Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/1-ECN7lvtA4XhBnAQ6Rd69scilhY.roa
File: 1-ECN7lvtA4XhBnAQ6Rd69scilhY.roa (raw, json)
Hash identifier: m7Jc3ByFncHNnHIaSBhKU1lLkJoabKlSx3ZhGdJUr1A=
Subject key identifier: F8:40:8D:EE:5B:ED:03:85:E1:06:70:10:E9:17:7A:F6:C7:22:96:16
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 018CC80127430B75216E7138BE796685B34A
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/1-ECN7lvtA4XhBnAQ6Rd69scilhY.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211541
IP address blocks: 185.244.226.0/24 maxlen: 24
2a10:c640:dead::/48 maxlen: 48
2a10:c640:6575::/48 maxlen: 48
2a10:c640::/48 maxlen: 48
2a10:c640:6170::/48 maxlen: 48
2a10:c640:7573::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:27:43:0b:75:21:6e:71:38:be:79:66:85:b3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8408dee5bed0385e1067010e9177af6c7229616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:63:fa:8c:8c:64:b1:65:94:a7:3d:8d:16:
75:3c:b1:1b:23:82:c0:d1:34:c5:69:28:16:62:dd:
f1:53:f2:72:5e:46:93:92:2d:1a:1e:ea:8c:c8:69:
1a:34:f9:24:95:28:18:1b:30:4b:f6:78:dd:53:f7:
b5:c8:47:bb:7d:d7:0a:03:9d:0a:4e:4e:75:71:49:
7e:89:f7:a6:c0:ef:29:b4:73:8c:7f:bd:89:a6:14:
50:f7:3e:0d:df:83:56:91:ae:0b:7a:e4:c2:23:78:
3f:ad:6e:10:d5:9f:fe:61:b4:8f:f5:cf:f0:fa:5b:
94:fa:73:a8:d5:e9:43:b9:23:a2:16:4c:74:c7:2e:
c3:9e:f9:88:ea:6f:24:0f:1f:f0:d4:28:8c:b3:f3:
c7:52:5a:4e:41:fb:c8:91:7c:4c:95:90:2d:54:b8:
66:6e:d8:99:a5:5d:0b:0b:b7:e5:1c:b9:c1:74:6a:
ea:93:6e:fd:26:2b:10:25:5d:92:88:a6:83:ca:4c:
e2:82:90:10:6f:96:8a:bb:e8:b4:02:c3:d7:b2:32:
8c:c5:44:1e:d3:b0:8d:6c:c4:e2:8c:68:a5:bf:99:
1c:60:4c:2b:86:76:1a:24:55:29:e8:d7:22:51:da:
26:a0:35:3b:11:9f:5a:e2:16:82:c2:b1:73:bd:e2:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:8D:EE:5B:ED:03:85:E1:06:70:10:E9:17:7A:F6:C7:22:96:16
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/1-ECN7lvtA4XhBnAQ6Rd69scilhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.226.0/24
IPv6:
2a10:c640::/48
2a10:c640:6170::/48
2a10:c640:6575::/48
2a10:c640:7573::/48
2a10:c640:dead::/48
Signature Algorithm: sha256WithRSAEncryption
38:df:44:04:7d:ad:7c:e5:9f:60:1f:53:04:bb:65:60:67:a3:
77:90:ad:5c:26:e4:71:4b:2c:f7:f7:1d:23:3c:46:29:2c:e7:
c3:63:22:63:fc:4a:09:24:74:9a:d5:1c:d3:c2:6d:2b:c2:e9:
db:11:57:fc:fc:b6:71:24:88:77:e9:51:44:1a:5d:a2:a9:78:
a1:c9:ee:d0:83:09:74:10:ff:49:c8:9e:55:34:17:a9:04:c5:
80:67:08:8a:71:4e:bd:56:ad:eb:45:3c:70:f5:f9:96:45:e7:
d8:32:91:55:ea:f5:eb:8a:ab:62:66:61:40:42:5a:a7:00:2f:
41:1d:79:db:19:2b:d2:2a:66:e9:95:dd:43:96:ab:79:36:53:
aa:bf:9e:0e:a8:89:73:ba:9b:33:93:b2:28:f0:fa:58:b2:6c:
35:65:0f:1d:46:8c:9f:1f:3e:4d:f8:fc:4f:6f:b6:1e:4c:39:
b9:94:a7:e4:a2:c2:2b:bb:84:57:ee:0b:ac:ca:6a:22:78:15:
a0:08:39:3d:24:80:d3:44:22:3c:04:66:5e:98:07:5e:99:fe:
2a:4c:2b:bb:c6:af:a2:50:8d:5b:31:73:ac:9e:3a:e9:f9:41:
b2:f6:f7:59:d8:e3:76:05:96:b8:a5:ae:07:2b:d1:fe:ff:31:
63:23:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:45:48 2024 by rpki-client on console-fra.rpki-client.org