Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/h2EyjkkOsdb_E63jUqZMXMmdyrM.roa
File: h2EyjkkOsdb_E63jUqZMXMmdyrM.roa (raw, json)
Hash identifier: PKtKy6aK+Iwp03kBV346O+PZclvzQ3Ps1ElnvLiT7g0=
Subject key identifier: 87:61:32:8E:49:0E:B1:D6:FF:13:AD:E3:52:A6:4C:5C:C9:9D:CA:B3
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 018CC801265C359F8AFA88B1BFEF1AC759CD
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/h2EyjkkOsdb_E63jUqZMXMmdyrM.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205763
IP address blocks: 185.207.124.0/24 maxlen: 24
185.207.127.0/24 maxlen: 24
185.207.126.0/24 maxlen: 24
2a0b:2340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:26:5c:35:9f:8a:fa:88:b1:bf:ef:1a:c7:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8761328e490eb1d6ff13ade352a64c5cc99dcab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:be:ac:ae:e0:cd:7a:f1:72:91:56:04:c2:
cf:73:31:60:80:cd:c9:33:75:e9:67:0e:63:08:0b:
a3:ab:55:2e:fa:63:6d:62:d3:04:ca:19:3d:7b:75:
7d:c2:6d:46:f8:6d:f8:12:51:fb:79:56:a8:31:f5:
bb:61:49:47:de:71:c5:99:c9:44:68:da:77:dc:71:
ca:bd:74:b2:98:03:4c:db:32:84:15:14:e4:e3:b4:
45:2a:b8:12:cc:2b:c8:63:22:b5:b7:ac:e2:09:52:
ef:4c:f3:85:39:a9:29:2f:4a:92:e4:a3:dd:6e:41:
94:5b:a2:8a:83:d8:87:fb:60:cd:a0:47:4f:e9:71:
fb:9a:f0:fc:81:df:7f:05:8b:13:af:fe:f9:0f:bd:
f7:92:30:ed:76:64:d0:13:59:ac:eb:67:5a:c5:56:
9d:0c:f2:34:52:07:1f:71:d0:3a:d1:5f:e8:ed:b8:
3d:f4:0f:d2:66:4b:ce:28:2d:83:1a:e2:42:59:70:
53:6c:9f:4c:0e:c5:fc:cf:15:42:6a:fa:47:0b:8a:
a0:f5:70:1f:73:0a:10:d7:e9:ef:b0:8e:9b:18:0a:
08:78:2b:a1:a3:32:4d:4b:06:ad:99:ca:07:3f:f2:
12:53:77:3a:1a:b6:36:ba:7d:ca:f6:1a:14:b0:6f:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:32:8E:49:0E:B1:D6:FF:13:AD:E3:52:A6:4C:5C:C9:9D:CA:B3
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/h2EyjkkOsdb_E63jUqZMXMmdyrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.124.0/24
185.207.126.0/23
IPv6:
2a0b:2340::/29
Signature Algorithm: sha256WithRSAEncryption
91:10:6f:64:4f:ca:ed:65:8c:25:45:ff:63:b4:cd:af:b3:ec:
a2:79:6a:90:88:ce:49:36:48:ff:43:49:0e:c7:e2:32:0f:03:
e5:de:47:1a:3c:36:fa:8f:b5:8c:68:8e:dc:9c:77:6f:74:a5:
d5:5c:6e:7b:d9:73:22:a7:b3:8e:51:ec:b0:9b:00:2f:ca:e5:
32:7a:e9:5b:63:94:57:42:1e:91:00:42:65:e6:7b:1d:b0:82:
eb:35:90:a1:94:da:2e:d2:3c:9e:91:82:a0:d8:b6:32:5e:fd:
b2:96:36:03:1c:f1:c8:63:80:a5:00:dd:1e:c4:db:3e:31:ee:
f4:87:69:82:cb:3d:c6:de:bb:98:66:34:49:a7:ea:6f:88:68:
e5:35:39:f3:b4:e0:bf:6b:98:9f:30:81:47:c0:0d:cd:dd:8e:
7a:1a:15:2d:9a:64:fb:c6:32:10:3b:2d:f5:29:38:25:ba:69:
f6:56:c5:b6:bf:2f:75:07:e9:f7:ab:e8:8a:a0:ef:2b:78:1f:
1d:be:e7:aa:35:66:05:cf:8c:7b:78:2a:f9:7d:63:8b:8a:ea:
2d:1a:d8:48:61:c2:4f:c3:4b:8d:76:a7:78:43:8c:43:26:a3:
1d:ea:4f:32:db:09:70:04:03:06:f4:9b:5e:2f:cd:e4:02:fc:
36:00:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:22:05 2024 by rpki-client on console-fra.rpki-client.org