Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/ayNOAY8eat7MD3pG2DKgh-cK8Y8.roa
File: ayNOAY8eat7MD3pG2DKgh-cK8Y8.roa (raw, json)
Hash identifier: ttKFr9BpKSTJiws+FYqQA2Yyy9YhAfm9k4fSe3YFgGw=
Subject key identifier: 6B:23:4E:01:8F:1E:6A:DE:CC:0F:7A:46:D8:32:A0:87:E7:0A:F1:8F
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 018CC86F6E52FA17F53864609B8D3841D344
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/ayNOAY8eat7MD3pG2DKgh-cK8Y8.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202013
IP address blocks: 185.105.248.0/24 maxlen: 24
185.105.251.0/24 maxlen: 24
185.105.250.0/24 maxlen: 24
185.105.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6e:52:fa:17:f5:38:64:60:9b:8d:38:41:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b234e018f1e6adecc0f7a46d832a087e70af18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:1e:10:69:09:e5:b2:74:aa:fa:fe:83:cf:
9c:b5:2e:51:41:a7:d7:ea:db:2a:31:0d:a9:3e:b9:
ad:b9:04:b6:27:26:62:4d:58:0e:78:9a:15:32:e3:
08:9b:65:80:3d:11:b6:85:c1:91:09:75:8b:21:c3:
1a:46:f7:c8:09:d8:d6:c3:84:da:2a:e6:7c:e3:cc:
81:14:af:79:1f:15:e6:03:d0:c4:ff:15:9e:c5:0a:
45:0b:eb:a1:22:ab:a5:3a:13:2e:fc:31:7b:73:da:
b1:4d:ad:33:a3:ef:f6:bd:45:15:8d:7e:b8:16:ab:
65:19:40:4a:48:f1:fe:91:20:72:8a:4e:e9:d1:11:
49:6e:d2:72:1f:10:34:5b:9a:ce:97:15:1a:63:8a:
8d:64:eb:c9:8d:e7:8b:f2:26:39:0b:8d:3a:a4:37:
67:40:41:b5:f1:be:f4:e6:93:a4:3a:fe:38:11:64:
8f:3d:67:e9:84:e7:e5:55:d5:bc:ec:61:d9:2d:68:
6b:ac:20:69:c7:7e:ee:5e:29:36:a0:bc:4b:1b:af:
d4:01:d8:5a:a3:cb:b3:91:90:25:ef:a3:8c:a1:50:
23:77:c4:e2:ad:cb:37:27:e0:57:4e:8e:44:7f:e8:
44:e9:21:05:a0:06:e5:a5:3e:54:15:c0:11:14:eb:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:4E:01:8F:1E:6A:DE:CC:0F:7A:46:D8:32:A0:87:E7:0A:F1:8F
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/ayNOAY8eat7MD3pG2DKgh-cK8Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:d2:10:ba:16:2e:a6:aa:33:7b:2c:58:69:56:0c:61:cd:7c:
fe:19:aa:08:10:2b:bf:c2:2d:8e:2e:80:1d:3e:73:ad:31:1d:
8d:d7:79:61:7d:35:05:11:0c:49:25:d0:b1:bc:88:82:4d:7b:
e4:5d:7b:3f:7d:e3:0c:ec:fa:89:4a:4f:8b:be:e9:63:7d:23:
33:4b:bb:dc:5f:b7:0e:ac:15:33:ad:ef:aa:57:ed:a5:5d:0f:
f2:99:5a:0e:65:ba:91:be:56:ae:a7:41:41:d4:62:bb:02:07:
be:d8:4e:f3:b5:ff:eb:71:94:ec:29:2d:01:d9:93:3c:9f:da:
e4:c4:1c:5a:01:d8:bf:81:ee:c6:ac:3a:14:9a:68:73:72:be:
93:1a:0a:66:05:69:0c:55:7f:af:7e:32:5d:36:f3:60:8b:b1:
09:5b:9c:1f:b7:b0:36:6a:11:9a:43:75:65:19:7a:c2:ac:3e:
13:2f:20:10:c4:97:e1:2f:6d:ee:d1:b8:ae:36:48:0e:e3:95:
67:24:03:9b:22:ea:fb:a8:94:a6:b8:a2:4c:43:34:7e:5a:e1:
6a:7b:d2:9b:c1:bd:48:c2:b1:6a:b7:0d:29:6e:2c:e1:d0:b1:
36:3d:05:9f:b0:4c:14:20:d4:82:54:1d:3b:fb:72:24:46:97:
6c:1f:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:31:35 2024 by rpki-client on console-ams.rpki-client.org