Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/Rf_rBwwk4OMuMrGT_sLC0KyyOV0.roa
File: Rf_rBwwk4OMuMrGT_sLC0KyyOV0.roa (raw, json)
Hash identifier: b2SNHuNLl+2E2zFwfNXkB+wJygS0QjtywGIjtoUeBJE=
Subject key identifier: 45:FF:EB:07:0C:24:E0:E3:2E:32:B1:93:FE:C2:C2:D0:AC:B2:39:5D
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 018CCA2A3B1DFDB1192CB8850C1F4C145E8D
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/Rf_rBwwk4OMuMrGT_sLC0KyyOV0.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 185.39.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3b:1d:fd:b1:19:2c:b8:85:0c:1f:4c:14:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45ffeb070c24e0e32e32b193fec2c2d0acb2395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:9d:3a:87:06:66:57:e9:a4:7d:4b:07:36:
38:1b:1c:13:bf:40:54:78:03:45:cc:1d:84:36:11:
53:8c:86:24:8d:be:eb:a3:de:ef:93:dd:80:f3:a3:
58:fe:e0:4c:84:1b:e4:07:f8:f3:88:59:0a:9c:b2:
bc:80:16:b0:f5:82:39:a8:a2:44:68:05:97:77:f2:
b7:3a:ca:d3:c5:b5:4f:1c:8a:bd:6a:56:9d:cc:e5:
65:9a:ca:82:b6:5f:bc:03:51:aa:37:6e:db:09:da:
64:22:fc:25:04:37:e8:06:a6:57:b2:27:bc:7a:dd:
20:a3:47:30:aa:eb:86:a3:1d:0b:4f:87:e1:75:64:
41:f9:26:d2:4e:dd:2d:aa:ba:b2:cf:8b:eb:4b:bc:
aa:f9:e1:4b:5c:bb:25:99:3a:8d:9f:2c:04:c9:f7:
73:88:01:ad:6b:3c:63:56:42:d5:c0:61:c6:9d:a7:
45:c4:4d:d5:36:eb:e9:95:1f:23:6a:44:d7:77:fb:
cc:24:f8:63:3a:02:2d:ab:8c:0e:dc:b7:f5:e4:c3:
08:d0:da:13:92:1b:0b:c8:88:8d:f6:86:9d:c0:1b:
76:0e:96:79:ea:29:63:f1:a5:70:5a:ef:4e:de:17:
a7:6f:b5:c2:d3:aa:6f:ac:8c:44:12:f1:59:2e:6f:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:EB:07:0C:24:E0:E3:2E:32:B1:93:FE:C2:C2:D0:AC:B2:39:5D
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/Rf_rBwwk4OMuMrGT_sLC0KyyOV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.152.0/22
Signature Algorithm: sha256WithRSAEncryption
35:52:0c:40:7e:ae:79:ef:40:72:c7:cd:63:7e:73:54:5f:5b:
66:a3:87:ea:38:92:31:2d:69:67:c1:14:92:b4:d1:a3:3d:6a:
17:32:7e:5e:d1:4b:76:3e:4e:56:4f:59:d1:0a:7b:d8:a8:23:
98:91:a8:70:b4:89:6a:05:47:1f:d3:ab:a6:ed:5f:f3:6a:b5:
5f:36:13:3e:a7:ad:e4:b6:df:f8:2d:44:92:73:e3:09:d4:5a:
a9:66:b2:89:ae:a4:1f:47:e0:cc:27:db:a5:b8:08:d0:07:3e:
61:10:6c:c8:8f:61:28:17:6f:b0:f8:54:f7:87:5c:2f:93:40:
9a:7c:d1:d6:7e:ef:ce:c3:88:0b:53:71:5d:9f:8e:c0:4b:69:
8e:2d:a6:97:70:b1:40:15:d9:ec:f5:6b:3d:13:e1:55:db:55:
bd:60:1f:5f:6b:25:2f:34:ab:67:f0:49:1b:ac:56:bb:73:ca:
a0:fe:f7:cb:17:6f:47:2e:00:03:26:75:cb:9b:82:6e:e1:db:
72:bd:b0:39:33:ce:40:e8:0a:99:18:4d:9e:32:37:78:82:e9:
3a:5d:c2:bd:de:02:b1:25:28:f4:a7:b9:6d:6e:c9:2a:96:be:
07:3d:1f:36:45:54:27:85:70:09:96:6e:10:3e:97:d4:11:cd:
9b:2c:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:09:23 2024 by rpki-client on console-fra.rpki-client.org