Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/1-hKPK54ECG-kT6HqkVQ2Tp80EYU.roa
File: 1-hKPK54ECG-kT6HqkVQ2Tp80EYU.roa (raw, json)
Hash identifier: B1M58jR42Fs6axU5bTr7+ARglSOFY9mZR/ry+/uXHPQ=
Subject key identifier: FA:12:8F:2B:9E:04:08:6F:A4:4F:A1:EA:91:54:36:4E:9F:34:11:85
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 018CC5001828674CFD0CC42485AB2F0078FC
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/1-hKPK54ECG-kT6HqkVQ2Tp80EYU.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204064
IP address blocks: 185.201.12.0/22 maxlen: 32
185.115.180.0/22 maxlen: 22
185.116.51.0/24 maxlen: 24
185.116.48.0/22 maxlen: 22
185.151.172.0/22 maxlen: 22
2a07:7a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:18:28:67:4c:fd:0c:c4:24:85:ab:2f:00:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa128f2b9e04086fa44fa1ea9154364e9f341185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:ab:74:ec:bb:15:81:54:26:3e:6e:24:b3:
13:de:d9:36:62:9d:84:96:40:6c:c9:87:5b:64:7d:
68:3f:bc:5b:20:9c:f0:e4:8e:39:d9:24:93:aa:df:
98:d2:e2:83:26:1e:67:26:b3:e5:a2:19:18:ad:0d:
57:a4:87:5b:30:1c:3b:3f:b8:f9:c0:51:a7:be:22:
aa:08:15:85:18:67:a1:9d:44:a3:c4:ef:ac:01:c3:
22:be:89:a1:25:47:2c:8a:2a:59:0d:b7:9d:d3:b6:
aa:f2:6c:fd:59:c5:8a:68:1c:71:9a:54:d6:88:d9:
72:55:6d:96:3e:ae:c3:d1:bb:e7:1c:e4:68:8f:4f:
f4:4d:d8:21:c0:25:aa:05:73:93:e0:7d:27:71:3b:
15:27:7a:e4:c7:81:b5:c9:17:0a:5d:45:aa:1e:a4:
4e:8e:a7:e3:18:a8:d4:4f:3c:b5:bd:a6:cd:9f:d6:
52:ee:f7:3d:06:d1:6e:a2:75:a1:6d:df:c2:96:3e:
7c:bd:bf:d0:21:9d:dc:72:2a:d9:f9:8e:16:50:5b:
c2:bf:6c:2a:60:40:d8:39:d9:c7:3c:a7:ba:d4:6d:
6b:3e:e6:62:eb:a2:07:6a:7a:40:89:d8:f4:63:5f:
96:fb:1e:0c:b0:79:29:eb:82:0f:e1:54:b1:1f:64:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:8F:2B:9E:04:08:6F:A4:4F:A1:EA:91:54:36:4E:9F:34:11:85
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/1-hKPK54ECG-kT6HqkVQ2Tp80EYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.180.0/22
185.116.48.0/22
185.151.172.0/22
185.201.12.0/22
IPv6:
2a07:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
45:71:01:4d:89:2d:ea:04:7e:0a:c0:8b:45:87:b2:82:93:9c:
dd:8e:9a:cf:fa:e2:53:44:f8:cb:78:8d:96:bb:a8:1b:41:52:
b4:ec:bf:f4:de:55:76:05:a6:c5:cc:4a:93:e1:ad:8a:3c:7b:
de:f2:18:e3:c9:62:5a:c6:d7:bc:05:d2:81:c0:a4:b2:cc:31:
2e:dc:7d:78:12:b7:6c:af:c5:15:93:d3:a6:34:29:5e:7a:6e:
fb:b7:ad:56:76:4c:f1:e4:4e:6c:a2:63:d4:0b:5b:de:8f:63:
42:47:35:cf:55:4b:e4:92:9d:ae:e3:77:81:59:ec:f2:c4:40:
e5:a9:7d:0e:92:7b:fb:08:50:09:45:06:9e:f1:eb:fa:77:18:
46:27:c8:4f:62:65:1e:46:c8:95:32:cf:22:85:24:cc:4c:23:
9c:a3:72:2e:90:7c:2c:4a:d0:00:49:8c:fe:cc:d6:61:5d:b1:
9b:3a:9b:61:be:a9:94:df:3a:a5:75:89:49:a5:6e:a4:50:12:
5a:db:df:4b:1d:a4:2d:88:a7:83:e8:48:67:d4:6b:22:33:d4:
b9:44:d0:fd:68:9e:08:90:12:88:d1:19:77:ba:61:13:26:59:
7d:00:34:8d:f1:80:03:54:03:c8:a2:77:75:d9:e5:05:d0:45:
dc:d6:5c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:20:39 2024 by rpki-client on console-ams.rpki-client.org