Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/xIqH5_l3oRoQI0_nopnhw2Fr8Xg.roa
File: xIqH5_l3oRoQI0_nopnhw2Fr8Xg.roa (raw, json)
Hash identifier: VqVMWsIuTSh0Oh1jDFseDbScDQnKx1ce0ABL/DoLECI=
Subject key identifier: C4:8A:87:E7:F9:77:A1:1A:10:23:4F:E7:A2:99:E1:C3:61:6B:F1:78
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 018CC7260F7A2E4499A085BE38E2A73BF4B1
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/xIqH5_l3oRoQI0_nopnhw2Fr8Xg.roa
Signing time: Mon 01 Jan 2024 22:30:09 +0000
ROA not before: Mon 01 Jan 2024 22:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198018
IP address blocks: 185.177.131.0/24 maxlen: 24
185.177.129.0/24 maxlen: 24
194.153.186.0/24 maxlen: 24
2a0b:1306:7::/48 maxlen: 48
2a0b:1301::/34 maxlen: 34
2a0b:1301:4000::/34 maxlen: 34
2a0b:1306:2::/48 maxlen: 48
2a0b:1306:1::/48 maxlen: 48
2a0b:1306:c::/48 maxlen: 48
2a0b:1301:8000::/48 maxlen: 48
2a0b:1301:8001::/48 maxlen: 48
2a0b:1306:8::/48 maxlen: 48
2a0b:1306:4::/48 maxlen: 48
2a0b:1300::/34 maxlen: 34
2a0b:1306:6::/48 maxlen: 48
2a0b:1300:8000::/48 maxlen: 48
2a0b:1306::/48 maxlen: 48
2a0b:1306:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:0f:7a:2e:44:99:a0:85:be:38:e2:a7:3b:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 22:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c48a87e7f977a11a10234fe7a299e1c3616bf178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:fc:00:03:7f:d5:55:99:4e:4e:e8:9a:01:
d1:66:b9:e5:b6:c4:a7:3c:f7:7f:cb:60:4a:3a:53:
2e:51:aa:3d:dd:f3:b5:c8:a8:c3:2f:2f:1b:44:19:
5d:0e:7c:5a:90:b3:cc:2a:bc:0b:15:9e:0e:cf:ca:
90:f9:99:05:a1:ab:6b:20:0e:40:c6:a6:a1:68:94:
fe:a6:71:54:b2:8d:26:a0:a8:7a:b2:7d:0c:f0:99:
40:ee:e9:be:99:30:f7:02:a2:73:2d:c2:6a:c4:c7:
13:6c:00:1f:3f:4b:5c:27:1f:61:0e:95:d1:2d:7c:
ed:a1:c1:b2:78:c2:f7:40:78:7a:e9:22:3d:50:cf:
e2:36:2f:d7:50:b2:ed:ab:42:4b:d2:d3:a6:69:8a:
bc:fb:99:a2:b1:ea:8b:a1:b0:40:fc:a0:08:de:1a:
a5:ce:80:3a:6a:c2:96:92:73:36:32:7f:e6:11:0e:
c8:45:f3:e6:bd:d9:4f:78:54:96:e1:f0:20:fe:ec:
75:c0:53:bc:c2:48:bc:b2:63:e6:4c:d5:6a:22:71:
ed:2a:c5:99:60:b3:28:e6:13:10:a3:f0:b5:3b:62:
01:d3:7a:64:6f:6c:c9:62:59:12:2e:8e:9d:f0:ae:
0b:ed:11:29:09:61:2c:3f:81:4e:fe:34:95:53:71:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:87:E7:F9:77:A1:1A:10:23:4F:E7:A2:99:E1:C3:61:6B:F1:78
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/xIqH5_l3oRoQI0_nopnhw2Fr8Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.129.0/24
185.177.131.0/24
194.153.186.0/24
IPv6:
2a0b:1300::/34
2a0b:1300:8000::/48
2a0b:1301::-2a0b:1301:8001:ffff:ffff:ffff:ffff:ffff
2a0b:1306::-2a0b:1306:2:ffff:ffff:ffff:ffff:ffff
2a0b:1306:4::/48
2a0b:1306:6::-2a0b:1306:8:ffff:ffff:ffff:ffff:ffff
2a0b:1306:c::/48
2a0b:1306:400::/48
Signature Algorithm: sha256WithRSAEncryption
82:af:56:e6:4e:ef:a7:78:09:21:44:da:f4:c1:90:a7:20:44:
c2:b2:60:1d:8b:a2:a0:89:fa:ba:7e:bd:1b:1a:46:e7:3a:58:
7a:4d:f0:11:c9:ec:e7:6c:0b:ec:dc:de:7b:1e:da:0b:b5:9f:
b6:5f:b9:b3:b4:78:c5:64:3b:86:fe:d3:77:00:3d:44:5d:ed:
64:25:f5:cb:e8:0c:fe:91:c3:e7:b2:fc:52:54:ec:87:cb:1a:
d5:26:76:1c:b3:8c:fc:e6:cc:14:f7:40:66:67:67:38:6c:28:
47:6d:2a:38:b6:f9:14:c6:0a:1b:03:d7:e7:1f:fa:0a:df:83:
da:01:d6:be:66:5d:57:b7:26:47:66:54:f2:d2:68:59:47:70:
56:49:f9:6c:9f:1a:5f:c1:de:70:ea:82:6a:25:2d:ec:a8:78:
61:fb:a8:c1:db:ee:5f:49:54:81:b0:ec:5f:bd:49:23:8f:f9:
15:4a:94:55:cb:79:61:0a:a1:0e:7d:66:f0:1c:80:60:ad:f3:
5a:21:9d:01:c0:37:c3:60:74:08:74:a2:b2:c3:d8:99:83:de:
5f:ca:f8:96:4c:82:11:de:2e:d2:ca:18:09:9f:b1:4e:14:51:
d1:b2:56:d3:ca:97:10:ac:cf:7b:07:86:50:23:2d:69:bb:0a:
c1:e9:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:25 2024 by rpki-client on console-ams.rpki-client.org