Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/0pLjt_iGUwCy8lUMaCxayungHX0.roa
File: 0pLjt_iGUwCy8lUMaCxayungHX0.roa (raw, json)
Hash identifier: iM0m4tIeBHJdvQkFR49m8a9ab5wm/IP7Ptbht7zfuzg=
Subject key identifier: D2:92:E3:B7:F8:86:53:00:B2:F2:55:0C:68:2C:5A:CA:E9:E0:1D:7D
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 018CC795234D82D106B1D39AAABE2EF08D49
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/0pLjt_iGUwCy8lUMaCxayungHX0.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25291
IP address blocks: 185.245.103.0/24 maxlen: 24
185.245.101.0/24 maxlen: 24
185.245.102.0/23 maxlen: 23
185.245.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:23:4d:82:d1:06:b1:d3:9a:aa:be:2e:f0:8d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d292e3b7f8865300b2f2550c682c5acae9e01d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:98:32:fd:d0:b0:b0:48:eb:07:d3:97:71:
a2:b1:c3:10:38:f1:80:13:49:aa:97:3f:18:68:4c:
d2:fc:59:eb:10:65:c7:ed:dc:9f:0e:54:6e:b8:e8:
58:c4:99:b8:32:5b:53:79:5d:48:f2:64:96:d6:bb:
00:16:db:37:30:fa:c6:56:dd:f2:6a:4c:dd:bf:28:
47:63:67:49:fc:34:6e:57:de:8c:e8:91:d4:d5:d6:
d9:69:29:25:2d:08:a7:92:e9:be:e7:b6:92:db:c3:
8b:fa:db:fa:b8:ea:3c:50:ee:8b:5d:05:16:5e:d2:
13:01:77:38:14:09:a1:d3:74:20:66:ba:e2:d6:c8:
96:3f:65:0b:f5:be:02:fe:f7:e4:88:ae:48:c9:0f:
6f:24:5e:de:10:19:6c:d5:a3:14:6d:35:01:8b:a1:
14:59:e1:12:07:43:b7:e1:c3:1a:89:d1:b2:80:d6:
28:8e:a1:b7:ca:81:35:57:d3:3d:5c:e6:46:f0:aa:
d8:06:04:16:fb:e0:0f:71:c3:37:0b:31:da:bb:79:
ea:4d:76:55:fe:71:cd:ce:00:48:6e:aa:20:07:ff:
78:d9:fa:49:c0:01:06:c5:c5:f1:3c:c4:80:13:74:
ce:bd:b2:75:6b:f4:2b:29:5a:1b:93:7a:10:d2:ae:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:E3:B7:F8:86:53:00:B2:F2:55:0C:68:2C:5A:CA:E9:E0:1D:7D
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/0pLjt_iGUwCy8lUMaCxayungHX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.101.0-185.245.103.255
Signature Algorithm: sha256WithRSAEncryption
16:0c:b0:8c:cd:83:84:53:ca:4f:29:d9:88:5f:76:89:52:d2:
a5:f7:22:7f:5b:c8:45:56:a8:2d:da:3a:4f:b2:37:33:6f:c1:
e1:29:f7:a8:81:56:ae:a8:d2:02:98:0e:cb:22:3e:17:72:d8:
dd:fe:18:92:f0:ee:4d:45:d8:e3:b5:7c:b6:e8:64:fb:99:c5:
0e:5b:75:80:ae:11:f9:34:ce:50:37:4d:03:03:1b:d9:f7:f5:
50:45:ac:17:8b:17:8c:49:93:ad:d7:65:38:a1:38:26:fd:32:
7e:00:a1:d6:05:7e:e7:a2:44:5c:81:6b:ce:3a:15:25:4d:c2:
30:6f:31:85:d6:f0:5d:04:37:f6:5c:41:fa:15:ea:45:a7:21:
b9:20:cd:5d:03:7a:ba:d2:1a:35:0a:30:b9:16:4e:79:ba:91:
ec:43:7f:06:d7:4a:27:54:93:36:a5:71:7b:a8:22:6a:10:a0:
cd:8c:06:25:a7:ff:d3:64:e0:d2:15:3a:de:d5:bc:b5:44:31:
e1:3b:72:b7:9e:1c:97:92:0c:1b:e6:fc:04:48:d9:51:99:38:
a4:d1:9f:9d:86:9a:1f:90:3a:51:8f:df:af:61:9c:bf:ed:fc:
a0:e9:37:3f:56:84:b8:41:8c:66:5a:ef:56:7d:30:b1:2f:ee:
05:43:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:29:02 2024 by rpki-client on console-fra.rpki-client.org