Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/hRa5ImbBqEuxjYLqU3W9bjM1EI4.roa
File: hRa5ImbBqEuxjYLqU3W9bjM1EI4.roa (raw, json)
Hash identifier: susdi2MqdR/1ZnKufxs+EYQWIgkUc8GOG4ujauI2EI8=
Subject key identifier: 85:16:B9:22:66:C1:A8:4B:B1:8D:82:EA:53:75:BD:6E:33:35:10:8E
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 018CC56E1B394C9F6194FB27E4EA3BE5DD03
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/hRa5ImbBqEuxjYLqU3W9bjM1EI4.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62102
IP address blocks: 185.47.179.0/24 maxlen: 24
185.47.178.0/24 maxlen: 24
185.47.178.0/23 maxlen: 23
185.47.176.0/22 maxlen: 22
185.47.177.0/24 maxlen: 24
185.47.176.0/23 maxlen: 23
185.47.176.0/24 maxlen: 24
2a01:7ce0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1b:39:4c:9f:61:94:fb:27:e4:ea:3b:e5:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8516b92266c1a84bb18d82ea5375bd6e3335108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:f7:0e:65:82:3f:67:49:bc:59:43:5b:b0:
28:4c:64:60:9d:05:64:72:94:2e:ae:4f:ab:0d:8d:
52:fa:e4:0b:70:05:ea:97:20:fa:ea:5f:03:56:ff:
b6:3f:23:9f:47:4c:ab:8e:54:c7:ae:4f:7c:35:3f:
d8:e6:d8:cb:59:1a:6b:f5:28:08:13:54:21:9c:41:
27:5f:e9:f4:24:0b:61:66:cb:c7:ac:ed:ed:d3:8d:
79:aa:4c:a1:c3:32:14:8d:10:7f:a5:fa:ca:d2:0e:
b4:fb:93:60:46:56:fc:27:84:dc:2e:94:23:eb:bb:
31:bb:e5:55:7a:4c:b5:31:49:c6:a9:de:12:29:fb:
51:45:98:0b:06:50:73:2d:90:c7:b9:b7:cb:d4:9e:
3d:49:a3:38:6e:9c:94:09:01:22:31:cd:54:4e:b5:
13:24:4b:f5:64:89:d2:16:e2:ef:b5:82:c9:f4:75:
23:d4:c0:7a:c5:f0:9f:a9:ac:b1:96:61:f1:2d:f7:
f9:4a:f9:22:41:fb:e3:1f:8a:00:a7:a3:5f:3b:98:
5e:52:89:55:e0:47:a3:8b:14:ac:80:f5:ec:2e:c7:
7d:b6:e3:b7:7b:28:61:5d:51:3d:15:2b:89:bd:49:
05:f5:56:e7:6e:15:75:29:77:4c:ea:33:c5:e1:f5:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:B9:22:66:C1:A8:4B:B1:8D:82:EA:53:75:BD:6E:33:35:10:8E
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/hRa5ImbBqEuxjYLqU3W9bjM1EI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.176.0/22
IPv6:
2a01:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:13:e6:f7:ce:d8:b8:54:6a:5b:35:b6:55:4c:c8:84:26:1f:
0e:40:3d:e3:fd:3d:52:a7:2c:bf:25:22:4c:0b:0b:ea:9e:3e:
80:c8:4a:35:f0:86:df:11:57:47:06:87:f4:b3:8c:a7:a6:e8:
64:6c:c3:dc:70:d3:d1:c7:f4:74:98:db:7a:75:9c:27:62:c7:
0e:cd:59:8f:a5:29:41:bc:bf:39:ef:53:ea:0a:e0:54:52:52:
b5:8d:2b:3e:9f:5e:63:cd:cb:b0:8d:2a:87:3d:db:45:fc:0e:
8e:9a:50:90:b0:a7:b7:62:82:92:9e:e7:c6:fe:83:69:dc:e1:
09:ef:23:63:3a:89:02:d3:68:17:45:d7:f4:c0:45:6d:9e:49:
77:4a:0b:30:3c:0b:3a:1f:b0:2b:0f:d7:08:5d:f1:d2:c0:43:
6e:5e:5d:d0:62:6b:d2:44:f3:25:83:45:00:cd:36:67:7a:e0:
ec:18:be:7b:f0:55:08:db:56:c2:06:c3:ca:95:4c:c4:9f:47:
99:af:cd:76:fd:b1:c3:c8:42:94:47:7d:75:7b:bc:93:21:47:
89:86:1f:2c:7c:1c:a3:9a:9c:23:b9:60:59:65:96:bc:69:5b:
22:83:55:71:3c:59:62:c2:a0:59:f4:01:93:5a:57:1f:ee:7f:
6d:56:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:07 2024 by rpki-client on console-ams.rpki-client.org