Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/AjkER9ZEarfMlx4ydtfMWhNmc8M.roa
File: AjkER9ZEarfMlx4ydtfMWhNmc8M.roa (raw, json)
Hash identifier: kwxmWl7B1rYrFtJ50yeXGPD/rEdqgjpG9k5TbQE5jR8=
Subject key identifier: 02:39:04:47:D6:44:6A:B7:CC:97:1E:32:76:D7:CC:5A:13:66:73:C3
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 018CC3B6704EBBCFD60143416762B58DF692
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/AjkER9ZEarfMlx4ydtfMWhNmc8M.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41061
IP address blocks: 185.222.182.0/24 maxlen: 24
185.222.182.0/23 maxlen: 23
185.222.181.0/24 maxlen: 24
185.222.180.0/24 maxlen: 24
185.222.180.0/22 maxlen: 22
185.222.180.0/23 maxlen: 23
185.222.183.0/24 maxlen: 24
2a0c:9800:9800::/48 maxlen: 48
2a0c:9800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:70:4e:bb:cf:d6:01:43:41:67:62:b5:8d:f6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02390447d6446ab7cc971e3276d7cc5a136673c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:89:d8:0f:f3:22:80:09:9a:c8:cd:5c:fa:
5f:74:34:34:65:ab:60:33:77:9a:a1:72:e2:4f:8d:
63:fa:eb:1b:49:80:b8:80:c4:48:ed:47:d2:b5:58:
a2:70:3e:2b:70:2d:39:48:12:f8:55:11:94:70:c0:
fd:3a:ee:92:18:88:28:4c:77:bb:5f:be:65:63:84:
62:80:cd:98:1b:c3:73:8e:5e:7f:e4:1a:47:49:98:
cb:c6:05:00:f5:1b:28:7d:8a:fb:1f:3d:2b:93:f0:
ac:c4:bd:95:d2:e2:6f:81:44:ca:7c:d0:e3:46:17:
d7:fc:9c:9a:9e:5c:6f:fb:e5:09:52:c6:67:84:73:
92:26:51:39:ba:ff:72:18:9e:f4:d5:58:45:92:3b:
21:66:0e:d4:27:58:d8:8b:cd:43:6f:89:81:21:6b:
25:7d:e1:db:c7:2c:03:02:4a:d2:27:2c:e5:b0:52:
d2:8d:80:81:cb:78:4a:51:d3:66:19:22:5c:63:a0:
ba:2a:19:85:8c:c9:b8:57:80:2a:e5:fe:bf:c9:87:
d7:13:2d:e1:03:91:ff:e4:b3:3b:91:83:31:cd:ad:
68:29:6d:49:33:58:a6:8b:3f:38:d5:cc:a9:f7:b7:
73:69:12:52:1b:61:15:46:12:32:81:a8:54:4c:46:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:04:47:D6:44:6A:B7:CC:97:1E:32:76:D7:CC:5A:13:66:73:C3
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/AjkER9ZEarfMlx4ydtfMWhNmc8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.180.0/22
IPv6:
2a0c:9800::/29
Signature Algorithm: sha256WithRSAEncryption
c5:95:42:09:0d:1e:a6:19:da:de:d1:0e:5a:30:b6:c5:1b:55:
2d:04:bf:32:62:28:7c:e0:94:88:a5:26:66:8f:c7:8e:90:d5:
ab:22:55:ad:1c:24:87:b7:49:a3:11:a5:e4:22:3c:00:94:df:
4e:12:5d:4a:6e:af:24:00:48:4e:cc:9d:35:68:01:15:31:fd:
bd:6d:02:f9:0a:32:4c:09:ae:d8:70:74:d9:89:3d:b0:8f:e0:
4b:6c:c1:d6:c4:4d:73:ea:27:d6:91:70:a7:2b:bf:6e:6b:0c:
a6:ad:81:4a:bd:36:60:30:82:6d:6e:82:20:b7:51:d6:f2:af:
b9:b6:ae:f5:6a:d9:88:b2:6f:bd:d2:f0:db:3a:63:79:8a:f5:
4b:52:34:f9:a4:25:26:d0:1f:69:dd:e6:a3:4e:37:70:59:40:
39:28:46:11:3e:81:a6:23:68:fb:fc:70:64:f5:92:12:62:b8:
1e:68:a3:79:72:a5:bd:8c:3a:3f:a4:c0:4b:60:7f:4a:0b:e6:
f2:89:7a:ee:6c:01:b4:62:80:b4:68:d4:db:b1:d1:9d:93:90:
78:89:dc:9d:8a:b6:42:f1:ea:b5:61:cb:98:44:d5:a0:6f:40:
30:44:b1:44:06:b9:c1:71:b7:d1:f2:b4:56:69:2e:7b:c8:e3:
db:ec:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:29 2024 by rpki-client on console-fra.rpki-client.org