Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-kLUG1pf4GRSWyZLFIaJfQvl34g.roa
File: 1-kLUG1pf4GRSWyZLFIaJfQvl34g.roa (raw, json)
Hash identifier: eCuzXk2iJamz3SmxDYAgoIZR5cJND4/I9zELFSdwsZ0=
Subject key identifier: FA:42:D4:1B:5A:5F:E0:64:52:5B:26:4B:14:86:89:7D:0B:E5:DF:88
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D02B965246810EE0DF255A6241B4F18F5
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-kLUG1pf4GRSWyZLFIaJfQvl34g.roa
Signing time: Sat 13 Jan 2024 12:08:40 +0000
ROA not before: Sat 13 Jan 2024 12:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47285
IP address blocks: 185.105.236.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:b9:65:24:68:10:ee:0d:f2:55:a6:24:1b:4f:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 13 12:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa42d41b5a5fe064525b264b1486897d0be5df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:41:23:be:d1:19:13:eb:cd:76:89:46:20:
a9:27:9c:e9:14:87:ae:fd:43:b1:93:5f:b2:42:a5:
fe:50:15:1c:a1:b7:3f:7a:54:ad:29:78:06:bd:e0:
ca:c0:4c:7a:43:0a:b5:ff:c3:54:07:44:47:35:f7:
61:85:95:34:82:14:2f:1d:d8:cf:85:c8:af:c4:52:
be:a7:73:98:fa:4c:47:5b:17:c0:fa:f6:68:41:90:
12:ab:45:52:eb:ad:64:65:70:1e:6c:67:96:24:bd:
e0:56:45:f6:62:53:f1:52:c0:b0:0a:24:75:83:0e:
0e:6f:1d:97:c9:7b:41:fc:b2:eb:af:03:16:9b:f8:
b9:a5:bb:51:9f:26:12:ea:9e:ce:6b:5b:60:be:de:
6e:5e:bd:20:80:19:1f:bb:48:13:d7:95:5b:e7:e0:
b2:71:37:26:3c:0e:4d:e0:f9:a5:eb:56:b2:75:05:
e7:3c:5d:e9:d6:8f:a8:17:78:24:2c:73:7b:08:7a:
7f:1f:e2:13:8f:dd:e7:88:1e:cc:52:71:a0:a9:b6:
56:cd:f9:66:9d:b2:24:5f:83:99:b0:88:33:7c:b4:
0a:91:7f:62:1f:8c:b3:ca:ca:6b:ab:16:f7:c0:a7:
97:32:a4:8f:76:d4:2e:3f:1c:96:dd:be:08:9b:a5:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:D4:1B:5A:5F:E0:64:52:5B:26:4B:14:86:89:7D:0B:E5:DF:88
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/1-kLUG1pf4GRSWyZLFIaJfQvl34g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.236.0/24
185.105.238.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
90:04:5e:bb:97:76:90:d5:f0:0f:cf:c2:0f:98:df:9b:14:97:
6f:df:fd:10:18:f8:e9:fc:04:1c:71:35:26:f3:82:b4:f0:74:
d1:e1:c1:be:45:71:47:fd:f4:f7:11:83:5e:97:b9:42:13:24:
23:57:79:2c:46:2c:72:d9:d8:3d:0a:48:62:6c:b0:bf:eb:07:
74:d9:e1:29:24:a1:b8:66:8c:96:48:e4:03:c1:20:81:82:ce:
55:25:2e:20:35:20:0c:80:fa:63:ab:8a:09:b6:87:91:87:09:
33:4f:56:75:71:bc:98:76:b6:12:cf:c4:04:06:ed:b9:53:93:
ec:c4:71:98:6f:45:90:07:9f:81:ba:d3:66:4e:e2:b2:00:c2:
e0:68:69:9f:38:87:19:9c:5a:dc:cc:41:a6:f8:1f:49:37:80:
d3:c6:3e:08:6c:81:3a:08:1f:4f:82:10:73:39:89:4b:04:ce:
42:8d:6e:dd:b9:d4:46:ce:e9:87:65:95:b1:81:e8:8e:64:24:
ae:2e:8c:f5:27:cd:9a:11:88:d3:39:2f:36:1b:67:3e:ea:c8:
8e:b9:18:d9:f3:a6:3e:62:17:8d:89:fb:0c:a5:eb:74:72:67:
97:cd:78:e7:2f:be:80:9f:c8:e4:be:76:90:81:8e:2d:71:b0:
53:85:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:43:29 2024 by rpki-client on console-fra.rpki-client.org