Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/iz4TN5hko-cb9gTm6u9gWPEvIEI.roa
File: iz4TN5hko-cb9gTm6u9gWPEvIEI.roa (raw, json)
Hash identifier: lHE7ijTF2TnrDga4O1QGj8fbQnfgkXsQ2Gs/9s5tTYg=
Subject key identifier: 8B:3E:13:37:98:64:A3:E7:1B:F6:04:E6:EA:EF:60:58:F1:2F:20:42
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 018CC801B3D03E705164880D2611044BBE03
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/iz4TN5hko-cb9gTm6u9gWPEvIEI.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 185.225.132.0/23 maxlen: 23
185.225.134.0/24 maxlen: 24
2a0d:c400::/32 maxlen: 32
2a0d:c401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b3:d0:3e:70:51:64:88:0d:26:11:04:4b:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3e13379864a3e71bf604e6eaef6058f12f2042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:45:64:ba:df:28:ca:75:5c:f5:22:31:a7:
b6:54:05:d5:2d:96:ac:b7:e8:46:4c:44:4e:59:34:
dd:3e:fc:52:7c:ce:22:77:03:9c:a5:d6:b3:0b:e9:
87:9d:ec:5a:dc:c9:ac:3e:df:1d:62:ab:3e:8e:c7:
85:f2:a1:ee:7c:84:57:80:5a:50:81:86:9d:e8:98:
a9:3f:2e:26:b8:a8:66:fd:5a:1d:56:97:07:1d:a2:
a6:c7:e4:b8:01:d6:ed:96:34:14:61:bc:43:6d:af:
49:05:c9:57:dc:0a:d1:dc:80:97:24:37:1f:86:b8:
2e:7f:0f:fe:1f:1d:dc:c0:18:31:94:b9:7d:9c:82:
2b:bc:97:5c:ac:e3:cd:8e:c4:5e:02:8a:46:5e:a3:
31:8a:b9:e1:97:f5:25:0d:ca:2a:99:cd:7f:e2:b2:
65:39:46:71:4e:a5:a5:a6:ce:71:08:4f:ca:35:e1:
dd:90:40:3e:1f:c9:6d:26:50:7c:02:09:f6:c6:be:
ae:5b:30:70:7e:f7:29:76:7a:8c:15:c7:03:6d:09:
88:41:be:ab:31:14:ef:da:02:8b:80:cc:58:b3:6b:
68:9b:c7:c6:48:3c:9d:f4:8e:e6:32:ec:bd:78:fa:
93:6a:ba:eb:11:4e:d4:86:4c:22:7d:3a:a8:e9:7a:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3E:13:37:98:64:A3:E7:1B:F6:04:E6:EA:EF:60:58:F1:2F:20:42
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/iz4TN5hko-cb9gTm6u9gWPEvIEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.132.0-185.225.134.255
IPv6:
2a0d:c400::/31
Signature Algorithm: sha256WithRSAEncryption
70:60:ea:1d:b6:de:1b:0c:e6:de:ed:79:b4:2c:76:37:5e:49:
e2:c1:d0:4e:e8:71:5e:e4:2f:b8:02:00:e2:0e:0c:d7:91:58:
fa:7e:3a:57:42:a1:b8:98:f3:80:6d:30:68:ce:da:69:cf:c6:
c0:32:45:08:65:c0:79:0f:09:7d:45:9b:64:e6:0a:90:cc:8b:
8c:1e:1f:a9:18:93:a4:73:f9:fe:40:2f:a5:5e:c3:1d:85:3b:
7d:20:29:73:3e:a6:a9:7b:a6:26:1f:20:96:97:67:10:af:b7:
4e:a4:ea:3e:d7:b5:c4:58:44:1b:77:95:b1:02:22:e4:2b:ac:
6e:0f:3a:b3:40:55:0a:d0:3c:2d:0a:31:72:c8:d0:38:4f:19:
37:30:0b:e0:30:37:cd:49:b5:bc:a0:3d:5f:f0:d5:3f:9e:ac:
74:bd:96:91:e9:92:3e:fb:79:0a:05:d8:19:ff:1a:31:68:7e:
dd:93:70:8b:84:82:36:c8:cd:49:cb:ca:92:6d:17:4b:37:b6:
55:51:cc:45:37:95:a6:c9:dc:da:70:e0:8d:e9:16:83:d9:f3:
74:17:01:ca:7a:d4:73:51:92:18:58:7e:ad:29:9d:2e:d8:e0:
15:a6:1c:7a:cb:02:b3:c5:61:f5:59:a3:7a:e9:2e:2e:fc:15:
1c:d4:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:34:20 2024 by rpki-client on console-fra.rpki-client.org