Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/JPqCrG4zNSlH911exXawjGFm1Jo.roa
File: JPqCrG4zNSlH911exXawjGFm1Jo.roa (raw, json)
Hash identifier: BRU6a2GSkeQP6cQVNX4zaxQAXsyUlwJub/Weibd/PV8=
Subject key identifier: 24:FA:82:AC:6E:33:35:29:47:F7:5D:5E:C5:76:B0:8C:61:66:D4:9A
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 018CC42545B198FCF532832051D108C92A08
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/JPqCrG4zNSlH911exXawjGFm1Jo.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205067
IP address blocks: 185.230.185.0/24 maxlen: 24
185.230.186.0/24 maxlen: 24
185.230.184.0/24 maxlen: 24
185.230.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:45:b1:98:fc:f5:32:83:20:51:d1:08:c9:2a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24fa82ac6e33352947f75d5ec576b08c6166d49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:2d:b4:dd:0d:d5:f2:1e:e0:a9:f1:fb:60:
3c:02:10:1b:26:74:ff:8a:7d:c2:42:42:ca:5c:3f:
14:f7:68:88:fa:18:b8:e1:56:82:ab:f7:c8:53:ad:
ee:59:f0:e8:f1:d4:4d:fe:fc:0d:e1:b0:10:22:3c:
df:f4:0a:4d:16:77:7c:2d:c6:5a:11:04:d9:c4:24:
97:fe:ce:58:10:30:03:b3:3a:e5:ed:7d:bd:b4:1b:
50:86:88:84:af:ca:80:9e:72:64:94:3c:f3:9f:5a:
c4:59:7e:21:d2:89:5f:a8:0f:57:12:ca:ad:81:a7:
37:e1:23:a5:16:0d:ad:52:66:49:88:ef:0e:50:16:
80:2c:6b:bd:d2:86:fb:7d:4f:1a:7e:e9:bd:44:84:
b8:ca:f7:d7:8f:eb:fc:41:02:94:a9:e4:fc:26:e0:
41:b1:1d:0b:a4:d0:b1:c7:51:0f:80:70:d7:a7:87:
75:43:9d:b6:01:72:9b:c9:43:e2:51:ac:e0:5a:31:
d7:dc:6b:79:4d:27:09:88:3b:1d:1d:c1:75:cf:cf:
28:04:b0:19:44:79:34:95:54:02:8f:1b:11:83:c2:
11:e0:79:b7:f1:58:db:4b:8d:3b:49:f7:87:ed:5c:
e4:ee:51:bb:8a:cd:88:fd:6c:d4:17:d2:cf:1c:71:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:82:AC:6E:33:35:29:47:F7:5D:5E:C5:76:B0:8C:61:66:D4:9A
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/JPqCrG4zNSlH911exXawjGFm1Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:70:42:23:23:1b:96:bb:66:e1:75:7f:c3:61:77:52:58:2d:
56:db:77:77:e2:e9:9f:d4:b5:3f:70:07:c0:b1:7d:45:38:70:
1e:26:69:f3:4c:d4:b4:19:12:88:8c:19:0c:f5:e9:87:9d:99:
a5:47:80:03:49:58:7b:ae:db:6b:ad:b2:fe:f9:a8:ef:25:67:
e9:71:87:d4:23:da:98:f8:3e:ea:18:77:eb:d6:57:9c:73:2b:
46:36:76:50:ab:e6:fd:bd:61:e8:6c:b2:15:3b:76:13:d2:a9:
f4:48:70:be:4e:f9:ca:53:4f:91:10:16:c6:95:d0:16:e8:d1:
9c:9b:ef:f6:e1:dd:07:5c:e7:ff:50:28:6c:ec:5d:71:7b:ad:
03:7d:21:46:6d:48:b5:52:d7:1f:fe:3e:bd:d4:a5:b3:02:3a:
b8:52:98:c5:2f:09:5a:b4:09:cb:bb:1b:50:ba:dc:9d:65:b6:
24:29:d6:5d:34:7c:c8:af:5f:ea:cf:60:29:da:6a:1e:a8:ab:
36:55:c7:1e:ec:2a:f8:28:1d:21:25:56:97:06:d4:6c:da:e7:
52:6a:86:9c:c1:09:5e:a5:93:d0:54:23:e0:fa:1c:b2:bc:44:
b8:30:d6:ee:82:26:7c:b9:77:e5:2d:28:88:73:8b:14:b6:72:
a5:fb:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:34:26 2024 by rpki-client on console-ams.rpki-client.org