Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/KF1_Srsm8X7gwhJzeugwZXJ8yGo.roa
File: KF1_Srsm8X7gwhJzeugwZXJ8yGo.roa (raw, json)
Hash identifier: ZiXCC6ZAvhLs+AuLzCZy+sxexjUl3ZQ7qDv01YE9qUI=
Subject key identifier: 28:5D:7F:4A:BB:26:F1:7E:E0:C2:12:73:7A:E8:30:65:72:7C:C8:6A
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 018CC64A97FFF3A31E82247EBC4728DAD499
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/KF1_Srsm8X7gwhJzeugwZXJ8yGo.roa
Signing time: Mon 01 Jan 2024 18:30:26 +0000
ROA not before: Mon 01 Jan 2024 18:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.164.120.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.98.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:97:ff:f3:a3:1e:82:24:7e:bc:47:28:da:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 1 18:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=285d7f4abb26f17ee0c212737ae83065727cc86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:14:53:e5:9b:a3:fe:cb:66:9b:3c:a4:a5:
5b:6d:07:28:4d:50:16:ee:48:a6:70:7d:bc:0a:fc:
25:c1:b6:24:d1:7c:61:46:e0:99:35:26:0b:12:99:
aa:26:43:e0:c7:50:81:32:33:12:29:2a:65:95:6a:
84:ec:77:6f:f9:58:63:41:7a:d7:c3:6c:aa:c0:e4:
77:53:91:8a:8f:e8:1d:f2:fb:2a:a5:a3:bc:14:da:
8d:59:d8:7c:fd:f2:67:a9:84:5a:dd:52:55:60:b5:
b0:bd:67:80:a4:b9:c5:f8:a4:9b:09:f5:ab:9b:19:
1e:a9:ba:69:03:8f:64:64:a4:0d:de:9d:a4:f6:89:
3c:2b:e1:8a:25:de:27:7f:15:fd:28:cc:f8:de:10:
82:d5:e2:94:f1:ce:6b:0f:7c:10:86:d4:cd:ef:d3:
b1:f2:56:f3:6a:54:9b:23:0e:27:ed:da:47:36:f6:
52:8a:ff:aa:aa:7e:57:12:3d:12:05:85:a9:6f:84:
e5:5e:0f:38:67:f9:6a:63:f9:46:3f:48:34:52:2e:
24:e2:c8:58:50:d0:50:70:66:92:76:51:80:d4:f3:
f6:05:36:48:68:e7:d9:f0:7c:4f:7b:7f:3a:6c:ea:
a2:06:d5:da:b5:37:31:89:8d:01:22:4d:1e:08:cd:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:7F:4A:BB:26:F1:7E:E0:C2:12:73:7A:E8:30:65:72:7C:C8:6A
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/KF1_Srsm8X7gwhJzeugwZXJ8yGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0-185.164.122.255
185.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f4:98:e5:24:03:68:68:2e:6b:b8:20:91:ca:e9:26:d1:fc:
30:3d:4b:63:1c:5a:5d:fe:3e:b9:9a:c7:24:4b:c7:e4:0d:e1:
41:37:ed:52:61:11:2d:4e:0e:1c:41:f8:23:3b:ab:0d:27:50:
08:44:f1:ab:19:b7:12:fa:80:5b:83:76:2a:c0:ad:ca:be:00:
7f:69:c1:94:9e:87:ec:2c:2f:95:8a:e5:d2:44:bb:c6:b2:76:
f2:c9:82:79:cf:3e:ff:fc:12:3d:70:9d:ee:34:c8:5f:bc:f7:
8c:ea:1e:34:0e:75:6b:08:b0:51:45:8e:32:ad:1f:2a:5a:83:
d4:ae:d4:d7:7b:83:d6:9f:51:fe:8c:fa:a4:df:6e:4a:2f:1e:
11:64:fc:2f:13:14:79:a3:e5:25:ae:91:38:52:55:f2:a3:7f:
89:31:11:d1:eb:90:a6:ae:cf:f8:c2:06:0c:8e:dd:95:ee:a2:
01:74:d9:62:53:71:5d:3f:32:e4:02:0c:95:17:62:ef:09:88:
2b:11:97:73:40:9c:a8:56:49:66:11:70:ba:cb:6e:0a:ea:ef:
d2:c2:43:58:24:66:09:ab:f8:cd:42:54:9d:46:b3:42:06:96:
fa:22:19:f4:51:02:25:c3:01:00:ac:74:99:67:28:74:58:c7:
8f:63:c0:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:19:22 2024 by rpki-client on console-ams.rpki-client.org