Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/R0W0NRhjch8zxiT9-2IcDl1o32o.roa
File: R0W0NRhjch8zxiT9-2IcDl1o32o.roa (raw, json)
Hash identifier: hbu/2es9dHAHS/74WPwDN8M95BwEtelbbOZfGujOlxU=
Subject key identifier: 47:45:B4:35:18:63:72:1F:33:C6:24:FD:FB:62:1C:0E:5D:68:DF:6A
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 018CC9BC379907D2C172D203EDB63A4C0FA9
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/R0W0NRhjch8zxiT9-2IcDl1o32o.roa
Signing time: Tue 02 Jan 2024 10:33:24 +0000
ROA not before: Tue 02 Jan 2024 10:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57118
IP address blocks: 185.104.19.0/24 maxlen: 24
2a00:f740:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:37:99:07:d2:c1:72:d2:03:ed:b6:3a:4c:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jan 2 10:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4745b4351863721f33c624fdfb621c0e5d68df6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:10:5f:be:5b:1d:31:18:24:10:d4:87:7a:
d8:cd:c2:50:03:35:1a:4e:c5:c4:bf:9a:e6:d9:44:
aa:39:70:5c:f4:9c:78:11:bc:38:72:90:cf:00:d8:
be:d4:a3:68:50:1a:3d:9c:50:b0:69:28:5e:c5:57:
45:78:59:9e:36:a5:3c:2b:89:53:d3:f8:03:fa:ff:
e1:1a:7a:29:03:8d:07:56:c9:2d:86:35:ba:8e:35:
4e:2b:7d:cc:f4:61:09:ce:98:ab:28:67:76:4f:b6:
1f:60:8f:1a:36:5d:3f:90:66:57:58:3b:72:7a:9e:
07:eb:dc:d6:95:5a:99:53:29:d5:9b:d6:48:45:12:
10:62:11:0d:8f:35:79:2f:d1:98:86:37:b5:9c:c8:
90:d7:3f:e0:79:93:45:48:6f:62:ca:a3:25:f5:47:
b9:95:b8:a8:46:8d:f9:fa:19:a2:76:37:0d:2c:fe:
6a:a6:d7:71:f7:61:5a:9b:83:cc:21:39:73:e6:cf:
04:7c:1e:5c:53:f2:70:6c:a8:66:3a:44:1a:0a:9d:
3f:67:b7:fd:ad:c6:39:6f:ef:4c:ee:5d:07:ff:f3:
57:d1:56:bd:51:e3:d4:c4:b1:84:72:0c:60:4d:d6:
b4:a4:d3:ea:4f:cb:17:a4:cd:98:de:c1:30:93:a5:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:B4:35:18:63:72:1F:33:C6:24:FD:FB:62:1C:0E:5D:68:DF:6A
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/R0W0NRhjch8zxiT9-2IcDl1o32o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.19.0/24
IPv6:
2a00:f740:400::/48
Signature Algorithm: sha256WithRSAEncryption
24:15:69:56:9d:a7:c1:e3:27:16:37:4e:39:0a:dd:5a:36:f3:
55:b1:80:4e:ea:e3:c1:24:5d:3b:0f:37:45:2a:82:3d:f0:b1:
e2:51:b8:7e:30:1f:6d:8a:3e:bd:1e:03:6b:15:f9:38:cb:ec:
b2:4d:af:a9:df:3a:2b:7c:0b:d3:da:16:bf:23:b6:79:5c:06:
8d:9e:3d:4b:1d:9d:2b:95:50:15:4a:5a:0b:7c:8b:89:38:02:
f2:b3:bc:d6:af:51:1b:77:29:3c:44:8c:62:40:ca:e0:5c:c9:
da:5d:56:65:d0:b6:00:6c:fc:6d:43:0e:04:ee:a7:5b:68:34:
0d:e3:e0:cf:3a:a2:9a:e9:cd:36:e8:0b:89:7b:ab:88:ec:74:
30:87:35:02:15:23:29:7a:89:70:44:3c:71:a4:87:ac:e9:8e:
43:b5:66:aa:35:64:9f:f0:2a:ae:da:31:69:af:50:1d:8c:e6:
4d:1d:3f:c2:b5:fb:d5:42:c4:b1:21:47:c0:4e:cc:60:e9:fd:
b8:0d:aa:45:de:8d:e5:b5:06:ed:0c:e9:1f:1d:ec:42:f9:70:
e2:26:c7:f0:ba:80:71:45:43:0f:d8:bd:be:c2:a0:e1:28:1c:
d0:87:a4:89:34:51:7d:cd:2b:8d:ae:fa:a7:42:7a:f8:ff:b2:
58:dd:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 09:01:23 2024 by rpki-client on console-ams.rpki-client.org