Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/1-1hPho1XPvqmhMNCQAWN6hCR18w.roa
File: 1-1hPho1XPvqmhMNCQAWN6hCR18w.roa (raw, json)
Hash identifier: 6LHJetLayFyViJ7WA9RvcKnnCGk11bplhcCwf3gqYkg=
Subject key identifier: FB:58:4F:86:8D:57:3E:FA:A6:84:C3:42:40:05:8D:EA:10:91:D7:CC
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 018E9F4A85A7451AE9594BFFBCEC87467D03
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/1-1hPho1XPvqmhMNCQAWN6hCR18w.roa
Signing time: Tue 02 Apr 2024 14:50:45 +0000
ROA not before: Tue 02 Apr 2024 14:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 85.187.128.0/19 maxlen: 24
114.129.128.0/19 maxlen: 24
185.52.148.0/22 maxlen: 24
185.62.136.0/22 maxlen: 24
185.132.4.0/22 maxlen: 24
185.133.20.0/22 maxlen: 24
185.141.188.0/22 maxlen: 24
185.143.44.0/22 maxlen: 24
185.146.20.0/22 maxlen: 24
185.146.28.0/22 maxlen: 24
185.148.44.0/22 maxlen: 24
185.148.128.0/22 maxlen: 24
185.149.112.0/22 maxlen: 24
185.151.48.0/22 maxlen: 24
185.160.65.0/24 maxlen: 24
185.160.66.0/23 maxlen: 24
185.166.145.0/24 maxlen: 24
185.166.146.0/23 maxlen: 24
185.168.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:4a:85:a7:45:1a:e9:59:4b:ff:bc:ec:87:46:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Apr 2 14:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb584f868d573efaa684c34240058dea1091d7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:ec:b4:1c:11:e2:2d:d9:e4:6c:96:9c:1b:
4f:55:f9:7b:48:56:dc:ff:a3:91:12:80:ad:44:6c:
68:96:b2:a3:1c:68:59:bd:51:91:61:ab:aa:d6:92:
56:66:9d:03:51:d9:75:67:39:9e:78:12:a0:ad:ba:
a6:88:de:bd:46:77:84:98:32:b1:ad:c7:07:0f:60:
96:e1:ca:b4:5a:34:b1:87:d4:48:b0:8d:fd:f0:47:
8d:b7:28:ab:e2:3a:db:67:a0:bc:29:40:87:9b:54:
24:e7:91:85:75:ff:75:1c:4e:b5:0b:ca:82:d2:f2:
97:44:4e:fc:4d:fb:de:5f:38:33:fb:a5:91:6a:86:
82:45:59:d7:25:e2:37:32:f9:aa:72:f1:59:c1:ec:
2e:7b:74:e3:7a:05:0e:fd:a2:f1:b4:c4:28:80:d7:
6d:8e:dc:0f:ee:d1:53:08:ea:46:46:d6:72:92:06:
42:d9:fd:0c:5b:30:ec:fa:2a:a6:a6:fa:bd:fc:8b:
34:5c:ce:75:00:08:4d:a0:ef:68:f6:e1:4e:43:62:
72:01:5b:c3:11:8b:bb:03:97:10:c6:e3:f3:b8:7a:
65:c6:f9:ce:d9:40:9a:48:a6:25:0e:d2:02:cf:17:
6b:dd:4f:16:b8:42:de:81:dc:c1:e1:99:8a:61:28:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:4F:86:8D:57:3E:FA:A6:84:C3:42:40:05:8D:EA:10:91:D7:CC
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/1-1hPho1XPvqmhMNCQAWN6hCR18w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.128.0/19
114.129.128.0/19
185.52.148.0/22
185.62.136.0/22
185.132.4.0/22
185.133.20.0/22
185.141.188.0/22
185.143.44.0/22
185.146.20.0/22
185.146.28.0/22
185.148.44.0/22
185.148.128.0/22
185.149.112.0/22
185.151.48.0/22
185.160.65.0-185.160.67.255
185.166.145.0-185.166.147.255
185.168.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:fd:fd:f9:35:36:1f:04:d7:24:5e:70:81:53:9a:7d:d7:56:
68:01:42:3a:4f:c8:f1:94:70:32:9b:37:b8:a9:07:53:cb:67:
d9:b4:c7:e0:77:81:bf:95:8f:6c:8a:e5:7f:7d:f0:d6:57:9d:
58:57:78:d4:06:d6:13:ab:90:e4:45:f9:ba:48:ff:7b:50:a5:
3c:a4:fe:0f:5e:98:25:ef:c1:0b:f1:82:6c:7a:92:45:b1:18:
cd:4a:17:a1:59:2c:c6:b0:52:cb:51:f8:e8:b3:57:1b:eb:6f:
91:4b:c0:b9:2a:70:5a:44:e3:75:24:83:69:d5:4c:5e:ef:85:
b9:3b:c2:14:32:66:f4:99:1d:db:40:70:a7:d0:a4:40:d0:82:
f3:66:52:55:06:3e:e8:8a:42:f3:d2:f8:e5:d4:4e:14:50:a7:
03:d4:ee:58:09:96:dc:f6:0e:b6:06:4f:63:5c:c3:36:e1:12:
48:2f:1f:f7:c5:5a:5c:7c:26:d1:5e:6d:34:94:71:e6:9b:ff:
fc:8b:9b:7f:7b:b6:f9:f7:e4:52:40:41:4e:be:3c:ab:82:4b:
ba:b4:a8:11:04:19:3f:d8:8d:0a:64:f9:d0:cf:6a:84:08:b6:
68:e7:fa:db:2e:2f:0e:2d:2a:3c:38:d1:84:11:4e:ac:74:b9:
76:75:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:19:14 2024 by rpki-client on console-ams.rpki-client.org