Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/icFqrT8PRZHzG-JAxbIle0R2gG4.roa
File: icFqrT8PRZHzG-JAxbIle0R2gG4.roa (raw, json)
Hash identifier: HoecJjI8vvZo6U09p9tOIqICsZKJUB4rQcSf0MixLTs=
Subject key identifier: 89:C1:6A:AD:3F:0F:45:91:F3:1B:E2:40:C5:B2:25:7B:44:76:80:6E
Certificate issuer: /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial: 018CC794E52C1D96C1C6709F08932FCE2495
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/icFqrT8PRZHzG-JAxbIle0R2gG4.roa
Signing time: Tue 02 Jan 2024 00:31:13 +0000
ROA not before: Tue 02 Jan 2024 00:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49188
IP address blocks: 185.163.245.0/24 maxlen: 24
185.163.246.0/23 maxlen: 23
185.163.246.0/24 maxlen: 24
185.163.244.0/24 maxlen: 24
185.163.244.0/22 maxlen: 22
2a10:9d00::/29 maxlen: 29
2a10:9d00:2::/48 maxlen: 48
2a10:9d00::/48 maxlen: 48
2a10:9d00:3::/48 maxlen: 48
2a10:9d00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e5:2c:1d:96:c1:c6:70:9f:08:93:2f:ce:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Validity
Not Before: Jan 2 00:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89c16aad3f0f4591f31be240c5b2257b4476806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:78:12:22:3e:fa:34:0f:c0:f5:fc:fa:55:
bb:b1:bd:f7:8f:c6:85:a0:0c:52:58:21:4a:24:d5:
c1:bf:51:da:85:1b:ea:64:62:a8:20:91:da:7a:a9:
e5:22:df:e3:64:96:d9:87:96:c5:72:0e:a2:e2:22:
c9:f1:bd:b5:d7:5e:71:1e:7a:fd:0f:1a:4f:c3:78:
ee:20:e8:8d:a6:16:b0:fc:5f:d3:db:5c:99:a7:34:
9e:13:53:92:54:55:73:1f:1d:a9:60:57:6d:6b:5e:
e4:70:4d:cf:86:4c:be:07:80:e2:d5:04:1f:fe:ab:
79:00:8d:a5:83:5c:c5:8c:ee:41:73:b1:b0:b1:95:
e9:c0:7a:f9:b6:fe:96:30:ca:97:fc:05:1d:9a:ee:
a3:89:de:f0:94:0b:23:67:16:d2:00:a8:c9:03:c5:
9a:ca:7c:30:16:6f:82:42:48:34:76:17:a2:91:2d:
93:79:b3:66:a7:1b:05:f5:70:1b:ba:7b:da:aa:c1:
64:ed:1f:74:99:69:fe:d3:39:bd:f3:ed:98:f1:9e:
0b:a7:b0:0d:7c:27:e5:de:d1:25:5b:72:cb:d3:e1:
95:95:0f:c2:a4:de:d5:39:b3:f9:c9:6b:51:ed:68:
11:26:af:16:fb:4a:c7:84:12:f7:a1:1b:fa:67:1c:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:6A:AD:3F:0F:45:91:F3:1B:E2:40:C5:B2:25:7B:44:76:80:6E
X509v3 Authority Key Identifier:
keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/icFqrT8PRZHzG-JAxbIle0R2gG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.244.0/22
IPv6:
2a10:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:52:87:34:64:36:ec:a9:ff:a8:de:5a:ed:73:da:c7:46:3f:
cf:64:50:7a:4c:a6:0e:7b:e6:0c:48:ee:cf:76:e3:a5:e5:0d:
be:b8:58:73:e3:ee:c1:57:69:6f:57:b1:83:90:92:76:cf:da:
16:f3:b4:82:61:93:07:71:98:be:b0:8d:01:b4:e8:3c:5a:1e:
ba:4e:98:92:83:26:f4:0d:ad:2a:cf:f2:6c:e8:5c:a6:8f:e8:
57:b7:b8:43:8a:72:04:43:f0:bd:3c:85:aa:a7:0f:55:f0:19:
a6:0f:70:45:1c:4c:b7:b1:0a:47:39:2f:ec:39:59:08:c4:f6:
fc:af:8f:c2:2c:a0:4e:97:9e:52:b4:24:09:ca:f1:19:ea:ef:
f6:c3:ac:d5:63:74:67:45:65:d0:b6:aa:15:25:b1:b4:cf:3a:
55:4f:9d:09:57:3d:8b:50:73:d5:d7:2a:b9:37:53:57:81:fa:
b0:d8:70:77:1c:6b:96:6f:23:3b:af:12:c4:bb:a1:c1:e9:21:
ac:1e:45:e5:04:4e:ee:14:93:23:14:10:eb:2c:73:f7:d6:dd:
90:41:b2:b2:19:2c:5d:97:9c:0a:1c:e9:e1:bc:50:90:64:43:
74:67:92:cd:3f:42:7e:6a:40:74:f0:04:19:7b:ea:8e:29:58:
b0:4b:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:40 2024 by rpki-client on console-fra.rpki-client.org