Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ONmk4iaSMKdkiSw3gLo5kB24Prg.roa
File: ONmk4iaSMKdkiSw3gLo5kB24Prg.roa (raw, json)
Hash identifier: uce4BfDqHRSc2FWIX6cRZuVriIuAJu63g7u3Tly9gRw=
Subject key identifier: 38:D9:A4:E2:26:92:30:A7:64:89:2C:37:80:BA:39:90:1D:B8:3E:B8
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 018CC64B78A5445A5F59CEF98D05A4533B0D
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ONmk4iaSMKdkiSw3gLo5kB24Prg.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 185.245.42.0/23 maxlen: 24
185.245.43.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
185.243.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:78:a5:44:5a:5f:59:ce:f9:8d:05:a4:53:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d9a4e2269230a764892c3780ba39901db83eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:fd:a4:ea:a7:ce:92:37:8d:6b:9a:ca:18:
c8:14:e0:db:d2:9a:3a:94:2d:0c:0b:a7:7c:48:9c:
e7:24:73:3d:19:ee:df:16:58:c8:67:c6:59:07:89:
32:1c:e2:8f:60:d0:cc:7d:79:ee:1d:8e:60:48:b7:
15:9c:be:1b:6c:94:1d:ef:6c:63:87:16:68:c5:7d:
6a:a0:0e:db:1d:45:60:d5:5c:32:79:61:c2:a4:69:
50:c8:f3:04:df:c1:bb:0b:ff:c8:7f:bc:d1:15:37:
ba:4e:f4:11:74:60:aa:90:ee:de:68:7f:88:bd:dd:
4e:81:59:92:9e:db:64:98:95:91:ad:2c:12:cf:6a:
37:e1:42:95:ae:ca:dd:14:75:c0:2a:ee:d4:88:b5:
76:5e:85:9b:0a:00:33:c6:ac:e3:07:50:28:61:72:
7f:89:28:08:43:8a:ea:86:32:7a:f2:30:b2:97:e1:
4f:aa:1f:85:0b:db:ff:37:2f:f4:7b:f9:55:20:f1:
8a:cd:c5:7d:0f:cc:07:f4:ce:c6:40:5b:4f:e1:89:
22:c7:90:d4:cf:39:f6:c9:a5:f8:01:6f:4b:7b:37:
b3:3e:3d:33:a5:3a:67:c9:7a:48:fb:ac:d9:41:33:
26:76:41:e1:0d:b9:7e:cf:8c:de:6d:d4:49:34:b7:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D9:A4:E2:26:92:30:A7:64:89:2C:37:80:BA:39:90:1D:B8:3E:B8
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ONmk4iaSMKdkiSw3gLo5kB24Prg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.243.0/24
185.245.40.0/24
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
99:40:b2:51:66:bc:c1:46:7f:27:75:c9:9d:33:9f:2d:d2:97:
86:15:ff:54:f8:3a:d3:22:ce:6b:c0:db:c2:e9:c7:b1:cc:ae:
9d:bd:2b:e8:19:02:a2:69:a0:f5:3b:77:62:c5:5c:9e:71:69:
bb:bd:08:19:a7:c7:d5:63:e8:cf:7f:db:fd:1d:94:5b:71:77:
1e:2f:36:ab:ca:94:c2:a4:0a:b1:ab:a2:7a:37:ef:34:4c:24:
ad:8d:80:8a:a2:5b:8e:9d:a4:97:1f:30:04:be:34:98:d3:1c:
55:be:20:06:bc:44:34:65:ab:c9:c1:7b:1a:2c:d5:7d:c2:52:
be:64:90:22:9e:07:99:e1:a3:cd:4a:16:a9:01:02:42:1b:d8:
da:e3:e4:85:80:ba:0e:70:2b:31:63:b3:00:4c:b0:b8:69:bc:
58:08:72:07:d7:d2:1c:50:53:8e:64:a8:1e:5a:b7:56:f5:c2:
1b:ff:90:77:8a:a8:77:41:ce:00:cf:bb:5d:1a:c2:47:44:06:
14:42:3f:6c:88:fe:d1:59:a9:8f:b0:d1:ab:4c:ae:60:f2:aa:
f6:6b:61:15:1d:19:2b:81:be:eb:c7:3b:b3:ab:ab:09:61:0d:
1f:c3:70:f9:7a:30:4b:9e:00:4f:c9:95:a1:d8:26:79:dd:8d:
3d:5f:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:20:42 2024 by rpki-client on console-ams.rpki-client.org