Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9wOMGCiavO57r7xnUpyaqWtMZUI.roa
File: 9wOMGCiavO57r7xnUpyaqWtMZUI.roa (raw, json)
Hash identifier: U74AdyPqz/SPcTNQ+SyoHFUuPmJqIBhT7XCot2pI3Ns=
Subject key identifier: F7:03:8C:18:28:9A:BC:EE:7B:AF:BC:67:52:9C:9A:A9:6B:4C:65:42
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0191CD2FBA24B3B7102E51B4B2BF09CD230E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9wOMGCiavO57r7xnUpyaqWtMZUI.roa
Signing time: Sat 07 Sep 2024 15:52:22 +0000
ROA not before: Sat 07 Sep 2024 15:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60581
IP address blocks: 185.173.245.0/24 maxlen: 24
185.173.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:2f:ba:24:b3:b7:10:2e:51:b4:b2:bf:09:cd:23:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 7 15:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7038c18289abcee7bafbc67529c9aa96b4c6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:c3:45:12:dd:50:85:d2:4d:d4:38:c4:95:
52:e2:42:99:4f:de:ef:b5:d4:aa:85:4d:a0:80:8a:
d9:ec:77:56:1f:5f:db:19:50:74:50:93:98:60:d9:
5a:1d:9f:05:10:45:3a:1f:46:5a:10:60:76:16:6b:
8a:6b:a2:3f:3d:63:cf:ea:bd:49:6c:c9:73:ee:b0:
42:41:db:52:14:6e:2b:c5:4b:57:1c:62:d1:cc:4e:
90:45:0a:d8:32:cf:86:5a:a6:9a:2c:6c:aa:48:a3:
7b:77:9a:ee:02:be:92:24:73:51:04:5a:b7:a4:30:
a1:02:c9:20:83:a2:bb:dc:94:37:45:31:01:92:36:
80:e2:80:b5:3a:8b:92:e8:a1:1e:0f:70:d4:34:4f:
6e:0e:0d:8c:61:7f:03:b4:0d:72:18:31:b5:18:98:
bf:65:28:81:85:60:24:6c:50:f0:46:0c:33:dc:d7:
a8:2b:36:83:85:03:a7:1d:c6:f1:03:d7:18:0a:95:
0d:db:33:18:0f:47:0d:ee:c2:77:08:d1:2a:87:3a:
fb:d6:c9:ad:67:c1:3b:fe:30:71:3b:ec:fd:57:e9:
dd:53:5f:a4:ea:01:18:63:dc:73:4b:c8:c6:5c:c8:
df:bc:ef:08:b9:12:35:58:c3:9d:7d:26:4b:96:74:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:8C:18:28:9A:BC:EE:7B:AF:BC:67:52:9C:9A:A9:6B:4C:65:42
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/9wOMGCiavO57r7xnUpyaqWtMZUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.245.0-185.173.246.255
Signature Algorithm: sha256WithRSAEncryption
00:90:7e:05:8f:87:7e:df:9e:9c:62:ed:dc:92:f6:1a:ee:29:
dc:82:81:5d:f8:3b:68:44:99:5e:4f:5a:11:bc:67:ea:e8:61:
a0:03:97:0b:ba:bf:1c:eb:2b:3a:58:45:56:ba:6e:0c:2a:90:
0b:a3:1a:9d:5e:0f:d7:3e:fb:c0:c3:ed:41:6c:35:26:c5:0a:
65:11:bd:2d:c5:54:40:eb:22:52:e3:80:2f:06:88:6d:75:b2:
be:57:d8:be:87:e3:4d:da:48:8e:19:f5:ad:87:9a:f5:e9:ed:
9a:44:cb:49:b4:31:fd:44:4c:70:6a:3a:d9:5f:56:ab:14:3b:
82:bc:2c:d2:14:e0:f3:16:96:5c:e0:16:e0:d4:b6:68:78:83:
d4:69:72:01:a6:e2:53:02:5b:78:f4:9d:13:95:d8:3c:9d:a1:
4f:55:63:a6:b8:19:7f:44:c1:23:07:8c:55:13:fb:11:77:c1:
14:56:f6:c8:dd:3b:07:ad:90:fd:87:18:07:3b:69:a9:b4:23:
71:36:54:21:b8:88:f0:cd:38:d0:84:44:ca:d5:c3:9f:65:dc:
e6:f3:61:d5:a5:49:96:a6:98:a9:b1:14:f9:13:23:76:17:ea:
1c:bf:8a:ac:a1:cc:a2:e7:8d:cd:33:c9:8c:c3:a7:92:89:cb:
c3:95:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:16 2024 by rpki-client on console-fra.rpki-client.org