Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4MqFIMrKUA7P7ifbgGHAVeAtu6I.roa
File: 4MqFIMrKUA7P7ifbgGHAVeAtu6I.roa (raw, json)
Hash identifier: mgT0Hx6mrDmn3C4ksxSXf1jll08B3UX6rmc3fcOw86E=
Subject key identifier: E0:CA:85:20:CA:CA:50:0E:CF:EE:27:DB:80:61:C0:55:E0:2D:BB:A2
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FAF187522414B8A0DF4ACD6B39DCA
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4MqFIMrKUA7P7ifbgGHAVeAtu6I.roa
Signing time: Tue 02 Jan 2024 04:30:11 +0000
ROA not before: Tue 02 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48481
IP address blocks: 185.32.67.0/24 maxlen: 24
185.50.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:af:18:75:22:41:4b:8a:0d:f4:ac:d6:b3:9d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0ca8520caca500ecfee27db8061c055e02dbba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:2f:4e:8c:2b:51:4d:6b:95:c5:fc:25:f3:
2f:4b:25:7f:30:4c:67:bd:73:9b:9f:49:5d:e9:ef:
e4:a7:f7:3e:ec:06:cf:44:ea:64:8b:5c:92:e6:fd:
6a:c9:f2:f4:ca:44:d9:3a:f0:6d:19:9a:29:7d:ed:
c0:20:80:90:f3:ec:15:ae:a4:44:7c:80:4b:47:ab:
ce:12:b1:ab:18:01:b4:70:ea:a8:42:2f:c8:1d:2c:
e8:d1:ac:51:19:bb:7a:66:ce:b5:d0:ed:45:99:43:
0c:77:7e:ec:a3:62:b6:a2:0f:07:ec:75:ac:33:c7:
ed:7a:79:81:1d:29:a2:19:1b:a3:23:6d:f7:38:9a:
b7:ea:e8:94:2c:89:a7:50:fd:0a:80:2c:0b:dc:10:
99:4d:d4:bb:36:eb:f9:51:72:80:ef:cf:b3:6a:4c:
ef:c0:ac:67:12:c9:77:b3:3f:32:e4:42:9b:bd:6f:
a0:ba:96:e9:42:71:91:0a:be:d0:07:03:16:04:24:
4c:91:d2:ca:a9:7d:6d:df:43:03:ec:08:ec:33:da:
06:ea:e8:f2:a5:f9:95:2f:8c:de:8b:7c:20:27:7d:
e7:21:f8:01:0a:53:b3:09:d6:02:20:d3:ef:04:bb:
67:1b:44:ee:17:9e:43:5e:e6:44:ff:d9:55:4c:2f:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:85:20:CA:CA:50:0E:CF:EE:27:DB:80:61:C0:55:E0:2D:BB:A2
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4MqFIMrKUA7P7ifbgGHAVeAtu6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.67.0/24
185.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3b:73:ec:5a:9a:88:f9:45:87:cd:64:5d:95:01:b4:79:88:
25:35:14:38:a4:84:ec:9d:2e:17:e9:49:43:56:58:63:f5:19:
c1:7d:72:6c:d4:8c:d9:15:02:66:ab:ba:a7:a5:00:20:cd:f7:
3e:ff:cf:0a:1d:d0:48:bc:67:36:9e:3d:f0:a0:51:c4:80:b3:
8f:d4:0e:7c:f5:90:2a:c3:bf:ba:ac:45:55:28:35:ac:35:10:
38:97:ff:f6:d4:27:4f:6c:8a:92:de:07:03:cd:ae:d7:4a:9a:
81:73:d4:b4:a5:4b:fe:ea:96:98:3c:1a:b9:da:99:e1:3e:4d:
1b:26:4f:ed:59:9c:83:5d:17:b0:eb:9e:e8:b8:b4:20:cd:99:
ed:80:c3:6a:bb:a1:67:03:6f:e7:59:91:b6:98:62:6b:7f:41:
d7:be:3d:b9:8c:76:d9:d6:d8:9a:ed:4b:63:3c:ce:01:49:78:
74:54:7c:5e:87:e8:17:8e:17:5d:32:55:53:e1:ce:95:1e:e7:
27:94:40:25:fa:dd:f1:7d:f9:36:36:8f:a1:a6:19:cc:7a:05:
62:96:a3:cd:16:f6:27:c0:04:cf:ed:22:ab:35:7d:ae:57:02:
72:66:6b:4f:8b:fd:6a:40:2d:1b:bb:63:24:12:91:d6:1c:13:
6e:d4:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:44:56 2024 by rpki-client on console-fra.rpki-client.org