Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4F1nom9oBmch5gn1b5FwKjLLEIA.roa
File: 4F1nom9oBmch5gn1b5FwKjLLEIA.roa (raw, json)
Hash identifier: g4fPkbk7UZyz2LS6wk79zDRhjGleZQo+r86FWLiR4oE=
Subject key identifier: E0:5D:67:A2:6F:68:06:67:21:E6:09:F5:6F:91:70:2A:32:CB:10:80
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018CC425371B096970AB866A8FDD6B8AC4CE
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4F1nom9oBmch5gn1b5FwKjLLEIA.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51030
IP address blocks: 185.188.142.0/24 maxlen: 24
185.188.141.0/24 maxlen: 24
185.121.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:37:1b:09:69:70:ab:86:6a:8f:dd:6b:8a:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05d67a26f68066721e609f56f91702a32cb1080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:86:ac:79:8e:c2:26:b1:2d:be:8d:bd:1a:
9b:17:b7:6c:4d:4c:9c:c1:38:ef:46:ab:07:90:de:
3a:f0:6d:fe:f0:cf:b0:73:47:4e:6c:02:2a:3a:11:
df:6d:13:e5:47:c0:dc:7f:8f:60:49:84:85:bb:1d:
bc:43:95:9c:86:dc:0c:6e:15:e5:0f:a5:f1:db:a3:
58:32:27:85:c2:33:7e:54:19:5b:43:3e:dd:65:9d:
d5:1e:4a:9c:34:10:13:51:23:fe:25:2d:0a:61:19:
9d:1b:ab:e1:54:db:a3:79:5b:6d:b7:88:e3:ca:7c:
a6:c0:75:7a:9d:98:2e:09:5d:ac:ae:6f:bf:52:de:
f3:88:33:3c:40:93:66:88:6d:fe:af:2a:8f:b5:0e:
d5:7b:e8:a2:11:9a:74:e5:21:a3:f8:70:5f:eb:c7:
bf:24:22:f8:e4:35:e4:cd:0f:34:77:66:94:81:2b:
d9:c5:e7:33:79:40:e4:e4:0c:10:94:7c:31:df:c7:
e0:9b:f2:f6:6e:76:65:32:4c:b8:82:e1:23:83:61:
be:a3:65:d4:4f:87:19:af:0c:9a:fc:ca:45:11:f9:
11:83:c2:69:b3:14:10:80:ec:cb:05:94:80:68:18:
8e:d9:68:26:b5:68:98:fc:b8:3d:5a:03:0a:6b:bd:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5D:67:A2:6F:68:06:67:21:E6:09:F5:6F:91:70:2A:32:CB:10:80
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/4F1nom9oBmch5gn1b5FwKjLLEIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.224.0/24
185.188.141.0-185.188.142.255
Signature Algorithm: sha256WithRSAEncryption
f1:1d:04:df:e7:ef:63:3f:ed:4d:53:ab:28:f9:de:52:41:7c:
dd:d6:c2:22:6d:ee:c7:0f:9a:78:a6:79:82:65:e8:6c:2e:a3:
55:49:4d:7a:b3:55:96:43:8d:17:b6:64:ca:ae:6a:06:79:f5:
ca:a8:7d:bf:87:2c:14:c6:9d:5d:c5:0e:cf:38:64:4f:ae:73:
d0:01:66:0a:d9:66:86:dc:82:90:76:dd:72:a0:14:9c:31:e8:
23:a5:f9:28:41:53:98:4f:cd:d3:18:ec:42:7a:4f:6c:1c:c4:
f9:44:3d:3d:88:bd:43:37:0e:ca:95:ce:4b:07:1f:08:4a:45:
ad:76:5f:d0:e6:bb:b5:9e:a8:ab:39:73:51:aa:61:a9:00:22:
60:3d:89:6f:a9:ca:95:f9:38:8c:bd:a6:e0:42:f4:2f:31:74:
d8:25:d5:8a:a9:96:3c:2b:3f:70:b9:6a:2f:ee:08:2d:ec:d3:
62:da:ca:10:e2:35:bb:b8:3e:e4:97:4b:d0:dd:38:1c:54:93:
86:18:c0:59:5c:83:84:44:80:75:dc:2e:2f:0f:6e:7a:dc:3d:
9b:c0:57:e9:fc:24:a4:8b:e3:88:19:c8:4a:3c:32:16:e7:ca:
fa:3c:a2:a8:9b:2c:97:71:f4:dc:ee:68:39:d8:fc:d9:93:8c:
a2:6f:6e:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:50 2024 by rpki-client on console-fra.rpki-client.org