Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1-l_oslWg7nS91APpwbvsaIwB3VQ.roa
File: 1-l_oslWg7nS91APpwbvsaIwB3VQ.roa (raw, json)
Hash identifier: /Al+HNQIrqZ/WnEai2qguKtO2v1BzfhEEK9y50h+sdI=
Subject key identifier: FA:5F:E8:B2:55:A0:EE:74:BD:D4:03:E9:C1:BB:EC:68:8C:01:DD:54
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 018DF4B50A2F074DF7F25500210CA869C0C3
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1-l_oslWg7nS91APpwbvsaIwB3VQ.roa
Signing time: Thu 29 Feb 2024 11:52:01 +0000
ROA not before: Thu 29 Feb 2024 11:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 185.142.156.0/22 maxlen: 22
185.142.156.0/24 maxlen: 24
185.142.157.0/24 maxlen: 24
185.142.158.0/24 maxlen: 24
185.142.159.0/24 maxlen: 24
185.208.180.0/22 maxlen: 22
185.208.180.0/24 maxlen: 24
185.208.181.0/24 maxlen: 24
185.208.182.0/24 maxlen: 24
185.208.183.0/24 maxlen: 24
185.213.10.0/24 maxlen: 24
2a07:4280::/29 maxlen: 29
2a07:4280::/32 maxlen: 32
2a07:4281::/32 maxlen: 32
2a07:4282::/32 maxlen: 32
2a07:4283::/32 maxlen: 32
2a07:4284::/32 maxlen: 32
2a07:4285::/32 maxlen: 32
2a07:4286::/32 maxlen: 32
2a07:4287::/32 maxlen: 32
2a0b:3cc0::/29 maxlen: 29
2a0b:3cc0::/32 maxlen: 32
2a0b:3cc1::/32 maxlen: 32
2a0b:3cc2::/32 maxlen: 32
2a0b:3cc3::/32 maxlen: 32
2a0b:3cc4::/32 maxlen: 32
2a0b:3cc5::/32 maxlen: 32
2a0b:3cc6::/32 maxlen: 32
2a0b:3cc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:b5:0a:2f:07:4d:f7:f2:55:00:21:0c:a8:69:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Feb 29 11:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa5fe8b255a0ee74bdd403e9c1bbec688c01dd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:66:43:7e:26:4e:6f:d6:20:53:b9:41:ab:
a3:8d:d7:cc:64:17:9c:4d:92:ee:67:d0:6e:db:15:
3a:df:1f:00:da:3b:ee:c4:e2:f8:65:3e:dd:2b:06:
a9:02:c8:a8:a4:8f:67:81:ec:9a:8f:36:ec:37:85:
54:7c:7c:75:1b:82:23:10:2d:b1:f3:6c:39:bd:0c:
19:b5:92:63:2d:bf:c1:a1:e2:c3:b9:67:55:4b:d8:
fc:a4:2a:14:a0:d2:6b:c6:db:59:65:93:8c:bd:f3:
99:25:3f:53:3f:a2:7a:15:5e:19:e8:34:9d:ab:27:
de:f5:ca:99:58:0e:e7:72:bc:ec:68:17:e8:35:fa:
74:71:20:2a:10:98:9d:8f:17:e9:12:8a:d7:df:8e:
e3:0d:77:28:75:43:12:05:dc:29:6e:57:0d:3c:ea:
e4:82:5a:17:d4:ca:ca:56:37:49:d7:04:fa:b5:09:
cc:21:c9:65:42:ee:57:ad:b3:af:f9:e7:a1:96:be:
9f:db:5a:4d:1b:fa:7f:37:e4:39:55:6b:75:79:17:
bc:22:8f:07:cc:ca:4c:83:13:05:2b:6e:cb:88:c2:
4f:d0:f5:81:07:60:f2:16:63:6b:86:5d:b0:39:48:
01:b1:b2:75:3b:7f:c6:5a:ca:d5:75:80:8d:d3:61:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:E8:B2:55:A0:EE:74:BD:D4:03:E9:C1:BB:EC:68:8C:01:DD:54
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/1-l_oslWg7nS91APpwbvsaIwB3VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.156.0/22
185.208.180.0/22
185.213.10.0/24
IPv6:
2a07:4280::/29
2a0b:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:90:04:61:18:37:c6:cc:0a:31:fe:d3:53:f4:60:f7:bc:42:
45:dc:15:50:1d:db:bd:2d:f3:03:5d:ea:e5:b1:d0:a7:f6:7b:
30:73:cc:79:6a:8c:35:3a:b4:d2:ca:ad:79:8f:b7:00:9d:8c:
93:8e:08:e3:81:9d:27:1a:7b:d9:80:e7:9e:36:c2:f5:6e:4a:
27:b9:8d:81:24:31:13:7d:fc:a9:a5:be:fc:da:61:1a:e5:17:
0c:9c:e4:30:47:13:96:05:c6:07:5d:7c:5b:93:d1:38:5f:aa:
bb:93:01:44:4e:44:60:15:83:ce:dd:82:86:35:69:9e:8d:29:
9b:a2:f1:4d:07:2a:6c:e0:7d:93:51:1e:12:b3:98:bf:2d:27:
f9:58:c8:7c:1a:68:e4:b3:ed:9e:42:3c:9e:32:58:db:da:02:
8f:53:cf:c5:92:41:45:2b:7f:d0:6a:4d:4c:0b:cb:21:d2:2c:
19:e0:ad:f4:51:a7:35:13:80:d1:fe:2d:8e:2f:af:4a:e2:fa:
85:63:4a:a0:34:b1:3f:6f:27:29:40:b8:2c:c6:bc:46:f6:59:
eb:c9:63:2d:97:e7:7c:8b:d9:d9:6b:0f:00:16:f4:d2:99:51:
0d:d2:15:2c:f3:89:6f:c9:4d:27:83:05:15:8b:06:f0:b8:aa:
60:7a:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:03:22 2024 by rpki-client on console-ams.rpki-client.org