Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/mQ8h2KlS69fpeKEsuUfdBgNeYoM.roa
File: mQ8h2KlS69fpeKEsuUfdBgNeYoM.roa (raw, json)
Hash identifier: gBADzJh5oowWP6KF0LRzsIxDqB6wFTmL6f9EzA8OSEg=
Subject key identifier: 99:0F:21:D8:A9:52:EB:D7:E9:78:A1:2C:B9:47:DD:06:03:5E:62:83
Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial: 018CC8010A1D45675C02C0A9DF46AAB4D9F6
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/mQ8h2KlS69fpeKEsuUfdBgNeYoM.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206471
IP address blocks: 185.185.172.0/24 maxlen: 24
185.185.173.0/24 maxlen: 24
185.185.175.0/24 maxlen: 24
185.185.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0a:1d:45:67:5c:02:c0:a9:df:46:aa:b4:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990f21d8a952ebd7e978a12cb947dd06035e6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:56:98:2c:46:de:81:e9:8b:b5:a5:bd:61:
4e:dd:53:ca:8a:cc:43:6e:63:cc:cc:fc:5e:7a:16:
cd:ac:34:84:76:bb:b6:a2:97:db:ba:48:ee:49:17:
05:40:26:93:69:7c:b3:98:3e:d8:b5:cc:5f:b7:be:
cc:be:f4:64:7c:f2:92:68:d5:be:97:e4:3c:64:c3:
b5:05:ff:a6:1d:be:9c:63:11:30:f2:3b:3f:2f:98:
71:f0:91:22:bc:82:f3:fa:71:c4:f8:10:cd:3f:64:
54:3b:1c:42:75:28:48:1b:48:fe:59:31:fc:ae:d0:
8a:d9:cf:fc:b9:54:cb:da:f4:9d:85:bf:0d:c1:35:
3a:1c:bc:3d:80:f0:49:32:64:a9:be:e3:3b:03:78:
6f:ff:60:7e:e6:dd:31:25:d5:ff:18:f5:6e:61:cb:
f5:ae:54:13:35:57:28:68:ba:be:3f:28:99:ab:65:
12:68:ff:da:b9:4c:cb:ab:9f:60:1e:cd:ab:c9:a2:
6d:fc:a2:cb:6a:a3:6d:89:d8:78:63:ed:af:fe:bf:
29:51:63:cd:26:d1:f5:45:16:7f:e2:32:d7:f4:31:
0d:61:91:5c:5c:b2:6a:20:46:9b:77:d9:45:bf:da:
80:60:a8:10:7c:e1:25:68:c1:d5:b7:9b:46:e6:d6:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:21:D8:A9:52:EB:D7:E9:78:A1:2C:B9:47:DD:06:03:5E:62:83
X509v3 Authority Key Identifier:
keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/mQ8h2KlS69fpeKEsuUfdBgNeYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:22:9d:28:e8:5d:30:c3:b6:04:13:e8:f8:1e:86:89:c3:bd:
9e:f2:79:ee:27:2d:a4:4c:7c:45:2a:ca:62:7f:8f:b7:a2:d0:
f2:c1:37:e9:41:80:fa:4a:dd:23:cb:74:e7:be:12:e1:21:91:
2c:d3:d4:81:bb:b4:27:8a:df:a8:77:9c:93:2a:13:ac:45:10:
3c:00:02:01:ab:d7:eb:3a:d3:61:ba:45:0d:e8:63:63:dd:0c:
7e:d6:10:b3:48:90:03:df:35:0d:8f:db:48:28:3d:3f:22:ec:
58:80:f0:cc:25:d9:9b:2c:e3:ee:50:b2:63:3a:65:09:4e:40:
8a:9d:8f:6d:0e:a7:3e:22:3d:4c:47:68:a7:73:30:ee:e7:1f:
72:ba:24:ad:6c:16:8f:82:fc:c9:24:58:50:40:0c:5d:5f:47:
ba:a3:b9:32:1f:12:9e:e3:14:f4:b5:63:2c:3b:20:a0:6f:c2:
bf:fd:28:e5:53:cc:d6:d8:1d:eb:bc:f8:2b:d3:20:d4:39:37:
d6:24:14:50:48:28:7e:df:4c:e1:01:9b:dd:7b:ea:9d:80:ff:
a5:d6:aa:68:1e:9d:da:15:36:d1:bb:15:f6:ff:9c:bb:bc:ee:
f5:01:77:1f:60:f3:fe:be:e6:ea:cc:de:a5:77:30:68:cd:8a:
9f:34:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:24:25 2024 by rpki-client on console-fra.rpki-client.org