Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/5rrZFjRnVgrrlj38TV6VU6RKRxs.roa
File: 5rrZFjRnVgrrlj38TV6VU6RKRxs.roa (raw, json)
Hash identifier: 8rRcEZSX5H5WpDO+pvso+/lb0wBQTUgyibEFOBwGyHc=
Subject key identifier: E6:BA:D9:16:34:67:56:0A:EB:96:3D:FC:4D:5E:95:53:A4:4A:47:1B
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 018CC2DB107C904D1932A7F3D74A98B6ED8C
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/5rrZFjRnVgrrlj38TV6VU6RKRxs.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208350
IP address blocks: 185.135.19.0/24 maxlen: 24
185.135.18.0/24 maxlen: 24
85.255.152.0/24 maxlen: 24
85.255.147.0/24 maxlen: 24
85.255.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:10:7c:90:4d:19:32:a7:f3:d7:4a:98:b6:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6bad9163467560aeb963dfc4d5e9553a44a471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:ce:d7:88:8d:61:37:a3:d4:ce:e0:cd:d9:
cc:e7:43:46:47:0d:e8:9b:e8:54:07:f4:bc:f8:4a:
8f:5e:5a:83:6c:07:37:cf:37:f8:cc:cb:cd:20:1e:
89:2c:4a:92:48:77:c6:a4:23:95:21:36:f2:5a:74:
bb:63:c1:6c:87:36:d7:62:bd:84:a1:24:f8:43:4d:
bd:c7:b3:82:85:30:7e:d1:f6:f1:54:d8:f7:76:d7:
a1:6b:e8:67:7a:b4:46:d1:8e:f9:8f:5a:45:86:13:
b9:f0:2e:62:16:e2:fc:b9:5f:15:11:aa:5e:e0:4a:
fb:62:4d:af:42:8c:0b:14:79:97:e6:83:6e:fe:eb:
b1:25:90:e6:31:c8:7f:89:5b:d0:0d:a2:97:8f:73:
bb:f8:da:16:b6:99:8e:19:9f:ef:68:58:4d:59:ca:
02:44:17:b0:3b:21:d4:2a:56:d5:5b:73:37:94:04:
cc:d7:a6:72:c2:58:e9:f4:a1:b9:80:44:87:34:f8:
5a:61:f0:f1:1b:23:06:49:f2:f3:6b:60:ea:71:aa:
c5:dc:2c:0b:4e:1e:6d:ea:ed:25:52:17:23:ed:00:
ee:3c:95:34:16:7d:79:24:49:64:cb:5c:b1:e4:25:
41:ad:c3:12:96:c3:15:4a:df:71:7b:c7:16:81:a1:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BA:D9:16:34:67:56:0A:EB:96:3D:FC:4D:5E:95:53:A4:4A:47:1B
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/5rrZFjRnVgrrlj38TV6VU6RKRxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.146.0/23
85.255.152.0/24
185.135.18.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:5c:f1:20:a8:02:c8:fa:83:c0:4a:5f:3c:28:4d:b6:2d:68:
c9:1b:8d:47:6b:80:b0:c3:5b:26:0d:b9:6b:ac:80:8f:d6:00:
c2:a3:66:0c:78:cc:56:0f:10:28:c9:29:65:d8:3d:d4:f2:98:
c5:34:f3:a8:f6:68:76:ce:6b:3b:71:15:ad:8e:ec:42:c0:06:
8f:26:4b:8c:73:74:c0:37:96:39:d0:38:7b:68:c9:26:d3:fe:
fe:08:7e:58:b4:58:a6:02:aa:92:93:99:01:ab:5c:ab:0b:44:
19:d5:8d:02:9f:60:d3:fc:d5:45:30:60:a6:7f:62:f5:37:db:
85:07:c1:03:37:78:0a:d6:55:13:75:0c:fa:31:a0:87:4b:87:
71:b2:4e:94:06:b9:f4:f4:7a:b0:1b:b5:49:0a:c0:7a:f0:d8:
dd:a0:2a:b2:87:9c:e8:9d:80:d2:cd:12:b7:f2:de:41:45:2d:
56:25:85:f0:b3:98:3b:fe:9f:7b:0d:16:83:df:4c:96:02:0a:
2a:d7:9d:22:a1:ca:5d:eb:ff:eb:fe:83:f2:34:8e:87:26:a0:
0c:b1:d4:49:2e:72:70:6e:9c:09:06:c7:95:62:96:41:c2:31:
b9:69:24:7b:ac:f6:c7:2a:b4:9e:9e:65:3c:78:9e:db:3d:5a:
6b:86:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:09:54 2024 by rpki-client on console-fra.rpki-client.org