Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/V0ORlc8Li9a61J61LJutNmd0Gwo.roa
File: V0ORlc8Li9a61J61LJutNmd0Gwo.roa (raw, json)
Hash identifier: qACTxU6bTjvNUbJbBDN0FKDFXSff73aYHWItEY37V5o=
Subject key identifier: 57:43:91:95:CF:0B:8B:D6:BA:D4:9E:B5:2C:9B:AD:36:67:74:1B:0A
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 018CC8024DE90A13381ED5E68ECBEE538910
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/V0ORlc8Li9a61J61LJutNmd0Gwo.roa
Signing time: Tue 02 Jan 2024 02:30:43 +0000
ROA not before: Tue 02 Jan 2024 02:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59779
IP address blocks: 185.57.50.0/24 maxlen: 24
185.57.48.0/23 maxlen: 23
185.12.182.0/24 maxlen: 24
185.12.180.0/23 maxlen: 23
2a02:57e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:4d:e9:0a:13:38:1e:d5:e6:8e:cb:ee:53:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 2 02:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57439195cf0b8bd6bad49eb52c9bad3667741b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:87:32:58:7b:9b:f8:3c:97:39:66:9b:13:
87:a8:8f:b2:68:fc:e3:50:60:27:3e:6d:15:82:5f:
1e:c6:8e:79:fc:b9:43:69:f2:ca:0f:fa:7f:c5:8a:
e2:42:f3:dd:aa:d4:d1:46:ec:0f:b4:16:37:ce:33:
ef:a4:18:03:fd:e3:b5:e4:68:a8:e1:78:f4:b8:f4:
7d:5c:4d:56:98:9d:64:97:7f:3f:51:83:a1:df:f5:
72:3a:af:1f:42:c4:d0:ac:08:9e:66:4c:47:5c:37:
29:f0:b0:af:03:04:01:2d:91:a3:59:38:f4:0c:82:
7a:6a:16:43:71:1b:4a:e1:d9:ad:ec:c3:a2:51:e0:
7a:02:37:54:84:b8:00:56:b3:33:29:0b:1c:6a:53:
a9:79:44:58:ee:cf:8b:5c:6a:42:86:e0:cf:b6:e0:
bc:9c:7b:e2:ae:6c:67:ac:ff:3c:06:c1:48:97:28:
30:03:b2:0b:7a:0d:78:08:7f:8d:8b:50:36:90:9b:
97:81:5f:76:73:50:79:8e:56:2a:a9:08:a9:53:52:
91:74:51:2b:8f:c0:5b:92:d7:8e:8e:08:72:31:70:
82:fe:45:ac:15:85:21:44:23:26:2b:3e:50:cb:e9:
ea:1c:f6:a8:f5:4d:19:ea:7a:4e:88:db:4c:ec:32:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:91:95:CF:0B:8B:D6:BA:D4:9E:B5:2C:9B:AD:36:67:74:1B:0A
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/V0ORlc8Li9a61J61LJutNmd0Gwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.180.0-185.12.182.255
185.57.48.0-185.57.50.255
IPv6:
2a02:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:1d:4e:a3:b9:60:93:eb:07:1b:69:35:7e:bd:61:74:e8:1e:
14:e5:e2:44:a8:a5:8d:98:8d:3e:89:05:52:02:28:75:11:a9:
a5:5b:da:4f:3b:7b:9a:4f:8a:c6:3b:d6:24:77:03:51:d8:91:
0f:60:36:48:80:e3:e0:90:13:f2:5a:f1:3a:df:9d:ee:a4:b9:
de:23:8e:c3:23:c3:18:1f:cb:2b:cc:6a:59:06:d2:2a:2b:dd:
8f:8f:38:e9:fa:db:5a:c3:0f:80:9e:bf:7e:5d:22:a6:17:31:
8e:35:6e:ad:bd:17:18:9c:30:7f:cc:4c:40:bc:54:67:57:c2:
7c:02:46:5c:2d:01:fa:5f:23:c2:10:da:f6:87:4a:51:17:b6:
5a:4a:13:97:dc:39:31:18:91:18:e8:3a:5e:5c:b9:62:d9:39:
5d:78:37:7c:38:80:42:1e:9f:92:39:27:c7:19:f7:cd:cd:fa:
cf:09:9e:60:dd:94:1c:74:f5:a2:4c:00:08:80:65:cc:21:61:
a4:01:79:80:1f:67:4c:f1:62:42:40:e2:d3:ef:d6:bd:cd:ee:
58:bc:2e:fa:af:aa:ce:75:45:65:4a:4a:80:ad:4d:90:0b:fd:
55:e3:bb:6b:bf:f7:a2:ed:21:84:96:c7:e6:d7:83:36:34:d1:
6d:36:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:57:11 2024 by rpki-client on console-fra.rpki-client.org