:89:00:91:01:ce:71:2f:4f:
67:69:a3:83:2f:4b:b1:39:3a:2a:bb:88:56:00:be:
1f:6d:2f:f8:4f:88:46:64:32:1d:82:75:2a:09:40:
e3:39:7b:36:b4:99:c1:3c:25:59:be:58:f3:9e:80:
0c:16:ca:3f:bc:85:81:3a:97:c1:32:cc:53:2f:4a:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:79:C4:EF:25:EE:77:50:70:9E:1B:7A:8B:77:1A:7D:E4:55:2F
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/myR5xO8l7ndQcJ4beot3Gn3kVS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.232.0/22
185.134.164.0/22
IPv6:
2a00:b0a0::/29
Signature Algorithm: sha256WithRSAEncryption
88:6a:c0:9e:b4:0b:31:3a:d9:19:4f:2a:1a:a9:a0:a6:e1:e5:
73:fc:08:43:17:85:8d:36:73:97:11:57:75:2f:a1:bb:99:52:
5f:d0:9c:5e:5b:81:68:c1:41:8c:5f:cc:dd:c4:62:cb:c4:75:
15:4d:72:8c:90:e9:53:1f:fb:3c:fb:33:b7:43:1f:69:c0:1e:
fe:89:73:a4:0c:b9:64:3f:6b:4a:95:05:26:a8:dc:ea:f2:b1:
45:ed:6b:a2:87:99:b7:0a:71:5d:02:32:d3:7f:ee:59:3d:b9:
e9:01:68:cb:e8:49:8d:43:d8:b1:6f:f7:84:96:cf:e3:c9:15:
c0:a6:f7:d6:26:14:33:99:84:d6:43:10:2c:12:35:1f:ea:e1:
c1:14:3f:75:9a:11:35:80:60:19:6d:99:44:20:03:3f:c1:a5:
ed:44:3d:e1:98:0a:75:a6:42:ee:43:da:64:11:0d:4c:55:da:
83:3c:5d:af:8a:23:99:96:09:bb:9b:23:8f:ac:58:06:22:06:
85:9b:43:74:ce:1a:b3:e5:84:e3:a9:2c:6c:79:8f:ad:1c:51:
4d:c6:ed:2a:a7:5f:83:3d:48:46:37:b0:55:66:ce:a7:56:57:
77:8b:62:66:9e:b2:3d:9f:68:17:1e:fe:a7:00:20:d2:e7:50:
74:57:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:15:35 2024 by rpki-client on console-ams.rpki-client.org