Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/g39fXJWWgdCYIuc9NcTAEnSqFg8.roa
File: g39fXJWWgdCYIuc9NcTAEnSqFg8.roa (raw, json)
Hash identifier: Pn0kxOQJZO5SyvSjWpMJbvsc56KeKH5wdJMaQRT8/1w=
Subject key identifier: 83:7F:5F:5C:95:96:81:D0:98:22:E7:3D:35:C4:C0:12:74:AA:16:0F
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 018CC6B78E6A8C949B0504333C2447BE4FEC
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/g39fXJWWgdCYIuc9NcTAEnSqFg8.roa
Signing time: Mon 01 Jan 2024 20:29:27 +0000
ROA not before: Mon 01 Jan 2024 20:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.1.74.0/24 maxlen: 24
2001:7f8:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8e:6a:8c:94:9b:05:04:33:3c:24:47:be:4f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 1 20:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837f5f5c959681d09822e73d35c4c01274aa160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:79:1c:82:6e:5d:6c:bc:32:63:b2:9a:66:
fa:a8:d7:09:17:43:21:c9:99:19:f1:bc:53:20:1c:
07:18:6d:06:b6:84:17:f7:4f:77:6f:db:56:8a:cb:
5e:e8:9e:ac:56:bc:a6:b0:38:30:97:fb:23:8a:d7:
af:21:f9:87:95:3b:5e:39:d3:f2:93:59:41:a8:0c:
88:15:7e:c4:41:5a:15:75:11:f8:62:06:92:b8:a7:
6f:b3:84:00:ce:25:0d:cf:37:1b:cc:71:cb:c8:cd:
6a:5c:dd:83:f9:8e:f7:e5:95:42:b2:8d:3d:9a:5c:
e7:1c:4c:82:e6:8c:be:c4:b0:89:5c:3e:05:c6:07:
a7:d4:00:8f:da:aa:41:bb:13:5b:34:b7:6c:9a:11:
12:26:b5:68:ce:82:17:23:53:55:37:54:a6:a5:c5:
7a:aa:e5:dd:fa:d2:1a:2c:28:ab:b5:46:4b:e6:f6:
18:61:73:c7:cc:21:f2:20:53:a9:bb:d7:20:93:10:
b6:a2:b7:8f:63:a4:d7:dc:3d:1c:08:68:bc:89:1d:
e7:10:b5:4f:15:01:6e:24:db:27:d8:5e:ef:ae:92:
75:f2:38:e2:91:2d:93:4f:08:58:73:a8:de:5f:9b:
69:f1:10:d2:4d:e1:43:38:a8:92:f1:86:d1:f3:01:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:5F:5C:95:96:81:D0:98:22:E7:3D:35:C4:C0:12:74:AA:16:0F
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/g39fXJWWgdCYIuc9NcTAEnSqFg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.74.0/24
IPv6:
2001:7f8:a5::/48
Signature Algorithm: sha256WithRSAEncryption
2e:90:56:f9:73:6e:e0:d5:34:99:40:c2:bb:87:61:ef:e1:1b:
6a:a5:a9:36:83:6d:1c:f6:6a:68:4d:ab:ec:82:8b:90:07:6e:
c0:02:78:2d:7c:ca:6f:be:ce:b8:4c:10:02:43:29:60:be:57:
88:0c:be:de:43:20:d4:53:ed:64:58:4e:e4:73:32:dd:bf:71:
ca:5e:ac:cb:98:c5:a0:7c:80:ca:20:e5:41:40:e1:49:18:2b:
45:39:bd:99:c5:0c:06:0a:16:fd:5c:f8:25:0b:e9:88:da:cc:
82:9c:40:ff:72:d5:38:0e:d0:f1:f7:45:09:4d:aa:02:61:16:
f9:d0:22:98:2c:80:90:f8:d8:d1:cc:08:8a:b7:09:af:c2:cb:
0f:dc:42:4b:92:2f:43:b9:71:61:0a:12:a6:0a:7e:35:82:dc:
36:c3:d4:2a:da:03:ac:37:fa:a3:3e:c2:c6:61:8c:5f:b6:c7:
c9:1f:f5:4a:c0:8c:b5:57:4d:fb:ce:e2:95:3e:b2:95:55:5a:
59:f2:24:75:de:df:cc:f7:0d:1f:03:24:c6:c2:9d:fd:05:96:
4d:82:6e:2c:53:95:57:39:c6:fe:56:ed:b0:65:2f:5d:e4:ae:
ee:fb:b2:c5:32:d4:98:ca:f5:55:25:b7:2f:25:64:a9:e8:b9:
99:2d:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:00:43 2024 by rpki-client on console-fra.rpki-client.org