Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa
File: Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa (raw, json)
Hash identifier: PN+83qFZFe92WADNYTMyioPjaLzaD+tY+B3dC6HqQ0c=
Subject key identifier: 4A:37:77:74:CF:AE:D0:DB:99:57:B4:F9:38:96:7D:58:21:D9:74:AD
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 018CC94CB3D64D6EF81A028795486DA8C174
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa
Signing time: Tue 02 Jan 2024 08:31:36 +0000
ROA not before: Tue 02 Jan 2024 08:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204818
IP address blocks: 185.245.92.0/23 maxlen: 23
185.245.94.0/23 maxlen: 23
2a0d:5380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b3:d6:4d:6e:f8:1a:02:87:95:48:6d:a8:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Jan 2 08:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a377774cfaed0db9957b4f938967d5821d974ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:f1:2d:07:6a:d9:07:b9:cb:60:9f:de:41:
af:b2:a6:08:6d:ea:b0:56:53:57:90:9e:ea:b7:79:
c9:70:1a:c0:31:a2:a4:e5:7e:2a:72:30:b6:90:d7:
d8:47:a0:67:bf:bc:2e:c1:ae:4f:1f:bd:90:86:ed:
9c:88:62:52:49:07:ed:8d:a8:e2:4f:15:89:e8:ca:
fa:96:30:bf:7e:cb:27:eb:47:12:fc:78:ec:27:0e:
c8:c2:5b:d1:ec:5f:13:21:28:00:ee:57:6d:3f:b3:
22:41:c4:8e:ea:91:ba:67:20:f5:c5:1a:05:b5:a1:
98:16:3e:b7:04:43:bb:99:ef:82:b1:b8:05:66:3e:
40:c2:dc:49:c6:25:4c:8b:75:ac:e7:b3:fd:d5:6d:
8a:87:82:73:95:03:aa:ce:ca:b5:fa:22:ba:06:1e:
bd:fb:41:39:f3:22:30:eb:3b:eb:2e:34:89:fc:7f:
79:f3:97:ee:d6:75:19:be:16:0e:60:0c:9b:52:d0:
92:38:1c:d2:4b:20:34:47:64:48:9d:f5:c5:09:c3:
43:fb:a8:3b:96:b8:9f:7b:ef:fd:36:b4:a9:88:b7:
07:e9:f9:12:83:b8:44:6f:2f:a0:4d:a8:7c:60:84:
05:f8:e2:4b:bf:58:40:63:13:bb:46:2c:e7:54:cc:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:77:74:CF:AE:D0:DB:99:57:B4:F9:38:96:7D:58:21:D9:74:AD
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/Sjd3dM-u0NuZV7T5OJZ9WCHZdK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.92.0/22
IPv6:
2a0d:5380::/29
Signature Algorithm: sha256WithRSAEncryption
4e:b1:41:10:63:2c:38:97:56:e1:11:75:db:c0:04:c0:36:41:
46:2a:11:2c:c3:be:09:30:a0:35:71:71:ed:8e:70:3a:30:f0:
e2:90:8e:e8:b3:ca:d9:fc:94:89:cc:48:97:45:76:8e:55:01:
e6:73:89:03:03:48:e1:ab:8e:79:22:01:2b:f0:ee:fc:10:88:
24:ab:1e:06:6e:e5:6f:12:55:bf:e2:5a:a5:20:e5:11:f7:ac:
2a:86:b1:4f:8b:78:bd:a6:d0:9a:2d:65:6d:de:b9:e5:20:71:
88:3f:bf:d0:0f:74:d3:01:2b:8a:62:c4:68:be:60:6f:ab:80:
2a:03:a9:c0:bd:e8:5f:44:07:97:6a:62:93:5d:48:84:fe:d0:
ca:42:2d:cf:c1:56:5f:88:f8:0f:56:24:1e:69:1d:08:68:3c:
f0:f9:0e:c7:b5:cd:dc:2f:01:b8:26:22:22:0d:ed:4e:45:2c:
b8:c5:36:9e:45:44:a8:5c:21:8e:79:23:93:c2:da:be:e6:2b:
ac:30:47:7c:77:b4:e9:1c:7d:24:eb:64:ca:c1:eb:f3:9d:8f:
f4:fa:25:18:aa:e1:42:4b:7d:a4:eb:db:35:8d:bb:94:4f:78:
1f:d2:d6:3a:73:85:52:53:bf:ae:51:9a:c6:3f:8c:75:39:2c:
97:f0:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:05:15 2024 by rpki-client on console-ams.rpki-client.org