Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3huATurZ3i_KLdA1uv119pYXGIo.roa
File: 3huATurZ3i_KLdA1uv119pYXGIo.roa (raw, json)
Hash identifier: YxIWBka+RlO7Fs2Imf9EdYWtQpdZWZVHFxC81CKRsh4=
Subject key identifier: DE:1B:80:4E:EA:D9:DE:2F:CA:2D:D0:35:BA:FD:75:F6:96:17:18:8A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F06475885C7D7EA2035BB05DE9A662186
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3huATurZ3i_KLdA1uv119pYXGIo.roa
Signing time: Mon 22 Apr 2024 14:48:10 +0000
ROA not before: Mon 22 Apr 2024 14:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 146.19.21.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:47:58:85:c7:d7:ea:20:35:bb:05:de:9a:66:21:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 22 14:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de1b804eead9de2fca2dd035bafd75f69617188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:83:8e:46:be:40:ca:70:18:98:53:ad:d4:
3a:ad:26:55:bf:b7:b6:4e:02:79:fe:8c:8a:a5:c7:
1a:07:68:f1:ed:86:1a:f4:e8:34:11:5a:d2:26:56:
bc:a5:52:de:2d:0b:21:ed:a8:4d:fc:06:7d:8c:00:
12:4d:f7:eb:da:75:46:e2:64:e6:2e:95:98:b8:81:
bb:13:d8:30:1a:a2:14:6a:07:14:d0:88:c2:1e:eb:
60:8b:c9:95:e4:9d:41:75:0c:6a:31:9b:73:32:b4:
9f:c5:2c:fd:3a:35:c8:9a:60:52:5d:5e:c0:6a:aa:
d7:72:db:40:7c:ed:e3:61:9e:00:ac:01:c4:49:c5:
9c:0a:8e:77:fe:d1:88:9c:03:ce:b4:72:1d:4a:98:
50:7a:54:17:4c:c5:a6:1d:c7:12:ed:bc:b3:ab:63:
95:ad:17:ca:43:73:5d:e1:ff:f6:0a:14:77:f9:14:
85:12:a9:36:3f:b2:46:d2:85:e0:bc:16:87:7d:5b:
66:97:cb:2f:53:e3:bf:8b:95:d7:2a:f7:4d:ca:7b:
fb:08:7f:e0:f7:57:88:91:82:d5:40:b2:a6:fa:4d:
c5:00:53:13:9a:de:d3:6f:49:b8:f7:4b:c8:d5:94:
d5:01:51:51:09:43:e5:fe:87:8c:9f:ab:3a:df:c0:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:80:4E:EA:D9:DE:2F:CA:2D:D0:35:BA:FD:75:F6:96:17:18:8A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3huATurZ3i_KLdA1uv119pYXGIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
185.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c1:b5:dd:00:41:e5:ce:c1:98:d1:50:bd:48:dc:ec:55:8a:
89:b6:e5:4e:85:de:5b:af:9b:46:c3:77:ce:65:fe:90:ba:9e:
a2:be:cf:45:e3:88:aa:c3:b7:4b:4a:48:97:7c:c3:15:d0:f5:
30:05:c7:b8:6c:a8:8e:b6:a6:56:1f:75:9e:de:4f:d6:80:7a:
cc:e1:6e:09:a0:d9:0c:ea:f4:f4:1d:da:b9:2d:17:e3:c5:20:
6a:30:28:ab:dd:78:c2:75:53:90:32:65:20:ca:d8:1d:07:a6:
a2:03:08:0c:dd:0e:60:86:cc:c6:42:4e:b3:4e:9c:40:0f:98:
28:78:48:d4:e0:61:fc:fb:47:18:37:b3:ef:52:85:37:ee:92:
37:37:41:64:ae:d1:ab:fc:cb:cb:84:74:5c:b1:6b:42:3e:11:
e1:a3:88:bb:a5:cf:82:12:08:12:65:dd:11:48:2f:5c:32:52:
1d:ed:41:d6:19:c9:dd:f8:93:d3:c5:1e:22:7e:d3:15:5d:32:
df:cf:b7:2c:3b:38:07:7d:3c:e3:ec:05:d8:19:7f:02:13:e4:
97:ee:2c:fa:9e:53:f8:2d:3b:f2:eb:2f:b2:0f:43:c8:01:2d:
28:a8:24:93:b8:46:87:06:91:72:0c:b6:f0:07:ed:0b:14:43:
c0:5f:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:04:34 2024 by rpki-client on console-ams.rpki-client.org